Error: rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
File:                     gVdGXshx9nfFuXh07KV5IzijWSQ.mft (raw, json)
Hash identifier:          XNKIRUyAzHqw/daEF6zkwFU4lqXlx4rEPfJFKJJsAGk=
Subject key identifier:   04:8F:AA:C8:ED:4E:95:1C:4B:13:84:CF:4B:71:AC:74:53:E1:03:E7
Authority key identifier: 81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
Certificate issuer:       /CN=F3645EEFAF/serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Certificate serial:       50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
Manifest number:          4C
Signing time:             Sun 15 Nov 2026 05:51:57 +0000
Manifest this update:     Sun 15 Nov 2026 05:51:57 +0000
Manifest next update:     Tue 17 Nov 2026 05:51:57 +0000
Files and hashes:         1: gVdGXshx9nfFuXh07KV5IzijWSQ.crl (hash: eBf6jcvTc+0bjKHBbaVbqgy5LNdf3Dd2xSebcSgdOxo=)
                          2: BCA47662AC3A11F1BD37C8CFCE1D38B0.roa (hash: 1aHOqjAbG/Vyek5fSEwl25glNibnEDDQivHJEhgfU/o=)
                          3: EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa (hash: QwlK+QN112m44lVk1uPEgi3OJcDWCvd/zy8bamKKzqY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645EEFAF, serialNumber=8157465EC871F677C5B97874ECA5792338A35924
        Validity
            Not Before: Nov 15 05:51:57 2026 GMT
            Not After : Nov 17 05:51:57 2026 GMT
        Subject: CN=6af9487d-9973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:1c:8e:11:40:92:7a:7c:5a:98:03:eb:c5:
                    de:18:9a:ab:84:de:34:0a:63:1f:0f:24:5e:d1:81:
                    bf:2b:7e:d2:ed:01:1b:30:d8:dd:60:fe:6b:68:3a:
                    53:e4:cd:c2:46:19:31:e4:6d:56:1a:ea:91:b4:69:
                    4a:69:d0:63:00:b5:1a:36:05:5a:a7:29:3a:54:ff:
                    5c:27:10:22:33:0a:80:4e:23:55:65:d7:fa:8b:85:
                    70:37:ed:8c:00:95:e2:a6:b9:9d:85:4e:0c:7f:ca:
                    ce:9b:0b:69:d3:58:8d:29:db:43:de:5a:51:44:54:
                    38:0c:8f:73:8d:3e:99:d8:2f:e8:68:cc:5a:38:3c:
                    30:f9:84:0c:12:4c:98:9e:a4:31:de:74:bf:c6:a8:
                    f3:86:25:50:de:3d:89:2a:7f:dd:31:32:bc:a8:8b:
                    cf:8d:04:56:b4:90:c6:4d:f8:ad:04:7a:7b:fe:d9:
                    92:d7:5c:1f:19:a2:5e:c6:f5:c8:b3:8b:ae:1b:c9:
                    fa:05:66:60:6e:1a:95:86:d1:c5:d7:77:a1:7c:57:
                    76:c3:3b:e8:c6:e5:2d:47:18:b3:1c:1f:9b:0c:6d:
                    1b:d6:61:fc:c8:7f:df:a1:61:54:fc:77:61:ed:10:
                    49:2c:45:21:89:18:89:a2:4f:57:0b:ed:12:32:2d:
                    d4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8F:AA:C8:ED:4E:95:1C:4B:13:84:CF:4B:71:AC:74:53:E1:03:E7
