Error: rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
File:                     BinJnUdgwom4TNvs8bbBPPUl6q8.mft (raw, json)
Hash identifier:          uGFrRv0J7wdOFKGm6vRpRKr8iYOhuX2VAm9bKRyUxWg=
Subject key identifier:   C2:36:BC:CB:6A:BA:E9:CE:FB:A2:54:E0:F3:02:7A:BA:CA:5D:7E:45
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Certificate issuer:       /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial:       04DB
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
Manifest number:          04CB
Signing time:             Thu 10 Sep 2026 03:30:04 +0000
Manifest this update:     Thu 10 Sep 2026 03:30:04 +0000
Manifest next update:     Sat 12 Sep 2026 03:30:04 +0000
Files and hashes:         1: BinJnUdgwom4TNvs8bbBPPUl6q8.crl (hash: Ef8SaABSrYAJjLChjInOrYXHhGkq6B7Xfr5ig3WwL8Y=)
                          2: 2850010E216B11EFB3F618137DDC24C2.roa (hash: 0jME1ZzrI4sNnNZjfeG38v9huXsz3LZTpURGBtXzEAw=)
                          3: 51542E68216B11EF9F7AF3167DDC24C2.roa (hash: 4QCeXvrc6kg/JIOMdU4vEPvtTh3WWdhKcmrMjlVBHNk=)
                          4: A67CF5BA216A11EFA90D51127DDC24C2.roa (hash: lsxPoy4LkYh0ebWwRE+vefdBa5LLS6CukBLh7U9d9E4=)
                          5: 55EEE540216A11EF9A5E590E7DDC24C2.roa (hash: FgSrL2A61qR530yDTlLI1PpGN3TVb0JzE3QW/HRydIw=)
                          6: 1F5F2FF8216A11EFBE9F000E7DDC24C2.roa (hash: Lnp4R2zpiassu92nP7+9bZsA7WacYQhSdB9Irhb4Gho=)
                          7: CF99B532216A11EFBD87B3127DDC24C2.roa (hash: jOjj4Xh+2NT4yOAFMCOKRdCM3mQyy3CpEf+pl4OtA9Y=)
                          8: F7891F7E216A11EFAAB9DD127DDC24C2.roa (hash: gR6HfHMgVO0uVKQ4QeKo2uZ6uComtLRb0sTj4ZsT1hQ=)
                          9: 80627120216A11EF980B8E0E7DDC24C2.roa (hash: iJq4XGcPgxPLrs5UWbDYKLBJP1q4j5+vrVCECQwMuoM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                          rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1243 (0x4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CRI, serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
        Validity
            Not Before: Sep 10 03:30:04 2026 GMT
            Not After : Sep 12 03:30:04 2026 GMT
        Subject: CN=6aa2243c-22c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:1b:1a:05:6e:8f:c9:aa:ea:58:00:1a:44:
                    9c:f8:bf:11:da:55:f6:ab:d7:f8:bb:cb:99:0b:23:
                    01:08:8f:ac:5b:18:60:dd:96:18:f2:80:9c:9c:0d:
                    2d:27:52:01:38:09:e9:84:7a:46:46:38:b0:ac:35:
                    f2:df:3c:e6:19:a9:99:d6:ca:75:76:4c:e2:6b:fa:
                    7d:bb:b4:82:94:aa:6f:a1:7d:6f:e3:fd:26:d9:f3:
                    93:50:f8:7e:1f:cc:16:1d:e7:6f:46:17:bd:6d:d3:
                    47:4f:d1:19:ad:c8:74:e8:82:fa:68:8c:3a:56:b4:
                    bd:95:70:4b:4f:f9:9c:19:4c:18:df:ad:75:d9:16:
                    00:30:2b:7b:d5:89:e2:10:41:c1:41:d4:15:39:d2:
                    aa:9a:5c:cb:63:1c:53:db:66:1b:aa:59:1d:50:fe:
                    ae:e3:21:60:ef:b5:2f:84:c0:1a:fb:a8:6d:3d:f2:
                    ee:7d:75:fe:57:0a:be:37:9f:c1:52:f2:8f:59:95:
                    ad:f6:82:24:3e:47:4a:30:54:b6:7d:e4:04:b5:ff:
                    29:1d:e2:03:6d:d3:88:5b:d7:7d:b8:d9:cc:0b:67:
                    fd:e5:81:ec:60:03:32:cc:0d:7a:5e:f2:5d:1c:ac:
                    64:e0:1c:73:33:3c:e7:38:95:55:8b:a7:c9:66:4e:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:36:BC:CB:6A:BA:E9:CE:FB:A2:54:E0:F3:02:7A:BA:CA:5D:7E:45
            X509v3 Authority Key Identifier:
                keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:a9:bf:ed:fc:1e:9f:83:79:f5:6f:ab:1c:dc:a6:5b:1b:2d:
         b2:f5:30:7f:4d:31:24:21:f3:de:1b:0d:64:0f:13:1b:3f:68:
         56:ab:ee:f4:59:ff:83:88:72:f0:a9:96:e4:60:ad:da:7c:34:
         37:90:12:55:82:ee:a2:ab:13:f7:c0:b9:c7:1a:46:92:9b:fd:
         79:e6:2d:d4:bd:a6:1c:14:4a:e0:57:46:e2:73:ea:7d:ca:7f:
         ca:bb:85:27:d3:ff:43:ac:e1:07:31:6b:2a:eb:5e:e4:ce:cd:
         c7:5d:1c:b2:29:29:37:fe:e4:48:f9:fd:78:db:04:45:a7:30:
         d4:57:0c:95:a2:30:b5:c4:06:11:53:e2:04:9a:5d:0a:36:18:
         34:4d:e8:b6:99:68:bd:9a:81:26:22:1b:7c:d1:58:6d:fc:76:
         b1:80:ba:3c:d6:35:25:08:2b:ca:88:3b:e7:61:69:da:a3:9b:
         25:25:fc:55:aa:07:04:3a:b4:7a:b3:22:7c:08:53:b5:08:89:
         ba:8e:db:2b:ae:d4:6c:38:57:51:7a:15:e3:d7:1e:a5:ce:d3:
         d0:70:24:71:b1:2f:c7:85:6b:fe:4d:09:2b:ab:06:13:6d:cf:
         db:18:12:4c:30:d7:10:01:3f:c4:39:53:6d:34:e0:49:78:94:
         aa:92:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:21:48 2026 by rpki-client