Error: rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
File:                     gVdGXshx9nfFuXh07KV5IzijWSQ.mft (raw, json)
Hash identifier:          UtgFNBg5Q96hgyA+TPjbpfgHpFxV+vrJVV3XaMfQDV0=
Subject key identifier:   70:D6:01:18:B1:D3:A1:C5:E7:89:39:94:7B:9A:F0:05:9C:C8:A3:B4
Authority key identifier: 81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
Certificate issuer:       /CN=F3645EEFAF/serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Certificate serial:       1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
Manifest number:          17
Signing time:             Wed 23 Sep 2026 05:54:18 +0000
Manifest this update:     Wed 23 Sep 2026 05:54:17 +0000
Manifest next update:     Fri 25 Sep 2026 05:54:17 +0000
Files and hashes:         1: gVdGXshx9nfFuXh07KV5IzijWSQ.crl (hash: zpTDrNirpR9pXcgUwT/6wAV7sdcNwxjh7j96RmxuWQo=)
                          2: BCA47662AC3A11F1BD37C8CFCE1D38B0.roa (hash: 1aHOqjAbG/Vyek5fSEwl25glNibnEDDQivHJEhgfU/o=)
                          3: EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa (hash: QwlK+QN112m44lVk1uPEgi3OJcDWCvd/zy8bamKKzqY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645EEFAF, serialNumber=8157465EC871F677C5B97874ECA5792338A35924
        Validity
            Not Before: Sep 23 05:54:17 2026 GMT
            Not After : Sep 25 05:54:17 2026 GMT
        Subject: CN=6ab3698a-25a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:02:0d:6f:bf:5b:25:b6:1f:2e:e4:f0:b1:
                    68:e1:3f:20:91:34:6b:e2:3b:51:1a:43:32:68:96:
                    23:48:18:5c:05:98:a5:0a:99:f4:be:57:65:17:e2:
                    48:60:67:81:aa:fe:eb:47:fd:aa:e6:88:33:43:31:
                    72:8f:48:95:f4:86:19:ae:31:06:01:d3:79:32:ee:
                    c3:e1:8e:0f:bf:cf:7c:d4:60:89:f4:eb:fb:1f:a0:
                    e3:05:6d:05:f2:69:b5:b7:be:ea:d0:c6:1f:32:82:
                    de:4f:72:04:1d:3c:ae:58:fd:ce:7e:bc:6c:df:53:
                    56:dc:ff:f4:b0:87:98:be:ba:48:f6:8c:39:4d:38:
                    b2:77:fd:12:9b:cc:db:5e:0b:99:96:94:bc:9f:42:
                    9e:a7:25:12:c0:c3:51:01:46:ba:d0:43:dc:4e:8b:
                    ed:1b:b7:85:84:12:ac:7f:8f:86:3f:43:2c:6d:a2:
                    3f:b7:c0:0b:1f:81:35:25:0f:16:5b:57:6b:71:39:
                    df:7d:4f:44:50:9b:87:7b:28:ba:cc:84:a6:5b:a2:
                    7e:74:13:d5:1e:63:e1:ab:91:a3:2a:5b:81:f3:92:
                    0e:4f:59:96:ca:08:e0:cf:fc:b0:ad:9d:03:9e:99:
                    03:52:91:c5:99:ca:e4:56:7a:3b:11:42:3a:42:c9:
                    78:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D6:01:18:B1:D3:A1:C5:E7:89:39:94:7B:9A:F0:05:9C:C8:A3:B4
            X509v3 Authority Key Identifier:
                keyid:81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:33:51:aa:91:5a:1b:c8:1c:72:4f:10:bf:22:a5:fd:4d:71:
         2d:f3:25:5f:64:34:4b:a0:1a:29:f8:2c:8f:e8:d7:14:72:5a:
         d9:30:b3:da:51:dc:90:ec:1b:86:78:cc:58:5d:31:8b:1d:7b:
         5f:24:b1:44:cd:7a:68:9a:30:7d:d1:ba:95:c7:66:97:90:ef:
         8f:fe:33:f7:ca:6a:b5:22:f0:78:95:20:d1:a2:65:25:13:7a:
         5c:82:fa:58:50:4d:4c:64:a9:60:70:13:c6:71:c1:6a:87:ea:
         bd:4f:b5:9d:e3:88:62:93:09:4e:ed:f1:ea:8f:b5:e3:1a:2a:
         47:7b:30:55:19:bd:ec:43:5e:5f:f6:1b:cf:d8:86:d5:d8:32:
         d2:77:9b:47:d2:db:75:a6:13:e5:14:e8:67:b8:89:99:7d:eb:
         4e:29:9b:fa:f3:0a:de:0d:c6:53:25:61:e9:88:b1:6a:02:cb:
         42:46:c3:57:4a:d9:d3:f1:95:ff:07:e4:c3:81:c6:14:24:51:
         a1:fd:a5:9d:ee:e7:bb:eb:80:16:b4:cb:83:0d:7d:40:0f:69:
         51:eb:1f:53:e3:54:bd:23:9e:c7:25:7a:4a:4c:37:dc:d7:e7:
         68:24:a4:42:cd:c3:ff:4e:7d:0f:12:57:41:e5:1d:19:bf:fa:
         ff:7a:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:26 2026 by rpki-client