Error: rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
File:                     ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft (raw, json)
Hash identifier:          RWLSD7DkE3J3RBbEYuDe+DyJ6aqJO6XmcmVWAoHFdEU=
Subject key identifier:   7B:E4:26:F7:3D:69:A9:9A:9A:22:D2:F9:72:E9:FC:0E:5F:E9:B9:07
Authority key identifier: 22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74
Certificate issuer:       /CN=F36DD266AF/serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
Certificate serial:       011F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
Manifest number:          011E
Signing time:             Mon 26 Oct 2026 05:25:18 +0000
Manifest this update:     Mon 26 Oct 2026 05:25:18 +0000
Manifest next update:     Wed 28 Oct 2026 05:25:18 +0000
Files and hashes:         1: ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl (hash: i6xjzSc9mw6LJU+GI16+IJgmhjJ3BD5vuLDO6FPsRnw=)
                          2: CDA91C0EF21F11F09D0C95E1DAE4EC9C.roa (hash: i/Wi+caUXTG32H1sLXk5LlvkMGbjcNs/nOtlDeXv2gQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD266AF, serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
        Validity
            Not Before: Oct 26 05:25:18 2026 GMT
            Not After : Oct 28 05:25:18 2026 GMT
        Subject: CN=6adee43e-9838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e6:8d:49:47:6e:91:50:ee:87:2d:5d:f5:3c:
                    a1:85:77:35:2b:05:d3:58:d7:d6:20:f5:fe:2b:31:
                    79:e4:c2:22:e7:15:bd:7f:7f:0c:27:38:ff:f2:64:
                    db:80:88:57:2b:43:56:29:1d:af:91:70:1f:2a:cd:
                    41:a6:00:72:1a:5a:d8:54:ec:f3:35:d0:3f:1b:e0:
                    f7:6b:cb:33:94:f1:f0:00:5f:2e:52:cc:20:35:d1:
                    20:30:dd:22:a4:d7:04:26:48:33:51:ef:8d:4a:12:
                    5d:dd:6c:0b:5b:b0:6b:e8:6f:77:67:e1:0f:80:07:
                    ec:b0:88:f5:5d:6e:3f:8c:6f:ff:1a:e1:83:6d:1f:
                    0c:d0:2c:36:29:58:a5:82:6e:a4:ca:69:0d:08:21:
                    a5:96:55:6c:7b:33:4f:1f:7d:a6:ce:4f:f3:41:5c:
                    9f:d6:44:a4:31:9c:88:26:c8:2f:ce:3b:31:02:ef:
                    d7:26:a5:55:01:a4:5e:45:d4:a9:58:68:6b:b9:8d:
                    df:9f:74:bd:39:a2:7b:2e:e3:fd:1d:b7:cb:0e:6a:
                    0d:45:c7:d9:2a:34:23:3e:bd:46:64:de:f5:48:31:
                    85:9b:27:cc:60:36:aa:1c:04:a1:a3:4a:f1:df:d2:
                    57:2e:54:34:1a:9a:56:61:8f:ff:aa:09:e5:74:d7:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E4:26:F7:3D:69:A9:9A:9A:22:D2:F9:72:E9:FC:0E:5F:E9:B9:07
            X509v3 Authority Key Identifier:
                keyid:22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:29:b3:69:c7:bb:33:d0:95:59:51:e3:5f:bd:ba:23:67:ae:
         aa:d0:a2:e4:0d:56:c0:95:60:d6:3e:fe:cf:d9:12:5a:0b:98:
         5c:a9:d1:e8:27:a7:73:0e:4c:0c:a7:a8:b3:57:ff:56:0c:ec:
         bf:2e:52:f9:30:5d:06:20:e1:4a:87:3f:ba:4d:42:a5:51:8d:
         7f:9f:0b:35:a3:43:a0:85:5b:9c:60:09:92:de:e4:43:6e:94:
         6c:da:18:c8:de:02:85:e9:96:c5:e3:5e:de:f0:9a:9a:39:2c:
         52:d4:5b:7e:f1:10:c1:7f:96:99:3a:62:fb:bb:4b:73:0d:76:
         c2:b1:5d:e3:5e:dd:b8:22:cf:42:da:87:c8:2b:a1:b5:c0:27:
         3f:09:48:aa:6d:f0:fb:c2:6b:61:31:0e:6d:6b:fe:be:66:ef:
         a1:f4:a1:1f:35:22:92:9c:22:de:1a:34:19:26:8e:1d:be:ce:
         8c:e2:11:64:da:8e:57:77:bf:e7:bc:2f:9b:62:d3:c4:5e:0a:
         6e:56:7e:8c:dc:59:33:7b:16:1e:b3:2b:e7:1f:83:6c:0d:45:
         cb:1a:4e:05:0e:76:81:ad:5c:ea:38:0b:0f:8a:2f:fc:3c:c8:
         b6:52:2a:1c:a5:69:f4:ac:73:f2:c0:b8:0b:36:24:77:00:67:
         92:18:0f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:13:08 2026 by rpki-client