            X509v3 Authority Key Identifier:
                keyid:81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:e2:0d:e4:d7:df:b7:2b:59:bd:89:4a:36:d2:63:24:23:
         76:af:fd:67:58:5d:59:60:97:7f:ad:88:7c:c9:48:b5:c7:07:
         1e:e0:63:8a:e6:75:e7:89:9a:0b:04:cb:e3:1b:8d:8d:84:42:
         ff:17:35:34:89:97:9c:ee:5d:a8:d2:30:7f:01:90:76:eb:54:
         57:8c:d7:85:a6:24:d2:07:08:70:9f:da:f2:98:d0:e1:0f:b0:
         ae:91:f8:5d:ca:42:9f:94:18:d6:53:52:22:b5:86:16:cf:0b:
         b3:bd:28:31:89:8c:2f:9a:19:0b:29:71:d2:50:bb:b5:31:c3:
         1b:f8:8b:ac:1c:e9:f6:4c:22:64:d4:d8:90:a4:38:0e:8e:44:
         39:62:5d:19:a5:ba:91:c7:d3:4b:de:c9:fd:f4:07:47:5c:20:
         c9:25:76:4e:37:a1:ae:17:cc:fa:e2:ce:84:b8:45:21:bd:03:
         70:53:52:63:2c:53:be:cd:84:21:4e:38:ce:84:d3:b0:1c:87:
         e8:b0:f7:3a:23:5a:f0:68:bc:c1:d2:a9:e4:a3:16:f7:dc:99:
         84:ef:1a:b8:c2:a0:8c:1d:7d:40:a6:24:10:be:b6:6f:8a:bd:
         21:ab:a1:bd:88:f8:b2:e4:fd:a6:51:4c:0b:19:0f:8b:3a:d4:
         e2:25:58:ed
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBUDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
NUVFRkFGMTEwLwYDVQQFEyg4MTU3NDY1RUM4NzFGNjc3QzVCOTc4NzRFQ0E1Nzky
MzM4QTM1OTI0MB4XDTI2MTExNTA1NTE1N1oXDTI2MTExNzA1NTE1N1owGDEWMBQG
A1UEAxMNNmFmOTQ4N2QtOTk3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALFNHI4RQJJ6fFqYA+vF3hiaq4TeNApjHw8kXtGBvyt+0u0BGzDY3WD+a2g6
U+TNwkYZMeRtVhrqkbRpSmnQYwC1GjYFWqcpOlT/XCcQIjMKgE4jVWXX+ouFcDft
jACV4qa5nYVODH/KzpsLadNYjSnbQ95aUURUOAyPc40+mdgv6GjMWjg8MPmEDBJM
mJ6kMd50v8ao84YlUN49iSp/3TEyvKiLz40EVrSQxk34rQR6e/7ZktdcHxmiXsb1
yLOLrhvJ+gVmYG4alYbRxdd3oXxXdsM76MblLUcYsxwfmwxtG9Zh/Mh/36FhVPx3
Ye0QSSxFIYkYiaJPVwvtEjIt1PUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQEj6rI
7U6VHEsThM9Lcax0U+ED5zAfBgNVHSMEGDAWgBSBV0ZeyHH2d8W5eHTspXkjOKNZ
JDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDVFRUYvODcxOTdBQkVBQzM2MTFGMThCM0I4Q0I3Q0UxRDM4QjAvZ1ZkR1hz
aHg5bmZGdVhoMDdLVjVJemlqV1NRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZ1ZkR1hzaHg5bmZGdVhoMDdLVjVJemlqV1NRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0NUVFRi84NzE5N0FCRUFDMzYxMUYxOEIzQjhDQjdDRTFE
MzhCMC9nVmRHWHNoeDluZkZ1WGgwN0tWNUl6aWpXU1EubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKvO4g3k19+3K1m9iUo20mMkI3av/WdY
XVlgl3+tiHzJSLXHBx7gY4rmdeeJmgsEy+MbjY2EQv8XNTSJl5zuXajSMH8BkHbr
VFeM14WmJNIHCHCf2vKY0OEPsK6R+F3KQp+UGNZTUiK1hhbPC7O9KDGJjC+aGQsp
cdJQu7Uxwxv4i6wc6fZMImTU2JCkOA6ORDliXRmlupHH00veyf30B0dcIMkldk43
oa4XzPrizoS4RSG9A3BTUmMsU77NhCFOOM6E07Ach+iw9zojWvBovMHSqeSjFvfc
mYTvGrjCoIwdfUCmJBC+tm+KvSGrob2I+LLk/aZRTAsZD4s61OIlWO0=
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:43:12 2026 by rpki-client