Error: rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
File:                     uzo1Sy60WgeXNxMywh_IM9si2bE.mft (raw, json)
Hash identifier:          oK+WF0zmY8pRl8wJnpJHb/kPEhV0sIrQAFOvZHSCwzw=
Subject key identifier:   8E:EF:09:93:F7:97:38:05:9A:D2:5C:A3:EF:50:99:B8:18:44:38:98
Authority key identifier: BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
Certificate issuer:       /CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Certificate serial:       0733
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
Manifest number:          072D
Signing time:             Sun 25 Oct 2026 02:31:33 +0000
Manifest this update:     Sun 25 Oct 2026 02:31:32 +0000
Manifest next update:     Tue 27 Oct 2026 02:31:32 +0000
Files and hashes:         1: uzo1Sy60WgeXNxMywh_IM9si2bE.crl (hash: ulha52cdaw6cI61cD9ewBred31KB9/kz7MSBypwbTig=)
                          2: 8E90E6161CD111EFAD3E6F387DDC24C2.roa (hash: Acxu0DX0x7zOnZo/d29ZFhmVVZhtQ4DjKj+Qddi4oY8=)
                          3: 556D1DA01CD111EF9997F1117DDC24C2.roa (hash: TUGWF0iT2TWYNHrRW0ntCFeOp6mPEZVXlZ0YLlE22V0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 02:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBCCDAF, serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
        Validity
            Not Before: Oct 25 02:31:32 2026 GMT
            Not After : Oct 27 02:31:32 2026 GMT
        Subject: CN=6add6a05-730f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:a5:72:79:ea:12:11:83:0c:b1:75:95:43:
                    7f:63:6b:53:d6:b8:fa:a3:e0:2b:0d:9d:9e:11:be:
                    6e:5a:31:c5:77:f4:e1:7b:83:c3:01:34:88:49:bd:
                    83:a6:f1:25:f3:26:91:2d:31:c5:c5:23:0d:5a:56:
                    e2:f5:dc:5e:d3:29:68:fd:6a:fd:9a:ce:ad:00:a1:
                    e7:7c:67:33:70:94:fa:a0:18:ab:19:29:92:26:b1:
                    12:16:82:eb:85:74:a5:c0:41:89:91:cc:6b:23:8c:
                    cb:67:6b:06:db:44:3f:e0:f6:32:7f:c8:ab:88:32:
                    87:af:67:60:c5:59:9d:ed:20:d6:d3:df:71:3f:45:
                    96:ce:58:35:cb:91:48:91:20:96:68:67:f6:c3:af:
                    b0:62:51:a2:5d:90:9b:73:65:c2:26:b0:7e:cd:fa:
                    6d:93:5f:b0:5b:a2:2f:2e:c3:4f:80:a8:89:13:3d:
                    71:b1:2c:23:35:0c:30:12:a1:03:20:4c:c0:f7:85:
                    f1:cb:45:d9:4c:b2:4b:2f:56:a2:53:12:70:c4:15:
                    79:cf:8b:69:64:e4:a1:38:78:60:db:cb:37:a4:6e:
                    e2:f4:b4:9c:c2:05:5b:8d:b7:f1:dc:b3:18:f2:4e:
                    d2:6e:45:12:1a:c9:7a:d9:57:34:a9:19:5e:5f:37:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EF:09:93:F7:97:38:05:9A:D2:5C:A3:EF:50:99:B8:18:44:38:98
            X509v3 Authority Key Identifier:
                keyid:BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ab:77:16:ef:e9:28:ae:e0:80:2d:38:8f:11:15:f1:ad:19:
         8c:1b:5b:7f:85:9d:9b:40:b0:24:68:c8:b3:10:a7:41:1e:11:
         06:67:9f:3a:a1:7d:e7:27:06:31:1e:07:bd:65:63:1f:98:de:
         07:bb:21:cb:aa:c4:4a:f3:91:66:a7:ce:7a:56:a6:34:c9:94:
         97:59:aa:5f:08:4b:9b:8a:7b:a3:fd:01:0b:39:51:16:62:a1:
         9c:79:fe:dc:32:15:bc:4f:5a:96:02:c5:d0:b6:6d:f2:13:df:
         d3:68:38:7c:c4:a6:6f:64:e9:53:c6:3c:ac:fe:d2:57:f5:13:
         80:2a:d0:4f:f5:cc:ba:a2:47:69:48:ba:86:e5:e4:b1:ca:ce:
         c7:8a:4e:f4:7b:07:2f:dc:52:41:5b:6e:dc:ac:e5:bb:0f:5e:
         38:1c:ae:96:54:26:fa:e5:ac:f2:36:f7:2d:07:2b:b6:f0:6b:
         88:4f:ad:dc:22:5d:58:12:0b:d9:e4:07:b0:df:04:c9:d6:10:
         66:1b:c5:49:15:7c:66:09:8e:77:e3:bf:99:2c:61:ca:d4:3b:
         78:e8:ce:20:bc:11:e3:49:29:06:3c:5b:4f:e1:49:1e:10:5a:
         28:30:33:61:9c:dc:a4:1e:72:c9:83:06:6d:06:83:33:0d:ec:
         c7:72:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:45:55 2026 by rpki-client