Error: rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
File:                     Vamk1ndOPRyda8EBAHTd-iVAqgI.mft (raw, json)
Hash identifier:          26NaBNZ5W2HR56c/NePTQfW6CvpKxFmBotA4Nvda7j0=
Subject key identifier:   51:5C:A7:FC:DD:D0:F9:54:01:52:70:28:D8:64:80:73:2B:4D:12:A8
Authority key identifier: 55:A9:A4:D6:77:4E:3D:1C:9D:6B:C1:01:00:74:DD:FA:25:40:AA:02
Certificate issuer:       /CN=F365646EAF/serialNumber=55A9A4D6774E3D1C9D6BC1010074DDFA2540AA02
Certificate serial:       0483
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vamk1ndOPRyda8EBAHTd-iVAqgI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
Manifest number:          0481
Signing time:             Sun 27 Sep 2026 03:42:34 +0000
Manifest this update:     Sun 27 Sep 2026 03:42:34 +0000
Manifest next update:     Tue 29 Sep 2026 03:42:34 +0000
Files and hashes:         1: Vamk1ndOPRyda8EBAHTd-iVAqgI.crl (hash: jFRhHG8TS2zEf1JGu+dF4b8qVWxKB9GQn+S8O5HVTTM=)
                          2: C433AADC24F611F0AC7208C4DAE4EC9C.roa (hash: myZR5K6jPICi/QSE2AYyTCTq53T3GwGb50gt3dAwMB8=)
                          3: 50E525E4457B11EEB9C84B4D4AD9E6FC.roa (hash: /3fCZ5M7gX+2d2oVslebu/Gi7jYTFXq9ULmP31irCn8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vamk1ndOPRyda8EBAHTd-iVAqgI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155 (0x483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365646EAF, serialNumber=55A9A4D6774E3D1C9D6BC1010074DDFA2540AA02
        Validity
            Not Before: Sep 27 03:42:34 2026 GMT
            Not After : Sep 29 03:42:34 2026 GMT
        Subject: CN=6ab890aa-437a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:dc:4e:bd:95:95:cd:82:71:7c:83:2c:d5:
                    e7:07:57:ca:12:ef:bc:e1:12:8b:15:3c:00:ad:f9:
                    87:29:95:b0:9b:54:c4:a8:f0:52:88:5b:c7:39:14:
                    d3:81:c7:a0:74:b8:0d:d4:4e:16:e5:b9:23:e6:e2:
                    e4:39:f5:ff:c8:07:92:e9:00:e6:7d:a5:3f:71:c6:
                    b8:29:ef:35:44:b5:dc:0a:00:11:98:0e:71:4b:6a:
                    54:e9:7c:6c:6f:aa:ad:17:97:82:08:5a:a7:bb:a9:
                    d6:66:aa:39:76:84:2f:0d:e8:3c:d5:10:d2:98:e2:
                    78:63:e7:c9:49:93:13:c6:70:69:1f:98:b0:42:d8:
                    72:d1:eb:72:90:ad:49:90:de:ec:12:7e:ad:dc:aa:
                    d7:9d:ee:b1:06:3b:7c:53:9f:6d:8c:7c:7a:aa:56:
                    a6:bf:d3:e0:36:b3:33:54:9e:b4:a0:ee:a7:41:69:
                    53:76:25:66:ab:bd:9f:11:20:ae:33:8c:aa:c7:94:
                    4f:37:45:6b:87:9b:43:f3:e7:1d:aa:d4:72:7f:60:
                    4d:8f:9c:c9:6f:2d:61:ab:da:18:3c:0b:3d:23:57:
                    b1:2a:1d:b9:a9:46:c7:02:69:8b:61:95:be:51:69:
                    e8:9f:e4:c6:21:bc:a0:8a:d8:34:ef:77:09:c8:87:
                    8a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5C:A7:FC:DD:D0:F9:54:01:52:70:28:D8:64:80:73:2B:4D:12:A8
            X509v3 Authority Key Identifier:
                keyid:55:A9:A4:D6:77:4E:3D:1C:9D:6B:C1:01:00:74:DD:FA:25:40:AA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vamk1ndOPRyda8EBAHTd-iVAqgI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:2b:a4:a1:66:ae:11:80:4c:62:86:a5:53:90:df:98:e3:30:
         ce:cb:cd:18:e0:54:70:ba:ac:90:db:b0:7f:f7:22:17:5b:7e:
         db:db:90:76:10:fc:cc:91:25:f0:39:7c:11:39:bd:6a:58:30:
         8a:ef:d4:e5:6c:98:50:c8:84:da:55:2f:a5:01:49:b5:bc:ba:
         91:b4:05:03:22:b0:cd:69:63:af:7a:26:b1:ef:69:4c:dc:55:
         8c:9b:05:63:6e:c8:e5:01:60:a0:9c:18:ea:d3:37:85:8d:67:
         86:8d:88:8e:6b:56:aa:7a:f6:0f:3b:0f:e6:98:0a:c9:8d:e3:
         f3:30:61:ce:15:a2:9f:b8:66:20:0e:79:4e:ba:c9:3b:eb:0a:
         87:56:76:27:c8:8a:30:c9:d2:17:d2:b8:22:17:d0:b7:27:24:
         dc:a9:74:cb:65:7c:e4:ca:09:b6:2e:92:0b:9c:c4:f6:70:46:
         b6:ad:3b:13:d7:4d:2c:f4:ca:63:13:0e:c3:5e:30:7d:19:d4:
         02:18:17:a7:94:28:f5:de:76:49:05:0d:63:53:cb:10:ff:b8:
         04:86:98:ed:21:53:83:5f:42:88:42:85:bb:ef:60:d3:e6:43:
         f1:cf:2e:16:6a:f1:91:26:09:e3:da:f3:5e:f9:23:bd:67:85:
         26:8c:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:51:15 2026 by rpki-client