Error: rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
File:                     Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft (raw, json)
Hash identifier:          lEENp86uNwgApG0PTwwd98URTyqfYFvWVEPtfEN2d7s=
Subject key identifier:   3C:32:99:33:75:2A:7F:A0:EB:BE:7D:BF:C6:A8:AA:F6:47:B3:9F:F7
Authority key identifier: 05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4
Certificate issuer:       /CN=F36D65B9AF/serialNumber=05EBECE312991BE3C4EA9A54F8226695054683B4
Certificate serial:       0356
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
Manifest number:          0355
Signing time:             Sun 25 Oct 2026 04:18:00 +0000
Manifest this update:     Sun 25 Oct 2026 04:17:59 +0000
Manifest next update:     Tue 27 Oct 2026 04:17:59 +0000
Files and hashes:         1: Bevs4xKZG-PE6ppU-CJmlQVGg7Q.crl (hash: 4V+OANo0SGuTvNGsFoHcQB6PwZ1HVjqs/zYAWSXontY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D65B9AF, serialNumber=05EBECE312991BE3C4EA9A54F8226695054683B4
        Validity
            Not Before: Oct 25 04:17:59 2026 GMT
            Not After : Oct 27 04:17:59 2026 GMT
        Subject: CN=6add82f8-18c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:9f:d6:62:3a:7b:8a:52:34:27:25:2f:16:
                    40:a0:45:19:48:bf:e5:9e:cf:cd:ae:08:49:6a:75:
                    9a:5a:e3:35:db:23:fa:bb:c6:27:37:9c:55:a4:3a:
                    70:89:c0:fd:54:80:57:2e:66:7f:7a:d5:ec:55:7d:
                    59:fb:45:3a:40:e4:1a:92:1e:9c:a4:6a:02:3c:4c:
                    1b:84:ac:f8:2f:ab:8a:a0:6c:fa:bc:9d:8f:e4:0e:
                    84:0d:c0:3f:77:66:db:ea:d3:ce:7d:2d:ea:94:69:
                    89:61:fe:8d:a1:73:ee:ea:97:8e:93:52:dc:71:1c:
                    92:b2:78:dd:d2:90:0e:0c:47:6c:a8:37:1c:13:85:
                    06:99:c7:ca:9f:08:a8:36:50:78:f8:35:36:bc:c0:
                    90:5e:35:09:2c:8a:bd:2d:64:fb:1a:98:57:b5:a9:
                    3f:2d:ff:a4:62:76:62:9d:99:de:81:28:ce:f8:6b:
                    36:b3:f0:da:cb:22:74:29:6f:3c:6b:fd:07:6c:12:
                    aa:ba:d8:93:ac:c5:72:b5:9e:c2:88:a6:8f:1b:9e:
                    60:11:12:a4:5c:db:23:e4:21:46:0f:61:fa:93:cf:
                    ed:d8:a0:2f:75:98:f4:14:a6:0f:34:c6:96:df:1c:
                    43:fe:6f:fa:c3:ac:32:01:84:60:27:c2:cc:fc:9e:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:32:99:33:75:2A:7F:A0:EB:BE:7D:BF:C6:A8:AA:F6:47:B3:9F:F7
            X509v3 Authority Key Identifier:
                keyid:05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:8e:98:ce:61:74:22:1c:ad:10:61:0d:69:a4:f7:b4:dd:
         bb:6c:fc:6b:1f:73:b3:af:c8:bf:21:f2:84:13:5f:67:b4:b7:
         05:e2:00:c0:9a:eb:51:c4:22:28:f8:ec:e0:86:46:55:4d:5c:
         53:84:e3:2f:0d:13:e5:b5:2b:5a:a5:e3:8a:b2:51:5d:a4:3b:
         20:ac:1f:3e:4c:a6:6c:94:50:e3:02:87:78:e6:4c:f3:63:56:
         03:47:00:34:cb:ed:a6:2d:97:7d:fb:f4:67:cd:2b:e9:ff:8f:
         ab:ae:9a:97:b4:70:aa:5c:cb:2f:c6:b2:ea:f0:d3:11:af:50:
         7e:59:f7:9a:95:26:1e:58:68:9c:ab:c0:21:ac:29:df:c4:9a:
         4a:dc:da:59:bb:d3:79:88:a6:f0:c7:58:94:c5:a6:36:f2:6b:
         e7:44:67:cb:9b:79:d9:14:7c:42:cc:1c:3d:86:52:76:bd:00:
         1f:39:9e:36:54:a8:32:98:70:21:b8:b8:fa:a8:a1:ac:4a:b3:
         d2:f8:67:69:0a:5a:3a:82:d2:57:65:50:87:b0:0c:f5:6e:1f:
         bf:b7:b0:f3:f9:fb:ae:db:3b:cf:7a:b7:7b:36:9b:ec:0b:44:
         69:52:c3:de:45:95:22:bb:43:cf:8f:64:48:fe:b1:79:c3:82:
         df:b8:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:32 2026 by rpki-client