Error: rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft
File:                     4co12ODZvFHAlvkK_gIBb5OmeaA.mft (raw, json)
Hash identifier:          0yWRZwxgqRcP83IsH3XrRauPnSqRrftgbS4vXcFl5yE=
Subject key identifier:   43:D3:82:16:4F:2C:44:97:48:62:AF:88:93:26:2D:ED:CA:E2:6B:96
Authority key identifier: E1:CA:35:D8:E0:D9:BC:51:C0:96:F9:0A:FE:02:01:6F:93:A6:79:A0
Certificate issuer:       /CN=F36E6DE6AF/serialNumber=E1CA35D8E0D9BC51C096F90AFE02016F93A679A0
Certificate serial:       01F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4co12ODZvFHAlvkK_gIBb5OmeaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft
Manifest number:          01F0
Signing time:             Mon 26 Oct 2026 04:58:36 +0000
Manifest this update:     Mon 26 Oct 2026 04:58:35 +0000
Manifest next update:     Wed 28 Oct 2026 04:58:35 +0000
Files and hashes:         1: 4co12ODZvFHAlvkK_gIBb5OmeaA.crl (hash: ur14bxbm8Y2RjDsdvzXKNvS0G/XGmz8xhI6SfnaN6Aw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4co12ODZvFHAlvkK_gIBb5OmeaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6DE6AF, serialNumber=E1CA35D8E0D9BC51C096F90AFE02016F93A679A0
        Validity
            Not Before: Oct 26 04:58:35 2026 GMT
            Not After : Oct 28 04:58:35 2026 GMT
        Subject: CN=6adeddfb-d4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3f:89:4e:18:b0:46:27:ad:96:3a:54:8d:39:
                    86:93:cc:b6:15:0f:d1:e3:8f:57:d2:07:96:3c:94:
                    37:1f:4e:c3:a8:be:52:63:52:e2:83:c1:4e:36:c5:
                    0b:f2:f7:2f:3c:aa:10:31:2f:3d:74:10:b2:aa:f8:
                    95:b1:7f:c9:4a:b7:74:40:c1:19:94:95:4d:59:41:
                    91:c4:4e:51:ba:8a:46:ea:59:ae:30:1a:22:42:83:
                    1f:ee:8d:44:d7:60:e7:15:e9:3d:ae:1e:59:d4:6c:
                    db:3f:a9:da:2d:94:42:93:ab:e2:09:84:64:95:73:
                    12:96:90:a2:d0:8e:c6:70:8f:1d:08:cc:d3:42:9e:
                    ab:cc:f2:a4:77:72:c7:0c:84:7c:d9:76:93:26:af:
                    ae:3a:72:3e:ab:7c:d5:cb:c4:14:7a:ba:f5:d5:20:
                    31:91:83:1f:2f:f5:94:d8:64:ae:fa:3c:0e:f3:b0:
                    75:01:82:e1:60:5c:52:42:87:5d:28:6a:4f:88:4b:
                    66:49:9a:af:8e:b7:03:46:8b:96:c9:51:f3:e9:b6:
                    d3:70:84:05:4d:ac:c8:3a:79:ef:57:ab:d4:87:bf:
                    d8:3f:fb:61:1e:f9:00:0e:0f:20:13:33:df:99:39:
                    03:89:75:07:07:39:ea:66:87:5f:1f:34:57:dd:b6:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D3:82:16:4F:2C:44:97:48:62:AF:88:93:26:2D:ED:CA:E2:6B:96
            X509v3 Authority Key Identifier:
                keyid:E1:CA:35:D8:E0:D9:BC:51:C0:96:F9:0A:FE:02:01:6F:93:A6:79:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4co12ODZvFHAlvkK_gIBb5OmeaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:09:b8:47:05:46:29:26:a9:5e:17:b5:d2:e9:af:3d:61:6d:
         86:72:45:53:a6:a8:a0:62:dd:a2:3c:cc:d1:ca:60:33:2b:30:
         00:46:d1:6c:d1:86:de:13:81:7b:cc:8c:41:04:af:77:f9:2c:
         86:60:03:7d:fd:be:67:8d:b0:c7:59:fc:e7:4f:22:8c:6d:92:
         c4:7e:0f:a1:4e:20:4b:b9:2e:e5:48:7d:35:d9:00:b0:c4:b7:
         d3:68:d7:d2:cd:17:79:a1:15:01:e1:e5:23:10:63:51:45:49:
         b1:e5:c8:f9:41:10:ef:08:69:ed:74:95:56:4c:f2:ab:43:ce:
         5a:4c:9f:9c:d7:6d:6c:ff:aa:52:5d:e3:a6:32:44:50:99:d3:
         8f:00:bb:4d:64:91:6e:c2:fb:08:54:cf:e0:a5:0e:1b:10:b5:
         74:a9:44:e7:14:cf:ae:cf:f4:ec:d6:e0:b1:db:23:c6:76:37:
         bd:56:00:61:af:2f:eb:bc:43:c0:3b:4c:c9:32:34:27:d7:03:
         47:3a:80:f3:54:d9:69:c3:8a:7d:bb:d5:f7:d4:46:d0:0f:2b:
         ba:67:49:18:36:5b:f9:9f:ca:cf:4a:c0:16:4c:68:e2:b7:32:
         5c:79:a0:04:c2:d9:30:d2:af:b2:57:9b:b8:bf:7c:01:61:3e:
         08:62:8a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 15:23:54 2026 by rpki-client