Error: rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
File:                     Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft (raw, json)
Hash identifier:          dsZVFFbsi8DZkBtZ7u9n91gRMWGAGSNoYA0bUEHJR24=
Subject key identifier:   C8:6D:E4:5B:D0:C3:7D:A3:04:A2:AA:C0:14:9F:FB:B4:CB:3C:AE:43
Authority key identifier: 5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA
Certificate issuer:       /CN=F362E278AF/serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
Certificate serial:       01ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
Manifest number:          01EC
Signing time:             Fri 25 Sep 2026 04:54:14 +0000
Manifest this update:     Fri 25 Sep 2026 04:54:13 +0000
Manifest next update:     Sun 27 Sep 2026 04:54:13 +0000
Files and hashes:         1: Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl (hash: d5+m2QIb10I69swoVzat4Jgxhdc++o/ZK5iMLixduHk=)
                          2: 76A1AD86424D11F089D462E9DAE4EC9C.roa (hash: 920Pq5gLXNEK7ec2oQwBasEvZAmSump0pVGWoebeoI4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 04:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E278AF, serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
        Validity
            Not Before: Sep 25 04:54:13 2026 GMT
            Not After : Sep 27 04:54:13 2026 GMT
        Subject: CN=6ab5fe76-c58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:59:ae:d8:1d:ff:8a:d2:2f:75:62:78:9e:
                    0f:8f:6e:95:88:c1:46:87:f6:0d:e6:55:01:d2:fb:
                    c9:7d:25:d2:93:a7:b2:33:b6:49:d7:1f:2e:a2:48:
                    c9:a5:a8:1b:51:dc:d9:e0:ed:e9:0a:e3:8b:12:33:
                    71:42:85:e5:a9:9f:9e:43:7d:35:97:74:77:0b:f0:
                    90:16:1a:6e:9a:85:20:b5:a0:5b:0e:7a:28:00:8b:
                    56:c4:0c:b7:43:93:1b:cd:06:4d:23:1b:e2:d8:d4:
                    fe:35:9e:63:3b:14:ad:b9:2a:d5:8d:e8:d8:a0:40:
                    77:cf:0f:2e:40:92:e9:23:19:59:dc:65:27:e2:ef:
                    8e:a4:dd:38:1d:4d:6f:eb:96:eb:7a:69:68:a7:89:
                    a2:de:de:20:0f:24:09:7f:80:51:2e:60:71:bf:eb:
                    e4:cd:44:16:cd:ed:22:f8:f7:73:84:ea:7b:19:49:
                    85:1e:66:8d:1f:6a:14:73:33:5e:e7:72:82:97:88:
                    12:fe:a5:c8:b0:11:8f:f2:2d:c4:8a:f2:d1:03:86:
                    1f:37:cf:27:de:23:2e:8d:ff:e2:36:28:54:b4:41:
                    07:6b:ce:91:4c:ef:93:32:ea:44:be:b0:6f:8c:f5:
                    c6:22:d7:c2:10:e3:b6:b8:40:e0:36:2e:41:ce:1c:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6D:E4:5B:D0:C3:7D:A3:04:A2:AA:C0:14:9F:FB:B4:CB:3C:AE:43
            X509v3 Authority Key Identifier:
                keyid:5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:e1:f0:53:cb:c7:45:10:42:fe:2d:36:34:c0:77:2b:69:
         f4:54:7e:67:a9:1b:e2:72:3f:68:ab:5b:8b:24:db:c0:be:ea:
         9e:c1:3c:61:d1:ac:8a:43:cc:e0:4d:09:82:61:d7:5a:00:af:
         99:5b:58:e6:f2:38:e9:f4:24:30:64:81:5b:72:14:30:39:6a:
         3c:77:b0:d0:2d:44:00:24:88:6f:d9:f4:ea:d2:ff:1c:d1:5a:
         a2:50:fc:93:35:3d:45:ca:51:c0:35:9d:99:7e:c5:6e:7f:ab:
         3e:1c:3a:66:38:d8:e7:56:02:ad:eb:5e:64:fd:16:ea:e8:6d:
         29:63:ca:40:45:51:2a:44:0a:da:b1:10:31:e3:99:7c:12:e4:
         ab:49:06:9f:bb:d5:60:15:eb:22:e1:e0:92:bf:e8:7d:31:b5:
         6e:e3:57:de:5e:a5:dd:75:52:98:2f:8f:77:e3:c9:c2:3d:20:
         f9:3c:a7:41:e1:b4:4d:02:99:62:2c:a4:5c:2a:d3:3e:22:96:
         7c:54:2f:4e:f9:ad:66:f6:7d:2d:6f:86:07:0e:c3:dc:2a:76:
         ed:8f:53:19:13:2c:33:ec:d6:96:60:d9:0d:c0:17:f4:13:e7:
         69:8c:38:50:21:50:ab:db:11:a7:59:49:55:f2:d7:30:e5:69:
         c9:b1:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:44:29 2026 by rpki-client