Error: rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.mft
File:                     IwNslO_0gxN5Xa6gDBKZ4rTk4pM.mft (raw, json)
Hash identifier:          92+bW7bOf6+RISZWDK3Yoztu+fJLsV77n2WsqvHxdWU=
Subject key identifier:   EC:C9:0B:F1:48:76:D9:62:70:4D:B7:04:10:43:16:91:D7:94:0D:73
Authority key identifier: 23:03:6C:94:EF:F4:83:13:79:5D:AE:A0:0C:12:99:E2:B4:E4:E2:93
Certificate issuer:       /CN=F365A480AF/serialNumber=23036C94EFF48313795DAEA00C1299E2B4E4E293
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.mft
Manifest number:          14
Signing time:             Fri 25 Sep 2026 05:53:53 +0000
Manifest this update:     Fri 25 Sep 2026 05:53:52 +0000
Manifest next update:     Sun 27 Sep 2026 05:53:52 +0000
Files and hashes:         1: IwNslO_0gxN5Xa6gDBKZ4rTk4pM.crl (hash: yaeTup4xiwgszzaLKOywc1kAVN/jvPjUndPZ4bS8psk=)
                          2: C2A4DB30ACDD11F19DAFAFB0CE1D38B0.roa (hash: rBda6KLyMhzNJd4feBvTKVLID1OfKFbDANR6W6Cpqj8=)
                          3: 58791540AD0111F184BF7602CF1D38B0.roa (hash: sXvM2BCjii1AUpc4zd9HLZ0WeRLw8cy12DTY/3xH/fk=)
                          4: 7A60025AACDD11F1B69343B0CE1D38B0.roa (hash: YVJASzPQEQ6oASYVtspRouoqFyoGMfLPtGbO3Nq1LYY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365A480AF, serialNumber=23036C94EFF48313795DAEA00C1299E2B4E4E293
        Validity
            Not Before: Sep 25 05:53:52 2026 GMT
            Not After : Sep 27 05:53:52 2026 GMT
        Subject: CN=6ab60c71-d342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:34:79:c0:b0:84:0a:ab:c0:e6:58:db:43:6c:
                    a3:95:0c:86:82:63:98:11:5c:88:08:50:17:71:d3:
                    71:cd:30:45:16:5a:31:7c:c9:b9:09:57:f0:03:28:
                    65:ea:f9:09:8f:3c:0a:d3:8c:3e:a5:4c:5a:46:6f:
                    f6:94:c0:93:ec:30:5d:d4:c7:ee:6c:c2:8b:60:fe:
                    3c:a1:4e:e3:95:e1:d9:b8:6d:72:24:e6:d1:dc:30:
                    df:91:c1:3e:51:81:6f:7f:c9:58:2e:cb:b7:e9:72:
                    a8:67:81:6d:44:fa:87:57:7a:4d:47:46:3b:99:20:
                    16:6a:85:ea:40:c3:9a:77:db:3a:f3:1c:a4:bc:fc:
                    86:5b:d9:63:d4:a8:84:51:82:58:27:43:3b:51:1e:
                    e0:6d:39:d6:1c:3e:74:88:e9:be:d3:0d:c9:b4:6d:
                    ca:b1:b6:dd:b5:36:0b:27:d0:dc:c6:da:1e:04:9b:
                    e0:d5:fe:1c:6f:70:71:fa:a9:87:23:66:10:57:5c:
                    14:bd:fd:92:ec:32:cc:00:38:a4:99:ee:37:7f:23:
                    68:e5:66:eb:52:f2:88:34:c7:41:d3:16:e1:b2:5d:
                    ce:f9:fa:7b:d8:1a:9b:f3:b2:6f:d1:d8:7b:bc:47:
                    1e:b7:c5:ac:32:37:98:71:e4:6e:84:46:c4:11:df:
                    33:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C9:0B:F1:48:76:D9:62:70:4D:B7:04:10:43:16:91:D7:94:0D:73
            X509v3 Authority Key Identifier:
                keyid:23:03:6C:94:EF:F4:83:13:79:5D:AE:A0:0C:12:99:E2:B4:E4:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a8:7b:dc:b1:f5:80:50:da:d8:2a:2d:04:c1:3d:fc:b2:c4:
         4e:57:30:70:9e:19:2d:42:3f:ee:ee:a6:61:ab:e9:58:3b:78:
         44:49:04:48:b1:a8:68:ac:7e:a0:97:4f:e8:64:6d:ea:e5:85:
         98:02:af:c7:de:b8:a6:a2:92:1c:cd:82:8d:bd:f8:4e:86:ac:
         72:12:40:90:cd:c4:5e:66:07:03:cf:58:79:1d:50:ad:e8:5a:
         c9:13:9f:50:50:12:d2:1f:c4:ac:20:d5:54:23:59:aa:98:e1:
         08:de:66:24:32:2b:97:db:bc:ba:2a:59:dd:8e:64:f5:4c:31:
         3d:4f:bb:05:a8:02:dc:8d:34:0e:53:25:49:c3:11:db:74:13:
         db:a4:a8:5c:bc:6d:a4:5a:a1:65:47:5a:44:84:e4:ec:b3:a3:
         3f:9b:16:da:b5:ec:2f:3c:51:e3:b1:59:6b:f8:d0:13:4d:65:
         67:3f:48:91:5d:fe:12:fb:e0:56:3a:e1:b8:b5:94:c8:e8:6a:
         5b:2d:87:77:1e:1f:a1:c9:35:fc:dc:6d:8a:f6:0f:fc:d8:14:
         5e:97:52:a8:71:6f:45:90:38:37:13:4e:84:76:53:c8:ec:e6:
         f8:14:e6:18:26:02:6d:db:d4:a6:e4:13:1d:62:c6:90:f0:64:
         21:ac:00:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:45:08 2026 by rpki-client