Error: rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.mft
File:                     j_JpBIbWDsmd3LdvCdugCtcHkRQ.mft (raw, json)
Hash identifier:          +5RIGzXhaiBWK4lqa8oKxeIx6eVRDN3ZjoflHHwxx8s=
Subject key identifier:   CD:38:01:23:13:A3:82:3F:C8:2F:E8:65:14:D6:0B:39:99:8A:FE:B0
Authority key identifier: 8F:F2:69:04:86:D6:0E:C9:9D:DC:B7:6F:09:DB:A0:0A:D7:07:91:14
Certificate issuer:       /CN=F3623C61AF/serialNumber=8FF2690486D60EC99DDCB76F09DBA00AD7079114
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j_JpBIbWDsmd3LdvCdugCtcHkRQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.mft
Manifest number:          11
Signing time:             Sat 14 Nov 2026 06:07:28 +0000
Manifest this update:     Sat 14 Nov 2026 06:07:27 +0000
Manifest next update:     Mon 16 Nov 2026 06:07:27 +0000
Files and hashes:         1: j_JpBIbWDsmd3LdvCdugCtcHkRQ.crl (hash: 83e/cQNevcHhFPGaA1gQHc/cYCVAyDCy+3xOEAuRwxk=)
                          2: 7C3BD6C0DBC811F1A93C58BECE1D38B0.roa (hash: ZLqjfNoHNi5w7WL9cOoeZtHBnYstuZYtJWiF2yvlm+s=)
                          3: 2936B2BADBC811F1AF3471BCCE1D38B0.roa (hash: gl7yqe3kF999tL3shaOkaM5AgDHXkRtwM3ICfqINoP4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j_JpBIbWDsmd3LdvCdugCtcHkRQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623C61AF, serialNumber=8FF2690486D60EC99DDCB76F09DBA00AD7079114
        Validity
            Not Before: Nov 14 06:07:27 2026 GMT
            Not After : Nov 16 06:07:27 2026 GMT
        Subject: CN=6af7faa0-41ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:3c:69:c7:be:a0:53:ab:ee:c2:d8:d9:b0:
                    0f:90:9d:df:b6:35:ec:66:55:bb:a1:e2:04:a5:55:
                    75:7a:c7:fa:a7:85:6e:3c:13:98:b7:33:02:d4:b1:
                    f5:8f:8c:15:da:d6:a9:5b:09:c7:31:4a:fe:be:33:
                    7e:91:3b:68:82:dc:a2:af:d4:dd:8b:fb:78:18:5d:
                    16:cc:87:86:73:fc:09:c8:0d:e6:23:14:10:81:6b:
                    f7:0b:b3:81:2b:26:df:86:cc:91:b9:2a:89:9e:5e:
                    07:96:4b:92:22:fb:41:65:08:af:94:5d:34:ea:df:
                    22:e8:1c:c4:19:8e:c3:72:ce:0d:41:bf:98:91:64:
                    ae:e4:a9:17:54:f0:33:ba:17:68:bb:8b:43:9e:3b:
                    86:2f:ce:3b:ee:7c:a6:17:b2:2a:2b:92:f6:2d:d0:
                    3e:5b:a5:4e:ee:ea:24:57:5f:64:65:91:6e:a5:2b:
                    45:9b:19:74:8c:da:33:09:e3:a0:72:30:bd:f9:16:
                    55:5a:99:99:b7:cc:96:51:1d:81:f5:43:f1:e9:66:
                    e0:0f:55:f3:a8:1a:6b:b4:3f:77:af:e2:f0:da:a4:
                    a1:26:61:fa:12:3e:7e:0f:be:26:3a:c4:f7:c1:e8:
                    bc:1d:2c:e3:1e:98:f7:9a:25:6a:2f:d3:1b:39:6c:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:38:01:23:13:A3:82:3F:C8:2F:E8:65:14:D6:0B:39:99:8A:FE:B0
            X509v3 Authority Key Identifier:
                keyid:8F:F2:69:04:86:D6:0E:C9:9D:DC:B7:6F:09:DB:A0:0A:D7:07:91:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j_JpBIbWDsmd3LdvCdugCtcHkRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:41:a0:17:93:95:e5:66:53:d2:86:80:6c:af:1f:93:b8:
         7a:95:98:63:d2:dc:91:cf:3b:73:c2:95:b4:e4:d2:df:71:f6:
         b3:8d:23:29:e9:fe:40:0b:0b:d2:aa:c4:fe:14:fb:9f:99:36:
         71:e6:99:3b:e6:1c:22:81:5a:1c:68:6a:e3:02:85:db:14:f0:
         c2:00:20:ad:fa:be:d2:10:21:7d:7e:96:38:50:29:80:96:8a:
         8f:f7:21:22:23:11:bb:7f:5a:b3:fb:77:07:3c:00:b9:9e:f8:
         b3:2a:97:20:bd:65:7d:55:52:8d:d5:e2:2d:e9:f4:f2:c4:2a:
         2f:a0:9a:03:d4:63:44:93:09:26:91:2e:bd:f9:17:73:e7:4c:
         fd:dd:3c:32:93:78:34:d4:44:18:e7:39:b7:8a:b4:26:66:48:
         8a:e3:d8:22:e3:67:c8:37:7f:b4:bc:84:9f:91:b5:b6:41:02:
         10:14:83:5a:90:fc:5c:28:61:44:90:bb:33:68:d3:38:fc:d7:
         19:3b:3c:d7:a5:33:fd:40:df:77:06:ea:73:fb:09:e3:27:eb:
         50:37:13:36:88:b4:33:54:4e:53:96:cd:84:f7:95:ef:e6:5c:
         b8:fe:11:e3:0d:6b:07:cb:ab:05:0a:fd:f7:84:92:21:90:f5:
         2a:04:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:13 2026 by rpki-client