Error: rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
File:                     VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft (raw, json)
Hash identifier:          VEPNJYumBL8SMJurtI8rfhUgXOOKPIoI5OZr8O+kJck=
Subject key identifier:   0A:5C:84:C5:2C:2E:57:74:30:4B:B4:AE:37:CC:67:A8:88:D4:F7:51
Authority key identifier: 56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Certificate issuer:       /CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Certificate serial:       0BDD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
Manifest number:          0BD3
Signing time:             Fri 25 Sep 2026 01:14:55 +0000
Manifest this update:     Fri 25 Sep 2026 01:14:55 +0000
Manifest next update:     Sun 27 Sep 2026 01:14:55 +0000
Files and hashes:         1: VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl (hash: m/oJYdQXocgAXK34iFl5tdYNkLS6f7w+Xu6m++tOyKY=)
                          2: 038F8934847E11F1A17202C8CE1D38B0.roa (hash: bi0jplJxyCtUg06GFuRdU/6LAuPHM1py8WeXrGn6jzo=)
                          3: 5701648E847E11F1A3CCAECBCE1D38B0.roa (hash: qvZ1JLP/OrBWL82dL9Vr2KdzQ/rtCn28C1cl0bPy284=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 01:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3037 (0xbdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AF, serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
        Validity
            Not Before: Sep 25 01:14:55 2026 GMT
            Not After : Sep 27 01:14:55 2026 GMT
        Subject: CN=6ab5cb0f-30aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:ec:a7:fb:2d:af:e4:48:d3:2c:d1:42:ea:
                    58:55:aa:a4:f7:ab:a9:5e:2a:41:6a:3c:44:67:29:
                    35:56:39:f0:fd:7a:e7:79:7e:32:b3:f8:a7:f4:00:
                    06:19:81:c9:14:af:4a:4b:43:76:f9:e3:89:bd:8c:
                    93:75:15:9c:69:be:05:de:d0:af:34:86:16:41:1d:
                    c0:82:65:8c:f7:8c:1c:07:91:cc:e7:dd:b8:d6:27:
                    24:c8:31:01:5f:2f:a1:4d:22:ad:47:2e:e3:83:c0:
                    ff:ec:b4:cc:22:78:ba:38:07:cb:79:20:47:48:06:
                    94:7c:e0:8f:36:3a:81:41:b9:88:f9:5e:df:07:88:
                    35:8c:8f:6b:d7:28:63:18:db:90:a3:ad:bb:0d:ac:
                    54:24:90:d1:f9:b9:22:13:d6:f2:c6:ba:f5:52:bf:
                    41:20:cc:a0:3b:3b:01:ca:06:9e:2b:c7:4c:4c:5e:
                    b2:89:84:d5:26:1e:8a:b2:9a:0f:c4:17:b4:63:76:
                    1d:cd:45:1d:b0:d6:2e:12:58:8a:ca:ed:44:d9:02:
                    c2:04:56:d7:28:70:57:c3:2f:fd:2a:9c:53:78:c9:
                    87:2a:5c:ce:4c:81:ed:0a:b1:7f:a1:f3:2e:0e:38:
                    44:8b:39:b0:45:fd:bf:07:12:4a:71:52:75:59:bc:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5C:84:C5:2C:2E:57:74:30:4B:B4:AE:37:CC:67:A8:88:D4:F7:51
