Error: rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
File:                     XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft (raw, json)
Hash identifier:          ds6KvhNgKA/nmjCB8EI7cuPv9Oke3iXIAdBv9AFfJHI=
Subject key identifier:   C2:9B:18:2A:CE:EF:6D:30:F0:02:11:73:86:80:D7:7D:75:5B:55:0E
Authority key identifier: 5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
Certificate issuer:       /CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Certificate serial:       0531
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
Manifest number:          0529
Signing time:             Wed 23 Sep 2026 03:21:38 +0000
Manifest this update:     Wed 23 Sep 2026 03:21:38 +0000
Manifest next update:     Fri 25 Sep 2026 03:21:38 +0000
Files and hashes:         1: XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl (hash: Owwiu78c0EzRlsoo5eHbgwpwkJKopv21Bq0N4yck0So=)
                          2: 0772CAA08A8911F1B8D5B5B7CE1D38B0.roa (hash: 0SCDiAaBklnc1xJtkliUs7tw15p2CViXTewi2tuEFXM=)
                          3: 79D5DB248A8811F1B84394B5CE1D38B0.roa (hash: i+zFFZM3X/PUrc8I0v/ziaj271QeHF3brFfaJ6nq4yI=)
                          4: AC6167DE8A8811F18F75B1B5CE1D38B0.roa (hash: Zvk0a9nAXJtnghgjaJf1/ITi6gG3KagMRPwl4sbj7O4=)
                          5: 114B488C8A8811F1B4F294B1CE1D38B0.roa (hash: lTH4VR2iEA5NtmQng6yuK9k/zCA94aU45I3nxenJvFk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 03:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365062AAF, serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
        Validity
            Not Before: Sep 23 03:21:38 2026 GMT
            Not After : Sep 25 03:21:38 2026 GMT
        Subject: CN=6ab345c2-2d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:ba:97:c8:e6:7c:7b:2f:1f:f4:ec:02:35:
                    12:a5:1d:e8:56:06:11:5d:eb:d3:29:a3:a3:54:49:
                    d1:fd:df:4a:6b:32:30:6d:a1:b1:b3:cb:77:a9:b5:
                    3e:41:59:fd:42:fa:6c:65:db:34:31:86:4b:f9:cc:
                    2d:f3:a3:22:79:c2:16:fb:d9:c2:d4:7a:41:5d:1d:
                    3e:64:75:cf:b9:03:b7:d2:aa:6f:1d:8d:0f:d8:0f:
                    13:07:23:f5:7b:a1:c9:96:30:20:82:04:af:eb:f3:
                    bc:01:eb:b5:70:ba:63:19:e5:da:e0:73:90:71:62:
                    c9:17:be:ae:22:fe:53:7c:9d:24:97:a4:01:af:ff:
                    ed:96:e7:5d:03:c4:db:b2:d8:7e:87:4e:09:4b:b8:
                    92:63:5c:67:63:05:b3:22:12:52:f6:bd:09:d4:46:
                    de:e4:30:d7:af:61:80:41:94:d2:64:f7:2d:a0:9d:
                    ec:37:13:61:46:ee:5d:f3:f6:87:30:83:dd:1e:48:
                    21:82:0c:ea:dc:7b:6b:d9:76:3a:e1:3f:03:d7:4b:
                    17:e5:ad:c3:4b:c1:3a:9e:35:6b:2a:3b:74:ea:d6:
                    58:f1:22:7a:10:fa:97:2e:c4:19:fc:d7:12:0a:a1:
                    50:6f:f5:01:2d:33:84:ac:df:50:74:a3:0e:59:7a:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9B:18:2A:CE:EF:6D:30:F0:02:11:73:86:80:D7:7D:75:5B:55:0E
            X509v3 Authority Key Identifier:
                keyid:5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4a:80:89:21:8d:35:00:d4:34:68:dd:6b:80:ad:06:3a:63:
         13:5e:cf:55:f1:b6:23:61:25:d6:55:c9:ff:cf:9c:7c:41:19:
         be:10:c8:86:12:f1:2b:01:30:d7:8b:91:73:55:be:68:76:83:
         27:45:48:9f:39:cc:f8:fe:fa:e9:f0:26:50:92:a0:db:72:2e:
         d2:5a:02:bc:57:ce:6a:a5:92:f1:0b:5b:ec:df:b0:82:e4:0f:
         17:9f:17:00:3f:bd:43:51:25:d1:b2:68:79:20:dc:1f:30:c8:
         a3:7f:70:99:e1:92:f5:c8:28:5f:e4:34:74:18:b3:6b:7d:81:
         2a:17:58:5b:c5:e9:8d:b1:85:c7:1e:89:12:62:97:72:b0:41:
         10:c0:3b:07:a2:9c:2c:8a:a7:5f:92:56:b5:22:67:f7:4f:26:
         bc:87:9a:92:72:13:54:8b:73:54:1b:7f:3a:ca:a0:f1:d9:af:
         dd:02:b5:ad:76:3b:18:7d:eb:ca:05:60:07:8f:39:3e:89:d6:
         46:8d:f5:e5:7e:7e:97:3a:74:47:71:2c:f0:36:f3:22:af:1e:
         94:89:e5:36:d2:59:3d:91:61:d4:09:33:58:ff:d1:9c:e4:2b:
         d1:2c:9f:29:64:08:5a:33:fc:c6:92:b1:95:84:5d:f9:87:7c:
         79:f3:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:34:20 2026 by rpki-client