Error: rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
File:                     M03n0uuGIBi7lXSbZI3Lr1DRPag.mft (raw, json)
Hash identifier:          oE9d14c5roEe1275UbpmuPPq3u6yRRv4/r4rZ9LZDlM=
Subject key identifier:   B5:C8:B9:CD:E7:7D:46:CE:37:2F:31:A9:A5:0B:64:06:15:2B:75:CB
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Certificate issuer:       /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial:       0F58
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
Manifest number:          0F52
Signing time:             Fri 25 Sep 2026 01:00:47 +0000
Manifest this update:     Fri 25 Sep 2026 01:00:46 +0000
Manifest next update:     Sun 27 Sep 2026 01:00:46 +0000
Files and hashes:         1: M03n0uuGIBi7lXSbZI3Lr1DRPag.crl (hash: gijcBXNfbM2EpRlRHQY/oLZH10ODRQBH9peQYYf2v34=)
                          2: 27DC768CA2DB11F1B6223A13CF1D38B0.roa (hash: jy4r26xUOc8REFs1sp6Uhxq7c9j7wmwiV0e4g5o0vfI=)
                          3: EEDCD7B8874711F1B7959ADDCE1D38B0.roa (hash: zj+lVv65yLchsV3Pei38AK8L8pgPqkZ3OPkz3wu3q0k=)
                          4: 8EF222E0874711F19A7891D9CE1D38B0.roa (hash: PcLAG1NhERJx3czkCw2yFf0BI5X1CLRCJEac9uNxDiY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3928 (0xf58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623CAFAF, serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
        Validity
            Not Before: Sep 25 01:00:46 2026 GMT
            Not After : Sep 27 01:00:46 2026 GMT
        Subject: CN=6ab5c7bf-2290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:cf:5d:63:53:47:fa:a6:3c:b7:3b:bc:40:
                    b5:95:96:11:bd:ef:e5:44:53:49:b0:03:30:0c:fb:
                    1a:e9:ff:6f:03:08:78:78:49:0f:09:a3:87:22:d3:
                    c4:0b:9a:ac:0a:f4:4e:86:50:c5:1a:ae:04:dd:6d:
                    8d:b5:b0:1f:36:7e:f8:3e:f5:30:ac:83:04:a7:7e:
                    0e:88:1f:0d:30:02:8a:b6:c0:bb:2e:5e:74:df:db:
                    33:77:dc:97:f4:d9:58:65:33:6e:97:19:23:01:f4:
                    f0:b5:6f:2a:1e:02:ad:0a:06:3c:b9:b9:1b:87:17:
                    ab:43:ee:ca:a7:29:61:65:47:d1:54:b4:e3:4a:11:
                    b2:2a:4b:cb:4d:b9:f0:a7:1e:8e:60:f8:00:c2:38:
                    d9:0e:11:53:df:72:e0:31:87:66:b2:37:2d:ae:93:
                    9a:d4:78:03:8d:59:ea:a1:7f:3a:72:69:57:72:e7:
                    3e:33:59:2b:a0:5d:57:0b:7f:7c:65:7d:64:e7:ac:
                    ce:54:49:9e:ee:0c:2b:64:86:fa:6d:cb:cf:f8:fc:
                    12:57:25:a2:43:eb:46:44:18:8b:1a:92:f9:58:ae:
                    09:21:0b:9d:cf:94:d4:3b:b7:1f:f5:b3:71:c4:cb:
                    1b:75:be:75:4f:73:48:b6:39:98:12:24:a5:82:03:
                    8a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:B9:CD:E7:7D:46:CE:37:2F:31:A9:A5:0B:64:06:15:2B:75:CB
            X509v3 Authority Key Identifier:
                keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fe:bf:6c:5f:96:09:b5:c2:6f:91:eb:d5:3f:d2:e2:3e:c4:
         a0:7b:f0:ac:48:57:92:40:a1:64:c7:0c:6f:2a:71:25:03:c3:
         b7:78:30:8b:cd:35:6e:5a:0c:a2:55:ef:d3:e0:93:dc:b9:38:
         bb:01:d5:06:46:d9:15:55:ca:74:47:35:fa:70:f8:c7:bc:99:
         8f:5b:fd:61:e3:33:59:99:fc:d4:48:9f:69:27:0b:f2:9b:68:
         78:fc:53:4e:18:d8:f0:f5:b1:70:53:47:92:97:79:b2:ef:2b:
         4f:a0:94:15:72:f4:12:bc:d1:ff:f3:53:d0:d0:e3:62:98:8c:
         1f:ee:c0:6e:35:0b:fa:ad:8e:36:64:f0:a6:a3:d5:90:d9:38:
         82:ce:ba:90:83:36:e3:4c:40:ff:de:a1:d9:d1:fc:2f:34:d5:
         12:4c:9d:d3:26:6d:53:86:76:47:bb:c1:67:3c:41:eb:84:78:
         f3:fb:61:ec:80:0d:92:f1:be:4e:47:79:ef:c1:ae:b0:74:f0:
         26:8a:78:be:cf:ce:b0:dd:35:f9:71:c9:53:c7:90:00:2a:4a:
         42:a0:23:56:40:64:5a:9e:9f:7c:f1:39:6d:74:21:70:f2:44:
         a7:8e:5f:29:a8:59:63:06:4f:1b:6d:48:03:3c:3c:50:d8:57:
         1a:a3:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:06:10 2026 by rpki-client