Error: rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
File:                     4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft (raw, json)
Hash identifier:          /12lVVpw7FHnm+6o43tLdqq3eN+s/7VQNELuQVz+msk=
Subject key identifier:   C9:20:C9:01:AE:3A:BE:97:20:0D:C5:63:8C:1F:D2:82:48:90:04:DE
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0E98
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
Manifest number:          0E96
Signing time:             Thu 24 Sep 2026 01:05:01 +0000
Manifest this update:     Thu 24 Sep 2026 01:05:00 +0000
Manifest next update:     Sat 26 Sep 2026 01:05:00 +0000
Files and hashes:         1: 4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl (hash: h6PEpFyaKRJltv0yn0JoabsSZZPGjvtIH0YOOoUtkdc=)
                          2: F41E5A14AC2A11F1A3B489F0CE1D38B0.roa (hash: bSJajOlFeD07gXvyHU9Q99GHB+S6K36/agJyJ4Aq9tA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 01:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3736 (0xe98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF, serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Sep 24 01:05:00 2026 GMT
            Not After : Sep 26 01:05:00 2026 GMT
        Subject: CN=6ab4773d-8725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:e6:2e:a2:dc:a9:b0:c2:29:64:b4:45:29:
                    6f:7a:67:25:0d:88:85:63:22:bf:2d:1e:c2:b9:c4:
                    a3:04:44:e8:f1:5c:ca:7f:79:d9:f8:86:4c:46:40:
                    ac:2c:e0:7c:d8:5d:e0:71:a5:be:49:dc:c4:dd:11:
                    b6:e2:9d:ef:63:fa:96:66:1e:2a:fd:38:fc:5d:af:
                    48:6b:d0:cf:6f:9a:df:dd:12:a9:09:3e:59:7f:eb:
                    8a:45:e3:2a:4f:78:21:3e:d9:56:fb:31:c5:d8:1c:
                    12:f3:1b:85:42:c9:cf:d0:93:ad:b4:22:0f:b2:bf:
                    06:e4:ba:55:bc:4a:ca:67:dd:86:0a:7f:cb:27:52:
                    20:a8:01:40:e2:9b:0f:28:96:e9:b8:d5:53:ec:c7:
                    c4:9f:50:06:53:4d:85:ac:e8:86:46:22:cd:ef:28:
                    87:31:8a:98:8e:f9:66:16:78:62:13:90:6d:55:17:
                    fa:62:c2:62:84:69:fc:aa:78:24:f3:4e:4e:cc:3a:
                    5d:33:24:41:14:70:e1:a0:3c:a6:29:fb:cd:78:5b:
                    51:9c:4f:de:d0:69:d5:9c:64:1e:c5:06:6a:d2:6c:
                    73:28:d1:2e:cb:d2:a1:80:3a:df:8e:68:1d:bc:49:
                    56:08:29:1c:0b:a5:61:38:5a:3f:16:a0:99:d8:3b:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:20:C9:01:AE:3A:BE:97:20:0D:C5:63:8C:1F:D2:82:48:90:04:DE
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:c2:83:00:65:f5:ca:fd:57:76:ff:72:d1:8c:62:f8:2e:
         6d:e8:e7:4a:73:04:7e:72:d6:2c:58:02:93:5a:bb:e3:15:91:
         e0:2b:a6:52:4a:0c:e7:04:f1:63:44:5d:50:cc:a8:1b:c1:b8:
         a4:31:15:77:37:95:fb:35:46:15:98:03:92:b8:81:b1:be:71:
         28:8b:63:32:3e:a1:d8:a5:28:2c:37:29:13:49:f8:29:13:45:
         69:e8:53:46:0f:38:d4:a7:6b:a1:d8:db:82:a6:29:8f:6d:47:
         08:c6:60:74:e5:06:f9:1f:3a:1d:3d:65:cc:72:9d:a5:48:08:
         f0:55:85:e7:e2:92:d2:d2:c4:c2:3b:cc:30:49:92:f0:e9:87:
         69:75:cd:31:01:1f:b0:b8:54:17:e8:43:61:76:00:78:3b:45:
         76:52:b3:ad:f1:ee:30:a2:34:5e:7b:18:7c:2b:a1:c4:dd:34:
         bf:49:0f:75:2f:3e:31:65:8b:e6:0f:9c:0f:88:0f:bd:2c:5d:
         33:2f:51:a5:b9:10:1d:db:0e:e8:a9:af:62:88:49:f1:36:b3:
         5b:f5:86:8a:49:94:aa:3d:56:b4:b2:04:1e:40:a0:62:8c:06:
         d5:eb:8f:22:0b:fe:02:37:85:4a:c7:36:ad:54:28:ee:a3:c3:
         b0:d8:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:15:52 2026 by rpki-client