Error: rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
File:                     gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft (raw, json)
Hash identifier:          z6NCb0IsR+NhMyZXSCeXRA/DM1+QRAB7D7p+OPdPfzY=
Subject key identifier:   38:2E:63:0C:DC:AB:04:1F:46:9F:F7:13:CE:A7:17:EA:C7:68:3C:6D
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Certificate issuer:       /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial:       0590
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
Manifest number:          0584
Signing time:             Tue 27 Oct 2026 03:12:05 +0000
Manifest this update:     Tue 27 Oct 2026 03:12:04 +0000
Manifest next update:     Thu 29 Oct 2026 03:12:04 +0000
Files and hashes:         1: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl (hash: zCXbD3W97L9EXkZxxcC7bBHXctyY9Hhd0BWi9HKrj/s=)
                          2: 3E89535C919511F19B87181ACF1D38B0.roa (hash: MgyMP7FWdkZNfngn7DBFq/fV8FrY6m8TI6YhhayywA4=)
                          3: 394C14068A7E11F1A4D6DEF4CE1D38B0.roa (hash: vSDt4zl37RwqgZMYebDjfzUw1LP8T1XqYFXWyiWhQbE=)
                          4: 69D8501C8A7E11F18852F6F4CE1D38B0.roa (hash: IcaGaoujxGgkNe1Mv/ecD9++237M3+OQM+9p4KWts24=)
                          5: 76290F528A7C11F18DE172EACE1D38B0.roa (hash: jHFfU1D2lcpOjyDVq5Ad204OjfgdXpwV2gg39IXTyHM=)
                          6: 3A9BE086FDB411F099781978DAE4EC9C.roa (hash: U6hJ3dexnNZP2bqRvlL6C7zK5n/16swAogkxNnyicoM=)
                          7: 92DED7E4FDB411F09FE4837CDAE4EC9C.roa (hash: srYqEe2mgDwJI6jUbBY0cU5cWPseHn/svqYOhlLojDc=)
                          8: F0A5BADC8A7C11F19B74A7ECCE1D38B0.roa (hash: qKuUkeEtmPFzxueo+0k+zPaf6dnnRZqCKDNqLOTGOTc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424 (0x590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
        Validity
            Not Before: Oct 27 03:12:04 2026 GMT
            Not After : Oct 29 03:12:04 2026 GMT
        Subject: CN=6ae01685-21c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:56:69:d1:3a:49:88:3c:4e:39:e2:10:fc:
                    4b:97:68:13:9d:1e:20:7a:24:4e:69:52:81:b0:e5:
                    e5:e2:6f:f5:db:b0:7a:a5:d3:f7:15:71:cc:d1:66:
                    9a:00:79:24:00:cf:28:c6:25:8e:cd:91:e1:37:8c:
                    15:6e:55:ae:53:3f:e9:34:59:6f:75:b5:46:a5:0e:
                    e4:18:0f:16:99:3c:3a:d8:d9:b6:36:c5:f3:70:95:
                    f5:17:52:7d:8a:ae:91:4b:40:61:8b:99:9b:2a:ba:
                    3e:dd:f3:22:ad:b6:8b:15:1b:4c:14:3e:34:81:13:
                    66:01:3c:9a:e5:ce:e1:67:2f:bc:c8:1e:4d:92:a9:
                    e5:b8:00:74:08:57:97:44:e5:ab:ad:f8:b8:c2:1f:
                    30:ae:db:af:bd:05:0d:77:7a:29:d4:47:dc:e1:77:
                    e1:e2:f9:50:87:9c:b0:6a:fc:db:a0:8d:9d:0b:94:
                    39:99:c2:ee:b3:f2:14:b1:32:7b:3d:01:d3:75:01:
                    3b:49:84:02:e4:57:f8:85:a5:51:76:b4:aa:09:6b:
                    0a:e1:6d:be:6e:db:7b:73:1d:32:6c:bd:1f:88:6c:
                    3f:73:f0:26:0b:b2:6f:84:d7:a6:fc:c2:05:e1:33:
                    0f:38:36:a5:fc:65:69:d2:a4:01:32:e6:05:12:72:
                    21:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2E:63:0C:DC:AB:04:1F:46:9F:F7:13:CE:A7:17:EA:C7:68:3C:6D
            X509v3 Authority Key Identifier:
                keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:e5:38:22:c4:b8:c0:a6:9a:bd:d4:87:b0:a0:2f:47:4b:
         86:b1:4a:66:ac:00:6d:dc:a4:ce:f9:56:fe:89:3d:a1:5c:af:
         ba:49:bc:eb:6e:05:e0:3d:6b:49:26:b6:ae:01:a1:90:c3:75:
         5a:89:db:97:4b:55:b7:b5:eb:e5:8f:8f:18:28:8f:2e:f1:bc:
         67:dd:7a:93:ce:18:ff:d7:64:73:d1:c3:5f:ad:cd:19:e2:a0:
         34:ad:c7:3d:d8:47:9e:33:ca:90:61:ed:81:50:fd:57:66:62:
         73:2d:a8:f1:39:1e:4c:48:14:88:2b:c3:f5:c9:77:33:c0:04:
         9a:d3:92:9e:b5:8c:a5:e0:40:05:4a:11:da:b6:c2:56:9d:54:
         5e:d8:a5:a0:9d:ea:b2:75:f7:78:e5:26:c6:bc:a6:48:3c:fb:
         b7:ab:96:9a:50:55:7e:ad:49:34:b9:2a:ee:51:c6:8d:67:eb:
         ec:1e:e9:c4:c7:0b:62:4b:a7:cf:09:7d:7f:a1:cb:65:3c:7a:
         a2:ca:1d:44:de:ca:48:0a:65:eb:84:6f:eb:a6:cf:a4:4e:86:
         41:2e:cc:8f:84:c1:83:0f:fd:e6:ca:d5:12:5c:8f:0e:07:38:
         50:6a:f0:da:02:c1:9a:bf:19:95:08:16:f5:8e:48:81:90:13:
         9c:b0:21:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:24:32 2026 by rpki-client