Error: rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
File:                     gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft (raw, json)
Hash identifier:          Q+zX0bVIMTIL29WAM/VHJAKIH1lOjf03wVyG2L1s3Ec=
Subject key identifier:   CE:22:BE:1E:B9:1A:31:90:60:51:D9:46:1B:0F:8D:66:23:B8:5E:E7
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Certificate issuer:       /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial:       0561
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
Manifest number:          0555
Signing time:             Thu 10 Sep 2026 03:13:00 +0000
Manifest this update:     Thu 10 Sep 2026 03:12:59 +0000
Manifest next update:     Sat 12 Sep 2026 03:12:59 +0000
Files and hashes:         1: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl (hash: BdT0JAZR7WGKOR4QpYeV0KlLyEwoeC82JK+1a1mopvs=)
                          2: 3E89535C919511F19B87181ACF1D38B0.roa (hash: MgyMP7FWdkZNfngn7DBFq/fV8FrY6m8TI6YhhayywA4=)
                          3: 394C14068A7E11F1A4D6DEF4CE1D38B0.roa (hash: vSDt4zl37RwqgZMYebDjfzUw1LP8T1XqYFXWyiWhQbE=)
                          4: 69D8501C8A7E11F18852F6F4CE1D38B0.roa (hash: IcaGaoujxGgkNe1Mv/ecD9++237M3+OQM+9p4KWts24=)
                          5: 76290F528A7C11F18DE172EACE1D38B0.roa (hash: jHFfU1D2lcpOjyDVq5Ad204OjfgdXpwV2gg39IXTyHM=)
                          6: 3A9BE086FDB411F099781978DAE4EC9C.roa (hash: U6hJ3dexnNZP2bqRvlL6C7zK5n/16swAogkxNnyicoM=)
                          7: 92DED7E4FDB411F09FE4837CDAE4EC9C.roa (hash: srYqEe2mgDwJI6jUbBY0cU5cWPseHn/svqYOhlLojDc=)
                          8: F0A5BADC8A7C11F19B74A7ECCE1D38B0.roa (hash: qKuUkeEtmPFzxueo+0k+zPaf6dnnRZqCKDNqLOTGOTc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377 (0x561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
        Validity
            Not Before: Sep 10 03:12:59 2026 GMT
            Not After : Sep 12 03:12:59 2026 GMT
        Subject: CN=6aa2203c-6896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:7c:e8:ee:88:12:c6:9e:5a:c3:44:1b:81:
                    e8:ce:0a:0c:b2:32:45:a6:47:19:0f:2d:cc:3a:4f:
                    b0:79:6b:1c:49:2f:1b:a1:09:2e:e3:42:1e:34:bc:
                    2b:e5:f0:bd:34:35:56:ca:de:0a:96:db:86:e6:c6:
                    14:f0:b1:2c:b7:0a:fb:6e:b8:f2:3a:9f:fb:f2:24:
                    86:00:6c:f1:12:20:cf:b2:63:d0:98:8d:43:3d:8d:
                    f9:9b:91:89:f2:b7:de:d0:26:68:e2:76:68:fb:fd:
                    ae:14:f5:c3:32:7d:a6:ef:0b:21:b6:68:59:a5:c6:
                    06:78:53:90:0f:f4:31:ff:49:b2:5c:1d:bf:3a:29:
                    84:93:94:84:5c:ad:36:e2:ef:e2:28:e0:e1:d8:1f:
                    8f:46:13:79:0a:31:d1:9e:99:ac:bd:5c:e1:07:8d:
                    06:89:e9:be:af:59:10:95:06:30:ff:29:40:5d:94:
                    7e:09:fc:e0:c9:d4:74:f3:3a:7f:b3:19:9f:76:18:
                    0c:07:91:b1:a6:57:54:cd:27:3b:1f:27:aa:76:55:
                    7e:31:01:fe:48:1b:c7:a3:e6:25:b1:17:cd:01:97:
                    09:10:e3:96:27:d6:3b:f3:f7:9f:0d:e9:58:e9:77:
                    a9:21:23:38:c1:7b:8b:74:5d:21:05:7c:24:d7:6e:
                    f4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:22:BE:1E:B9:1A:31:90:60:51:D9:46:1B:0F:8D:66:23:B8:5E:E7
            X509v3 Authority Key Identifier:
                keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:67:e8:bd:46:20:62:9a:00:e4:84:c8:b1:d0:c7:ce:d8:f3:
         7b:1a:5d:f2:ff:a6:8b:bb:a5:17:8f:b2:29:dd:d7:a4:f0:38:
         ee:f4:bb:a1:99:4a:3e:e5:3c:fe:e6:14:a3:8b:86:ba:47:f5:
         09:0d:3a:f6:29:d6:8b:9d:22:7a:08:d2:dd:5c:6a:b8:84:51:
         5d:f9:3e:32:ba:a7:b6:8d:c5:ad:83:91:88:b9:06:45:d0:f1:
         c5:d9:fa:e2:00:fe:56:10:eb:09:a9:01:00:5a:c4:ff:3d:60:
         9c:27:22:5e:64:8b:99:09:c5:4e:25:8d:e6:aa:94:b6:b4:1b:
         84:31:35:cc:04:4a:d1:1a:f3:88:15:7d:8a:29:66:47:93:0e:
         5b:a1:a9:1c:5c:cd:88:50:de:1b:fa:10:f4:ec:9d:e8:91:66:
         ce:62:19:ba:50:31:9e:38:8b:0e:eb:08:a5:dd:46:9e:d3:59:
         5f:ef:a1:cb:45:07:75:2b:04:d5:21:a8:47:e7:f6:52:e5:0f:
         97:61:b4:3a:3b:83:52:a7:e3:47:90:e6:3b:4b:63:9d:98:b7:
         24:3a:97:41:30:1e:dd:b8:eb:6e:ed:05:f6:c3:c9:9c:25:4f:
         6f:29:3e:ac:bf:ec:e0:2a:80:4e:d9:07:eb:c1:0f:10:3f:76:
         30:51:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:32 2026 by rpki-client