Error: rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
File:                     RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft (raw, json)
Hash identifier:          nM8jp3IjKO5vQqtFPu2JNa1DE9cFVju9p7hJOr0BK3Q=
Subject key identifier:   46:C8:AA:FE:67:11:00:29:C9:1A:B6:85:6A:13:4A:F2:F8:0C:97:08
Authority key identifier: 44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
Certificate issuer:       /CN=F363CC54AF/serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
Certificate serial:       0A62
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
Manifest number:          0A5F
Signing time:             Sun 27 Sep 2026 01:33:42 +0000
Manifest this update:     Sun 27 Sep 2026 01:33:42 +0000
Manifest next update:     Tue 29 Sep 2026 01:33:42 +0000
Files and hashes:         1: RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl (hash: DB+xy0T+FIkZ4FE50GTjlJc9cxkrRmrh6WCHEMeqEoI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2658 (0xa62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC54AF, serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
        Validity
            Not Before: Sep 27 01:33:42 2026 GMT
            Not After : Sep 29 01:33:42 2026 GMT
        Subject: CN=6ab87276-0bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:ab:4b:3e:1e:ed:90:68:28:33:2c:a1:07:
                    84:21:0c:39:1e:86:95:40:d6:c3:81:9a:4d:e8:d5:
                    5c:63:6b:d2:46:bf:60:69:57:c9:c4:ba:ce:9f:ef:
                    c0:fb:03:31:63:36:0e:e5:40:15:f0:50:cd:a3:fe:
                    b1:39:39:32:11:8b:e9:a0:65:d0:42:eb:f0:22:b5:
                    1e:4c:66:b1:fd:db:f8:3b:d1:91:cf:6f:63:72:d6:
                    ee:8b:79:87:66:f4:00:00:1c:f5:d1:cd:e9:f8:cd:
                    09:a0:ee:95:5d:de:d2:35:4f:fd:f5:e7:46:39:f4:
                    0e:2e:5b:17:26:07:75:4b:ec:24:cc:c5:55:89:9b:
                    61:48:7a:e1:d4:8c:e8:d0:96:67:d7:98:f3:75:1a:
                    fa:54:64:8a:8f:76:8e:87:36:e6:98:a5:5b:95:80:
                    ea:bc:b3:26:19:d2:77:b6:43:53:b2:ae:53:91:36:
                    10:ac:2a:dc:09:91:82:e7:1e:73:a8:d8:a3:0a:21:
                    56:48:6b:ec:d4:54:1d:17:5e:a0:f1:bd:c0:24:32:
                    e9:a7:c8:c4:a6:3b:c6:b0:aa:2a:bf:0a:ea:4f:c7:
                    2f:dd:79:28:c5:99:ab:61:47:9a:98:a3:aa:83:d5:
                    7a:61:df:a5:35:35:7e:7c:07:47:3b:f9:a6:4e:59:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C8:AA:FE:67:11:00:29:C9:1A:B6:85:6A:13:4A:F2:F8:0C:97:08
            X509v3 Authority Key Identifier:
                keyid:44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f3:1b:6a:d6:fc:12:08:5f:ca:0e:26:1f:a8:01:8f:d4:31:
         26:58:ea:85:98:93:85:38:2a:a3:96:d2:e1:7b:91:1b:3e:e6:
         7e:4e:17:ab:65:b5:e4:13:b9:be:af:12:a8:72:a2:96:33:52:
         35:ba:2d:f2:f3:ec:76:64:6e:bd:92:e3:0b:62:28:81:a7:70:
         1a:fb:f6:70:e2:c4:98:9b:67:bd:44:82:4a:7c:77:7e:66:ed:
         c1:d9:bf:66:51:73:58:ee:00:52:b3:8d:fb:46:62:c6:c9:45:
         2d:8c:ae:e3:6e:ca:17:07:4d:f4:b1:40:94:59:9c:78:8f:7f:
         36:0f:97:a5:24:e2:cb:89:0e:d6:dc:a5:65:39:95:90:80:48:
         a4:82:9f:01:1a:fc:88:bc:e3:d9:5e:d6:22:5b:4f:f5:7f:59:
         aa:45:62:f9:7f:ab:04:7a:66:03:4f:03:ea:43:51:b1:4c:5a:
         4d:08:d5:87:70:98:56:cc:bb:ec:1d:02:1f:5a:ce:b8:45:4d:
         8b:65:b3:8e:a6:47:23:29:a5:31:c6:bf:fe:08:74:61:31:ce:
         18:95:81:88:89:fd:d1:f0:25:15:a7:4a:5b:99:3f:7e:5d:3d:
         84:f3:74:37:9b:07:76:34:d7:55:57:69:08:c3:9d:ba:a6:e8:
         89:67:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:31:11 2026 by rpki-client