Error: rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
File:                     GVvktSNN9Q1x07s1Ccaxtchzy6M.mft (raw, json)
Hash identifier:          YR7eNjcYyhYuy+0IQP/Wr33iTuQcnXqvAcoYxJA+KFA=
Subject key identifier:   52:2D:8D:91:27:38:37:10:AE:63:4C:CC:53:68:B9:3E:42:8A:B6:F9
Authority key identifier: 19:5B:E4:B5:23:4D:F5:0D:71:D3:BB:35:09:C6:B1:B5:C8:73:CB:A3
Certificate issuer:       /CN=F3657C0DAF/serialNumber=195BE4B5234DF50D71D3BB3509C6B1B5C873CBA3
Certificate serial:       0C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
Manifest number:          0B
Signing time:             Thu 24 Sep 2026 05:56:17 +0000
Manifest this update:     Thu 24 Sep 2026 05:56:16 +0000
Manifest next update:     Sat 26 Sep 2026 05:56:16 +0000
Files and hashes:         1: GVvktSNN9Q1x07s1Ccaxtchzy6M.crl (hash: LcrDjRR810JU9yV2Aj4ZvP5YF/8pfTEWQxp5/rLbpxo=)
                          2: E4FD77E4B1CB11F1AD817706CF1D38B0.roa (hash: uICGBeopa56mAEq4BBSjya2Wk/H4T/vpIlsV1cTfWho=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3657C0DAF, serialNumber=195BE4B5234DF50D71D3BB3509C6B1B5C873CBA3
        Validity
            Not Before: Sep 24 05:56:16 2026 GMT
            Not After : Sep 26 05:56:16 2026 GMT
        Subject: CN=6ab4bb81-b8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b5:af:6b:25:12:aa:93:a9:8e:13:fa:91:cb:
                    ca:60:4c:1f:b9:99:57:35:99:d9:d4:79:1c:62:f3:
                    45:08:d9:d1:92:54:cf:f9:93:32:f1:01:4f:0d:37:
                    09:91:0d:46:73:d8:a6:eb:15:a7:ed:b8:14:d8:a3:
                    93:7d:27:5e:d5:23:e0:b3:55:76:cb:d7:7d:43:f9:
                    d9:f5:e0:41:90:2a:d6:90:58:71:ef:ba:34:72:f4:
                    db:7f:e4:6d:b4:1a:51:6f:a6:92:75:95:4f:0d:47:
                    a2:dc:86:15:89:91:8b:f8:c5:7d:33:33:10:ea:25:
                    e3:a7:e8:3b:86:f8:d0:42:a1:08:5f:bf:8d:7c:97:
                    bb:e2:7b:c4:6f:65:66:43:1c:4f:58:6a:3c:db:14:
                    26:ab:f9:56:fe:09:16:2a:ab:15:78:ed:7e:4d:72:
                    13:71:ad:6e:71:f1:f3:0a:09:bf:44:a2:49:2b:a8:
                    20:85:00:d8:f8:6e:45:fd:65:78:61:8e:40:ae:27:
                    89:71:6d:41:55:48:e0:0e:d2:d2:e3:1e:7f:ff:6f:
                    81:83:cc:c5:4e:c4:0f:56:79:1c:ab:0d:bb:ee:31:
                    b5:2a:75:17:09:d2:24:e7:8f:27:46:25:c7:51:3e:
                    21:7e:ea:c0:47:91:ff:2c:56:44:6d:ee:25:b3:63:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2D:8D:91:27:38:37:10:AE:63:4C:CC:53:68:B9:3E:42:8A:B6:F9
            X509v3 Authority Key Identifier:
                keyid:19:5B:E4:B5:23:4D:F5:0D:71:D3:BB:35:09:C6:B1:B5:C8:73:CB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b1:50:0c:1a:ad:01:dd:d7:c1:e5:21:2c:0e:67:31:57:7d:
         b2:7e:6c:b6:a0:1e:ab:19:f9:76:9b:85:da:2f:2e:4f:11:a3:
         77:0c:be:d0:fb:c2:93:1b:f4:2a:47:8d:54:86:b7:18:40:b4:
         07:fe:a7:1f:0e:a7:fe:6c:57:f5:2e:a8:03:1f:cb:ff:22:7c:
         6e:66:f4:a1:7c:38:84:9f:61:a7:e3:ee:76:c1:4f:19:58:50:
         b3:14:54:56:61:77:fe:c3:1f:75:17:79:12:01:3f:ef:90:ed:
         81:33:40:83:21:a6:c0:b3:81:17:93:e7:c0:37:59:59:03:1d:
         0f:07:1d:9a:e0:ba:57:82:2d:2f:58:c3:74:2e:5a:98:5d:59:
         a2:35:14:93:bf:24:bb:d5:23:b6:02:93:aa:bb:3e:65:97:02:
         66:68:de:1f:f7:6f:e0:ee:2c:2e:ea:b2:d3:cc:97:e9:bc:48:
         56:8b:97:0a:b6:18:88:26:fd:e4:42:b8:c3:d4:34:bb:76:d1:
         9d:f1:9b:9f:e8:c6:d7:4d:04:ee:51:94:38:0a:5b:9a:bf:2b:
         fa:08:5f:79:48:3c:d5:59:20:fe:a8:15:5d:2a:10:de:ff:1b:
         b6:d1:87:91:28:4f:12:30:06:46:59:a8:61:4e:36:e0:d6:19:
         33:6e:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:44:43 2026 by rpki-client