Error: rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
File:                     hyEw5ps_uANbGyXT9vuXSioHjsw.mft (raw, json)
Hash identifier:          6IRxWtLwIkCtYN/udNG3BhKPsEOaOjwmCkPp/3PQpyk=
Subject key identifier:   87:7D:1C:F8:CC:6E:13:EF:41:BB:CE:BD:EA:15:0B:65:5A:BB:EF:9C
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Certificate issuer:       /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial:       0506
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
Manifest number:          04E1
Signing time:             Thu 10 Sep 2026 03:30:16 +0000
Manifest this update:     Thu 10 Sep 2026 03:30:16 +0000
Manifest next update:     Sat 12 Sep 2026 03:30:16 +0000
Files and hashes:         1: hyEw5ps_uANbGyXT9vuXSioHjsw.crl (hash: q+DBXTl1o/9DVQepx6U/wb1rW3kew8WB93kt7YjC4hw=)
                          2: 25446056ABF711EFA5BE276F762E951A.roa (hash: iljiyK5RbJraa2JUb3gm2wrIQ/7n/PcStGqRRGQslUY=)
                          3: 577D6658216911EF965030097DDC24C2.roa (hash: RohDz18h3S3xSW/GheawmAZBCLdDn+5IgXFlTzJSpT4=)
                          4: 0E6CEF8EABF611EF8D257368762E951A.roa (hash: 3IMYv2fYZHxMilsGAD7UzjHLGo67Jrz37D1HYZiI4Ac=)
                          5: 0F846D08216C11EF8074BA1B7DDC24C2.roa (hash: 2cHpMzYFLIaciTpzwpVBdKjF8btucqV90CHDQfekd3U=)
                          6: 8A675A6A216911EFA20C79097DDC24C2.roa (hash: yTfQ67chD1jSLhE+T2mU2SumVlLVpCyW/SllRT06N5k=)
                          7: 83F3DB32D1B211EF9334217C762E951A.roa (hash: ISG8ILe2W2IxpAsqb/seypxE6lrcAl4MLmyqyncIBh8=)
                          8: AD702BCA216B11EFA0A890177DDC24C2.roa (hash: L2LITle01miKDVPWtOlGBo1zGUpqyZVW4YbQ391uSR8=)
                          9: 7BF8CB1A216B11EFB08D5D177DDC24C2.roa (hash: 8B0YCo/VKxR+j2N3GuqRtbGq6x4x2IoScSr7pqTTOtE=)
                          10: CBF565BE5B3B11F08BFC88BCDAE4EC9C.roa (hash: CbJPohRYMuWwMa2AJ9lcD9673rUrCFi9pH5tHUngHkQ=)
                          11: E9C372C8216911EF92868B0D7DDC24C2.roa (hash: XPvj7OAyAyjAK7avgf+wB+oHqzalqpcS9RwapMEi6BQ=)
                          12: 8B9981B4D1B411EF8E1B9C88762E951A.roa (hash: tm49JQ/az2bLBxn4bJbR8uYdImEtSTPE410n/e1S+rA=)
                          13: DCDFFE44216B11EF91D8CC177DDC24C2.roa (hash: qX1PTVriwlSDQ1zznWEjSNOEWW/errKhB19KwazvHCA=)
                          14: FBFA4C90E06E11EF87F2F9A9762E951A.roa (hash: oV526bUSVjnbh/hqM0EEIKGSmaWKBsdnxNGAaxT6u1Y=)
                          15: 9CC8E63CE06E11EFA35596A7762E951A.roa (hash: tnxSoqA43WiGOfqUI3P0OD/A29+9xuwJnrtEPxKmVjM=)
                          16: 42DD302C216C11EF81B7191C7DDC24C2.roa (hash: JJMt9932QgU+2OiDvLkyOUAa4AsBbuGAtem/jVVFQNU=)
                          17: 63FF131ECBD211EEB933CA84775412E6.roa (hash: yK1f2ZwWbUbh9pLIwEau+PoX7oQm1JMNE9rftEPDtB4=)
                          18: 74007D02ABF611EF84EDDE6A762E951A.roa (hash: KZGGhsqVyrno2LUhnkf8Uvj8V+irkoe9+uULUCYcyBA=)
                          19: CEF17564ABF511EFBDA49866762E951A.roa (hash: 8BXeQXZRcKRCn2PxlkZ/H8leejJBWYahhy9w+VGTV0w=)
                          20: C0A39C84ABF611EF811BC96C762E951A.roa (hash: jNvssZb4MW5AzsDrnJ2ltfmd0tnSlweuzx6hP5AWVJw=)
