Error: rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
File:                     yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft (raw, json)
Hash identifier:          8tx1+5vLMxV8JEuDHOIwPVokVF+5PVyVHNFbrV+4eX0=
Subject key identifier:   8D:63:F9:B9:42:2D:34:BB:BD:B6:B3:86:9A:4F:06:6A:3A:84:E5:E6
Authority key identifier: C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
Certificate issuer:       /CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Certificate serial:       03E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
Manifest number:          03E2
Signing time:             Fri 18 Sep 2026 03:57:19 +0000
Manifest this update:     Fri 18 Sep 2026 03:57:18 +0000
Manifest next update:     Sun 20 Sep 2026 03:57:18 +0000
Files and hashes:         1: yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl (hash: KpimJI+QgC9TZe4o53YmTlTgk7U8I5WWLpoqhKkXsYY=)
                          2: E7E6ED96B5B911F0897D0386DAE4EC9C.roa (hash: USTrTqgafFdAdWVQRnFi5xBXcAuIAY9hmlsS/Lw+jKU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 997 (0x3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB15EAF, serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
        Validity
            Not Before: Sep 18 03:57:18 2026 GMT
            Not After : Sep 20 03:57:18 2026 GMT
        Subject: CN=6aacb69f-bcfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:ac:e8:2a:cb:0a:9c:a1:dc:d2:cb:15:6b:
                    0e:8d:f1:3a:82:dd:a9:c3:8c:d7:45:14:71:78:5c:
                    0c:fb:48:83:4b:b5:a6:da:10:9d:87:bd:12:80:18:
                    f6:65:21:5f:5b:a4:7a:44:35:97:84:91:12:3d:a9:
                    e2:45:02:93:07:84:26:62:ef:e8:1b:98:0d:64:cb:
                    73:cd:e6:ca:94:3f:f6:51:41:c9:9e:f6:bf:97:91:
                    fd:dd:37:e3:21:cd:ca:07:de:2e:b4:2e:6e:05:37:
                    99:7d:30:bb:95:ff:3e:8e:cc:02:81:84:cc:d9:05:
                    1d:c3:d1:74:b9:fc:4f:81:9a:85:54:50:fa:77:c0:
                    72:8e:1e:83:eb:12:19:28:73:9b:7b:ac:a6:c6:42:
                    41:77:53:9f:3a:8b:0e:86:6d:10:5a:2c:7d:ca:f6:
                    bb:6d:f9:12:5b:2f:74:12:d9:e5:2c:15:4d:45:f1:
                    f3:a2:5a:72:40:0f:a2:72:44:92:e1:49:79:1f:be:
                    b9:fa:ea:8a:0d:56:2d:b2:95:12:73:2f:1c:c1:c9:
                    87:21:b7:b8:17:e6:7d:11:0d:28:66:9a:4b:13:51:
                    d0:82:2b:38:22:2d:b2:7c:d4:01:b6:6c:c4:f3:32:
                    a8:f4:f1:d1:17:f1:d2:4e:88:ce:21:f4:2c:b1:64:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:63:F9:B9:42:2D:34:BB:BD:B6:B3:86:9A:4F:06:6A:3A:84:E5:E6
