Error: rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
File:                     K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft (raw, json)
Hash identifier:          +Dcbm1SskpLPHkRE+LqJskhULCAdyfNl2hjvc7E+C38=
Subject key identifier:   01:53:9F:78:43:8C:BE:0C:5E:8A:BA:A9:60:53:F0:75:27:5D:58:8D
Authority key identifier: 2B:93:74:F5:36:72:AE:4C:13:3C:DB:B6:FB:C6:19:51:81:9D:32:B4
Certificate issuer:       /CN=F365BBDAAF/serialNumber=2B9374F53672AE4C133CDBB6FBC61951819D32B4
Certificate serial:       65
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
Manifest number:          61
Signing time:             Sun 27 Sep 2026 05:43:36 +0000
Manifest this update:     Sun 27 Sep 2026 05:43:36 +0000
Manifest next update:     Tue 29 Sep 2026 05:43:36 +0000
Files and hashes:         1: K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl (hash: zNni0W6I8iUCaBFsFH/GRUYFnGtm0u5FtBA8f224PLU=)
                          2: 21D46A1A76F811F1937C3B0DCF1D38B0.roa (hash: MKCYxKjd2uNuwqyT9k0lVtIuI9mAGX3CL0R0CGuQ8yA=)
                          3: 763AA698B2B011F1A0A5E9E8CE1D38B0.roa (hash: f1EzEvOJM51WdQleA7NLcVBr5xI58ejbgvs5g3oD3t0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BBDAAF, serialNumber=2B9374F53672AE4C133CDBB6FBC61951819D32B4
        Validity
            Not Before: Sep 27 05:43:36 2026 GMT
            Not After : Sep 29 05:43:36 2026 GMT
        Subject: CN=6ab8ad08-f0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:f3:80:b5:c1:8c:0a:08:3a:2a:b9:23:56:
                    49:a4:b8:ea:e8:09:a2:f5:c1:ec:80:66:b2:d0:69:
                    7d:7a:cf:62:47:b4:17:e7:9b:40:d1:d8:17:dc:2f:
                    02:c7:1d:28:f0:c7:9a:23:da:6d:f9:e2:66:8d:14:
                    18:1a:7d:89:63:be:bc:f9:f1:35:f8:f8:11:3b:6b:
                    e5:37:df:f9:bd:59:ac:bb:5a:be:fb:77:6b:e0:7f:
                    6d:9c:d2:5d:ca:1b:6d:64:9b:31:13:f0:b3:82:c4:
                    b0:a2:c6:e5:dc:84:ec:71:26:7e:e1:00:cb:7f:c8:
                    b5:a3:ab:fd:af:bd:d8:2b:8e:ae:e4:7a:41:38:ab:
                    6f:a2:3a:62:65:2a:fe:9f:6c:92:14:35:7e:3e:69:
                    ff:88:6e:23:ea:01:c1:34:fd:0c:e9:62:05:91:10:
                    69:bf:30:88:3e:1f:fd:13:e3:61:28:59:a2:b1:5d:
                    47:bf:02:f8:f3:52:05:f5:00:46:01:1c:22:e3:59:
                    ea:98:3e:5f:d2:82:a3:ad:01:f9:34:2d:5d:8f:de:
                    01:43:cc:91:a1:7e:05:12:89:62:d4:0c:bb:22:8d:
                    bf:e3:0f:6f:6b:02:4e:a2:62:37:6a:2e:bf:43:ba:
                    93:07:61:9d:e0:26:8e:ca:2d:8a:51:4a:6b:5e:d0:
                    f9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:53:9F:78:43:8C:BE:0C:5E:8A:BA:A9:60:53:F0:75:27:5D:58:8D
            X509v3 Authority Key Identifier:
                keyid:2B:93:74:F5:36:72:AE:4C:13:3C:DB:B6:FB:C6:19:51:81:9D:32:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c9:29:8b:ac:84:59:d6:01:f0:89:6b:06:e5:5c:bd:d6:ea:
         71:86:99:3d:0c:88:0e:8c:a0:30:ce:b3:27:07:02:93:02:ec:
         92:d7:bf:bc:6c:fc:95:45:e5:d4:b9:7d:40:4d:48:59:e8:a1:
         99:77:98:7a:3a:b7:7c:f0:52:53:07:e3:de:88:3d:be:ed:4a:
         a0:a2:0e:71:c5:fe:ed:28:a6:50:ac:5f:bf:c0:01:ee:53:8e:
         60:e9:0c:69:5e:0a:ce:06:ba:70:f3:20:54:d0:d1:70:c8:99:
         8e:5f:2f:5a:61:6b:69:c7:a6:0f:22:84:11:6a:36:ba:89:de:
         07:83:10:be:1a:07:d3:02:ee:51:58:0e:03:f6:bd:78:35:1c:
         23:2c:5a:5b:de:f5:f3:5a:8e:59:e5:01:e5:b8:c2:e0:79:15:
         1e:ba:68:7d:b9:79:cc:2c:7d:61:1a:63:3d:0c:64:dd:17:f9:
         51:35:2b:02:2f:ba:66:e0:70:28:a8:85:2e:42:01:c6:6b:d5:
         46:80:b2:fb:df:0b:5a:1b:94:69:89:43:1a:31:f1:ec:32:56:
         eb:e6:56:6c:71:4a:04:07:b9:0e:c2:31:2a:1d:08:37:0a:ba:
         db:89:a6:c9:2c:f7:c6:9e:30:a8:7e:18:72:6c:b6:cd:d6:04:
         07:da:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:46:17 2026 by rpki-client