                          21: E2508EF0216811EFAE69D2047DDC24C2.roa (hash: +d1lZthDDgWXzpp9t9wep4/UCQeV5PqY4q6qmeSb/0E=)
                          22: CA0A748AE06E11EFBBAD83A9762E951A.roa (hash: MjyQPYZ0w1yB65mwCyV+9VzWTla8w8d5zJEWXodWAO0=)
                          23: BF3F3B0E216911EFAB4FB3097DDC24C2.roa (hash: XcpHVmzBKOmbyKD8fxSft+zKQ7P+pByDMjIrDjuzNus=)
                          24: 1A427EB8216911EF830131057DDC24C2.roa (hash: /FE9YVa8jHhpZkpXQnpV9/OOWPfHFAhwKy6l7Mkx+ME=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CAF, serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
        Validity
            Not Before: Sep 10 03:30:16 2026 GMT
            Not After : Sep 12 03:30:16 2026 GMT
        Subject: CN=6aa22448-d9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2b:c3:97:00:c3:f5:87:c0:d3:92:d4:28:7a:
                    e5:f0:00:41:db:dc:d1:8a:1d:a2:88:3a:38:fe:aa:
                    6c:f9:eb:d7:9c:70:2b:e5:2f:3a:11:0a:11:69:71:
                    ba:b3:68:43:44:ed:69:89:35:8d:e0:c2:a5:ff:f9:
                    4b:46:5d:72:bc:ad:33:19:27:0c:9e:30:46:98:c4:
                    50:b2:a5:0c:2c:d7:a0:e4:cc:2b:e5:9f:18:cd:60:
                    75:12:0a:c4:a6:0f:b1:2e:fb:27:2e:bd:0e:e1:3b:
                    bb:99:d3:0f:ce:8b:d6:da:c2:4d:36:85:e9:76:f4:
                    3b:da:c2:cf:44:9e:47:c9:d3:db:ff:c1:dc:ad:8b:
                    ef:9c:62:1a:73:58:92:4b:77:9d:67:d9:22:a3:05:
                    1e:ab:3d:d3:bb:6f:fd:99:79:7d:a4:28:e7:7c:98:
                    d0:cc:5f:8d:34:57:ea:c1:5e:73:0a:b4:a2:62:4f:
                    78:b0:76:92:f0:54:8e:bd:07:c2:3e:17:c4:c4:df:
                    1b:d6:80:49:6f:9b:e0:d1:3c:45:04:d2:80:ed:52:
                    7e:0d:80:c6:56:cb:57:49:f4:66:2e:9c:41:f3:5c:
                    6c:c0:53:fa:0b:b1:79:87:ea:0e:cc:af:18:cf:66:
                    93:7c:d2:4e:7c:f9:a8:51:5f:09:b6:d0:fd:5c:a8:
                    e6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7D:1C:F8:CC:6E:13:EF:41:BB:CE:BD:EA:15:0B:65:5A:BB:EF:9C
            X509v3 Authority Key Identifier:
                keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:84:66:c7:e2:2f:12:10:63:39:fe:4d:35:7d:22:b1:8b:b7:
         d6:24:b1:85:2c:9c:4b:e5:9b:8a:69:f9:05:93:5c:90:83:c0:
         c1:ee:bc:fd:12:f6:99:da:ac:76:ea:c3:76:05:ca:52:36:09:
         59:6e:7b:75:d9:76:e3:52:c1:cf:79:23:ae:0b:a9:6d:60:e4:
         92:b3:59:a8:e3:d0:6e:57:4e:c1:1a:c7:a7:ab:47:ba:e1:75:
         4e:11:64:b5:50:12:06:27:c3:09:bd:a0:54:ff:bf:de:61:dd:
         6f:51:c1:d2:e5:5c:fc:94:73:41:71:a1:6b:b1:30:97:af:51:
         90:ef:ba:b0:9d:4e:f6:dc:ea:bc:da:e7:93:aa:f2:1e:3f:06:
         52:be:02:04:fb:d6:71:2a:5f:50:01:29:f2:b9:56:b6:44:e7:
         e1:7d:ad:70:55:28:d3:69:48:d3:4d:12:7c:88:8f:ee:5b:64:
         25:d6:ff:f0:58:1e:fb:05:e9:8d:d8:e7:18:a7:59:43:5e:a7:
         2a:b1:69:ef:fd:49:18:3b:23:f2:05:0a:be:11:63:75:02:16:
         56:3d:60:df:5e:3d:15:49:18:70:19:e4:36:e5:21:ff:3c:9d:
         a1:04:fb:e5:99:5c:27:10:88:f4:55:8f:b9:fa:4a:e7:7d:fb:
         bd:96:bf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:25:26 2026 by rpki-client