            X509v3 Authority Key Identifier:
                keyid:C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:ec:f1:ee:22:6c:a1:ca:44:d8:6f:d0:48:d6:6e:2d:a3:
         04:de:99:15:de:90:b7:ea:76:7d:18:d5:e8:18:d6:2e:38:36:
         06:e7:19:fe:d0:86:6c:2b:19:15:43:7d:44:b4:b8:21:53:3c:
         b7:38:ed:b5:a7:4b:76:31:fc:dd:8e:de:1c:9b:fd:c7:5e:bf:
         0f:27:e2:af:c0:ac:42:ad:83:77:34:6c:94:0e:e1:4c:83:f1:
         6a:de:86:ba:93:a2:fa:68:44:82:5a:03:f9:b2:f8:fd:f4:ea:
         54:53:91:2a:4c:96:fb:3b:a4:a6:3d:63:0e:31:4d:84:61:bd:
         03:ce:76:aa:4e:45:bc:03:6c:98:86:e6:d5:c6:1a:51:a6:35:
         fb:69:a3:2e:0e:72:b6:8c:44:2e:44:9c:96:3e:34:45:e6:ec:
         47:5e:be:9f:4c:55:56:95:15:37:e6:b8:fb:b2:b4:d8:10:a7:
         02:a4:7e:01:41:0b:d9:56:6e:e8:95:8e:7b:8c:75:48:bb:ef:
         70:fa:2a:02:34:f6:27:15:72:58:b8:ea:b3:f7:84:db:5a:06:
         17:7f:c9:a2:8e:37:34:27:e1:39:d7:2e:a7:1c:da:8b:76:51:
         0b:bb:5e:8b:f8:69:69:8d:31:e8:14:3b:36:d7:78:27:af:2f:
         1c:ce:fb:b6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkIxNUVBRjExMC8GA1UEBRMoQzlBNTlDNjNCNzBBOEUxMkJEMUMwQjE1Nzc2OTcx
NzFBM0ZFRTBGMTAeFw0yNjA5MTgwMzU3MThaFw0yNjA5MjAwMzU3MThaMBgxFjAU
BgNVBAMTDTZhYWNiNjlmLWJjZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtMqzoKssKnKHc0ssVaw6N8TqC3anDjNdFFHF4XAz7SINLtabaEJ2HvRKA
GPZlIV9bpHpENZeEkRI9qeJFApMHhCZi7+gbmA1ky3PN5sqUP/ZRQcme9r+Xkf3d
N+MhzcoH3i60Lm4FN5l9MLuV/z6OzAKBhMzZBR3D0XS5/E+BmoVUUPp3wHKOHoPr
Ehkoc5t7rKbGQkF3U586iw6GbRBaLH3K9rtt+RJbL3QS2eUsFU1F8fOiWnJAD6Jy
RJLhSXkfvrn66ooNVi2ylRJzLxzByYcht7gX5n0RDShmmksTUdCCKzgiLbJ81AG2
bMTzMqj08dEX8dJOiM4h9CyxZIY1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUjWP5
uUItNLu9trOGmk8GajqE5eYwHwYDVR0jBBgwFoAUyaWcY7cKjhK9HAsVd2lxcaP+
4PEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZCMTVFL0FGMUUyRUMyQjlDOTExRUVCMkQ1NTE1QTc3NTQxMkU2L3lhV2NZ
N2NLamhLOUhBc1ZkMmx4Y2FQLTRQRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lhV2NZN2NLamhLOUhBc1ZkMmx4Y2FQLTRQRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkIxNUUvQUYxRTJFQzJCOUM5MTFFRUIyRDU1MTVBNzc1
NDEyRTYveWFXY1k3Y0tqaEs5SEFzVmQybHhjYVAtNFBFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9NOzx7iJsocpE2G/QSNZuLaME3pkV
3pC36nZ9GNXoGNYuODYG5xn+0IZsKxkVQ31EtLghUzy3OO21p0t2Mfzdjt4cm/3H
Xr8PJ+KvwKxCrYN3NGyUDuFMg/Fq3oa6k6L6aESCWgP5svj99OpUU5EqTJb7O6Sm
PWMOMU2EYb0DznaqTkW8A2yYhubVxhpRpjX7aaMuDnK2jEQuRJyWPjRF5uxHXr6f
TFVWlRU35rj7srTYEKcCpH4BQQvZVm7olY57jHVIu+9w+ioCNPYnFXJYuOqz94Tb
WgYXf8mijjc0J+E51y6nHNqLdlELu16L+GlpjTHoFDs213gnry8czvu2
-----END CERTIFICATE-----
Generated at Fri Sep 18 23:00:56 2026 by rpki-client