Error: rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
File:                     Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft (raw, json)
Hash identifier:          csmjzBmlZ6oERUE++xzJU7P/3fir+4/YuuQAhd9rT6A=
Subject key identifier:   84:5F:E9:46:25:7D:0D:BC:AA:63:15:FC:F1:BA:AC:FC:C2:3F:CD:B6
Authority key identifier: 5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
Certificate issuer:       /CN=F3664F7BAF/serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
Certificate serial:       75
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
Manifest number:          72
Signing time:             Sun 15 Nov 2026 05:45:29 +0000
Manifest this update:     Sun 15 Nov 2026 05:45:28 +0000
Manifest next update:     Tue 17 Nov 2026 05:45:28 +0000
Files and hashes:         1: Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl (hash: mcVgzMlgpTuOIrtBbFy7R5iSl6/qs5XM31LjGjB1kTI=)
                          2: F26EC26A8A4E11F1B7AEDED7CE1D38B0.roa (hash: aCcxDmtX/tnLhZ6JcUFSofoUniwx3floStRDNlGRoHU=)
                          3: B9E595E08A4E11F18F6CB1D7CE1D38B0.roa (hash: B4ThLzrbIVO16jLTzmKePpz4F2ddN768weBvs+JXx/U=)
                          4: D71B62A28A4E11F1B606C7D7CE1D38B0.roa (hash: KR4X6gtcRk+5VuKUYUA4G1pQskL0suzWflfpye7zrSA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664F7BAF, serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
        Validity
            Not Before: Nov 15 05:45:28 2026 GMT
            Not After : Nov 17 05:45:28 2026 GMT
        Subject: CN=6af946f9-7b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:e2:77:fe:98:f9:c3:05:ee:fa:c7:bd:96:
                    0b:60:28:aa:af:e6:d3:3d:6a:3e:45:19:47:99:4b:
                    6d:63:13:05:1f:89:95:1c:6c:e5:fb:cd:83:e6:47:
                    a2:cf:86:d2:35:79:bf:b9:7d:eb:46:fe:b6:65:cd:
                    d9:8c:e9:41:7a:ce:00:fa:7d:b7:8e:f9:43:30:db:
                    1e:91:62:8c:67:78:7e:9d:e1:42:7a:f0:b5:6e:f9:
                    ac:45:21:80:a6:33:93:66:9b:61:65:0f:fb:a7:00:
                    14:10:8b:48:30:83:f7:33:76:2c:32:31:68:63:58:
                    b0:bf:e1:3c:14:31:56:8e:49:96:a6:31:5c:ee:7e:
                    31:60:68:95:73:62:2e:19:60:96:4d:f8:30:ec:c8:
                    8c:ec:ee:1d:82:82:40:8b:31:81:c3:93:6d:42:ca:
                    ef:62:45:02:7d:f3:25:3d:90:71:01:73:6b:e1:e9:
                    1b:10:da:c6:66:3b:76:b5:ef:bb:d4:2e:bd:f0:d8:
                    23:82:8f:fb:fe:4d:83:89:05:1c:19:2a:72:bb:4f:
                    81:bd:ce:14:00:2a:b1:28:0f:f8:e6:4c:02:fb:cc:
                    a2:0a:4d:8e:00:9b:23:23:bf:b1:18:7b:eb:23:f2:
                    14:84:81:22:77:87:7f:22:e6:24:75:e3:6c:71:3d:
                    c7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5F:E9:46:25:7D:0D:BC:AA:63:15:FC:F1:BA:AC:FC:C2:3F:CD:B6
            X509v3 Authority Key Identifier:
                keyid:5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:61:c6:e0:70:2d:01:7b:f1:53:fa:06:e6:a6:4b:50:ac:a6:
         2d:53:b6:f3:d5:50:28:83:16:1b:06:6e:e2:70:59:ee:7b:cc:
         0b:7e:a7:cf:f5:3d:e9:39:67:0e:81:0d:50:e3:83:85:bd:0b:
         54:a6:62:24:3c:bc:29:a7:82:4e:18:0b:74:fc:1f:de:75:a8:
         b8:53:6f:e4:45:2e:44:7b:12:5b:a9:3b:d5:43:13:7a:d2:f8:
         bb:13:72:eb:f9:4a:e3:09:a0:62:18:71:25:54:02:73:e4:49:
         c4:09:1c:d7:66:de:73:45:67:34:be:21:b4:5b:fc:b0:d1:9b:
         b2:cf:89:46:ad:69:08:12:f6:b1:89:1f:b5:8c:fa:d0:88:63:
         43:9a:c9:b8:74:b3:5a:24:17:13:ac:32:bd:e6:85:92:d9:ba:
         87:24:13:0a:15:a8:c5:63:85:51:95:52:b4:bb:12:45:35:4e:
         7a:0c:03:5c:80:e0:78:36:24:4a:4f:ac:93:c1:77:5e:e7:01:
         21:ad:a2:02:e0:ba:5d:cd:0e:5e:81:c0:1d:fa:3b:54:de:99:
         74:7a:6c:90:3e:b5:10:f1:07:1c:74:7c:3b:38:82:4c:34:e1:
         38:90:15:ab:d9:97:b4:44:2e:e2:73:b3:b5:de:d4:06:32:cf:
         7f:04:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:01:27 2026 by rpki-client