            X509v3 Authority Key Identifier:
                keyid:56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4d:cf:c9:6e:de:de:8a:6d:c6:2d:be:bb:a9:5c:ce:e0:55:
         d2:6a:d6:35:b9:35:b1:8c:d3:13:f9:cf:da:c8:62:cb:6b:1c:
         7b:ab:86:58:cc:61:67:2b:d3:27:1a:9e:42:a9:9d:bc:b8:5c:
         42:50:ae:79:b9:32:b8:11:4a:3b:84:cf:f1:1a:83:db:60:bb:
         9d:ad:a5:3e:f7:fc:d1:0d:9f:6b:1e:2d:4f:93:72:d5:54:34:
         ef:11:3d:a9:ff:8a:91:35:00:f6:13:58:e1:6e:75:ca:54:10:
         29:59:96:b4:05:91:dd:ca:dd:3b:86:96:e1:ba:da:ef:a4:5d:
         74:df:c9:e0:7e:dd:85:fb:43:0b:da:55:a5:60:25:14:bc:4e:
         ea:bc:89:15:69:c4:95:4c:0a:ea:4a:0d:a2:e9:32:5b:ba:0e:
         db:f4:a9:44:7d:da:5b:1e:86:a3:7e:7d:e3:5b:52:a0:e3:39:
         4f:88:ef:f4:ed:01:d7:ac:17:51:f3:68:b7:93:93:a0:f7:9b:
         3d:b0:2b:f4:7b:d7:b7:c5:6b:7f:6d:eb:e3:2b:e9:2c:4a:18:
         17:0d:22:c5:ea:3f:c1:f8:86:c5:5c:b0:6f:3b:d7:c1:8a:fd:
         30:4f:23:cd:e8:34:b5:40:8f:f7:31:2c:fd:a7:81:d8:4c:1c:
         c9:2f:62:72
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICC90wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdBMDJBRjExMC8GA1UEBRMoNTY5NTJFRjkzMEY0NEZGRTkxMjc3MEUzREJDMTYz
MDQ5RjVBRkRCNzAeFw0yNjA5MjUwMTE0NTVaFw0yNjA5MjcwMTE0NTVaMBgxFjAU
BgNVBAMTDTZhYjVjYjBmLTMwYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7peyn+y2v5EjTLNFC6lhVqqT3q6leKkFqPERnKTVWOfD9eud5fjKz+Kf0
AAYZgckUr0pLQ3b544m9jJN1FZxpvgXe0K80hhZBHcCCZYz3jBwHkczn3bjWJyTI
MQFfL6FNIq1HLuODwP/stMwieLo4B8t5IEdIBpR84I82OoFBuYj5Xt8HiDWMj2vX
KGMY25CjrbsNrFQkkNH5uSIT1vLGuvVSv0EgzKA7OwHKBp4rx0xMXrKJhNUmHoqy
mg/EF7Rjdh3NRR2w1i4SWIrK7UTZAsIEVtcocFfDL/0qnFN4yYcqXM5Mge0KsX+h
8y4OOESLObBF/b8HEkpxUnVZvBdbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUClyE
xSwuV3QwS7SuN8xnqIjU91EwHwYDVR0jBBgwFoAUVpUu+TD0T/6RJ3Dj28FjBJ9a
/bcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QTAyLzI2REZENkI4QjU4RTExRThBNkNFMjY2NEY4QUVBMjI4L1ZwVXUt
VEQwVF82UkozRGoyOEZqQko5YV9iYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ZwVXUtVEQwVF82UkozRGoyOEZqQko5YV9iYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjdBMDIvMjZERkQ2QjhCNThFMTFFOEE2Q0UyNjY0RjhB
RUEyMjgvVnBVdS1URDBUXzZSSjNEajI4RmpCSjlhX2JjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAETc/Jbt7eim3GLb67qVzO4FXSatY1
uTWxjNMT+c/ayGLLaxx7q4ZYzGFnK9MnGp5CqZ28uFxCUK55uTK4EUo7hM/xGoPb
YLudraU+9/zRDZ9rHi1Pk3LVVDTvET2p/4qRNQD2E1jhbnXKVBApWZa0BZHdyt07
hpbhutrvpF1038ngft2F+0ML2lWlYCUUvE7qvIkVacSVTArqSg2i6TJbug7b9KlE
fdpbHoajfn3jW1Kg4zlPiO/07QHXrBdR82i3k5Og95s9sCv0e9e3xWt/bevjK+ks
ShgXDSLF6j/B+IbFXLBvO9fBiv0wTyPN6DS1QI/3MSz9p4HYTBzJL2Jy
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:56:24 2026 by rpki-client