Error: rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
File:                     Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft (raw, json)
Hash identifier:          BHUy7+u8AAe/8ZTb6sFBSGKqETJhNLF+y6LSul2cD2c=
Subject key identifier:   EE:F4:2C:AF:21:50:B4:29:B4:EF:CA:1D:0F:AE:AF:47:78:61:B7:75
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Certificate issuer:       /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial:       06A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
Manifest number:          069D
Signing time:             Wed 23 Sep 2026 02:39:47 +0000
Manifest this update:     Wed 23 Sep 2026 02:39:46 +0000
Manifest next update:     Fri 25 Sep 2026 02:39:46 +0000
Files and hashes:         1: Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl (hash: h59EbMtmATsLCEUE+e0cYGnX+Qc1R/IwbbmSB6px5bM=)
                          2: 72BABCF46FFC11EFBB10279D762E951A.roa (hash: rlDq1sLVRqkoMbUERI8asuL0sKn6qOkKebzRsYaYfgo=)
                          3: 3BAA3D5C6FFC11EFA23C0A9B762E951A.roa (hash: ZnDxmAxeEfDaWqAukKaPEazhsegTXYgu0pD30UCvUW4=)
                          4: D1982E4E706711EF8FA752B1762E951A.roa (hash: 13e2tsP9vZSc4kP/9gYLRySR8RimddvRM/CF31h+Gls=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A34AF, serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
        Validity
            Not Before: Sep 23 02:39:46 2026 GMT
            Not After : Sep 25 02:39:46 2026 GMT
        Subject: CN=6ab33bf3-a212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a6:86:77:43:31:f3:50:43:2a:c8:33:95:f2:
                    bb:99:3e:02:5e:dc:79:80:de:da:68:be:01:be:5d:
                    03:55:9a:78:e2:36:05:fe:3e:79:b5:07:a2:20:81:
                    96:54:af:47:e1:3c:51:7c:b5:fb:34:e5:2b:05:3c:
                    08:ec:9f:6e:67:18:b1:ac:79:08:41:8f:89:57:00:
                    67:88:b8:68:8d:de:cd:12:41:ce:7e:44:cd:cb:7b:
                    3c:ba:2b:db:5f:17:ba:05:38:ef:78:95:f1:d2:d9:
                    0a:84:35:f6:aa:1d:ca:ee:b9:fb:7d:de:32:59:77:
                    f1:70:71:77:40:65:d3:0d:00:c7:5a:60:7e:9a:45:
                    9f:89:a0:d0:50:31:6e:23:f8:82:7c:cf:2b:22:00:
                    ba:86:14:57:96:91:e5:b7:38:fe:0d:06:f2:a9:83:
                    10:e3:47:55:35:fb:36:19:77:de:ad:80:27:c6:6a:
                    15:a4:8e:bb:c7:16:16:e3:cd:11:b2:d9:2f:b2:0d:
                    5b:3d:49:d7:e4:00:e8:2d:5e:4f:00:0a:7a:96:95:
                    79:7e:e3:e8:6d:ff:e0:e5:09:3e:e8:8c:3e:cc:d4:
                    fe:dc:aa:fe:ae:7e:26:b4:7a:bd:d2:f7:40:92:6a:
                    36:20:f8:40:61:d0:cc:c8:e6:14:f7:b9:df:19:9d:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F4:2C:AF:21:50:B4:29:B4:EF:CA:1D:0F:AE:AF:47:78:61:B7:75
            X509v3 Authority Key Identifier:
                keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e7:e4:84:b6:68:9c:f9:96:e3:bf:fe:4f:dd:43:b8:f1:c1:
         c2:84:1f:a3:32:13:7b:2a:e2:bc:43:ae:27:0a:31:ec:ea:60:
         15:64:f3:dd:c1:48:e1:d4:09:1c:ab:2f:be:80:42:6a:d9:96:
         79:26:ab:ca:75:ff:f2:a4:53:b2:77:21:85:fc:91:30:8b:22:
         2c:23:f9:d0:98:73:7a:13:58:b4:90:b6:7f:94:77:69:a6:cf:
         1f:36:0c:46:ae:82:86:6a:1f:a9:30:19:d8:0d:84:18:be:f7:
         f4:88:9e:a0:ba:a0:a8:a6:8a:9f:b5:28:8d:b3:0f:9b:9d:64:
         22:a8:9f:56:d3:c6:56:7f:19:ce:90:f2:e9:9c:76:82:60:06:
         d6:7e:b3:fb:0c:d0:3d:9e:00:4c:88:d4:86:38:29:06:26:2a:
         a6:82:09:00:bd:0f:66:e1:fe:55:5a:f2:26:ab:9b:b3:ab:24:
         9e:c3:ac:88:13:8b:71:5a:a9:d7:5c:d1:52:09:0d:00:75:fb:
         9b:3b:6f:52:ee:8b:f2:b9:9d:c5:f7:3a:3c:e3:8a:e0:7f:6c:
         5e:28:a5:ec:13:27:37:96:74:dd:03:06:a9:ce:49:8f:73:69:
         03:98:1f:55:f7:1f:54:76:0a:ce:d2:1a:21:b5:70:16:e3:f2:
         5b:17:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:00:08 2026 by rpki-client