Error: rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
File:                     GPDP5J-oAtYH_7cwFFeG05UL0jA.mft (raw, json)
Hash identifier:          vu3iINvjkrEboWarH5JzMczrVgBNW4Sidymx5y56vB4=
Subject key identifier:   B1:78:9D:32:21:FE:96:B5:E1:10:B6:86:00:65:42:B2:5B:BE:C9:FB
Authority key identifier: 18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
Certificate issuer:       /CN=F36BD41EAF/serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Certificate serial:       0122
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
Manifest number:          0120
Signing time:             Thu 24 Sep 2026 05:19:17 +0000
Manifest this update:     Thu 24 Sep 2026 05:19:17 +0000
Manifest next update:     Sat 26 Sep 2026 05:19:17 +0000
Files and hashes:         1: GPDP5J-oAtYH_7cwFFeG05UL0jA.crl (hash: i8eJ2RlrvRYqJBjMWEg9TPMGvlclIszR1TVnmuiqWls=)
                          2: 0B035958DA7311F0BD9C4B87DAE4EC9C.roa (hash: 1YCwQ08Er0/oJv0rugAKvka/AUZZE4KlC5UipfKoXzE=)
                          3: AF914E0ED9B911F0BC8E84F1DAE4EC9C.roa (hash: dpaLUZ7X2+eBahFfaBRBpZGcldL+iPoSovpQWiyqWHw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD41EAF, serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
        Validity
            Not Before: Sep 24 05:19:17 2026 GMT
            Not After : Sep 26 05:19:17 2026 GMT
        Subject: CN=6ab4b2d5-8571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:1e:73:99:82:85:ad:59:82:e9:7a:74:b9:
                    e5:1f:6e:c4:72:f1:c0:d5:3d:a0:96:54:26:fc:d6:
                    69:a7:62:17:1b:77:91:53:ee:8e:57:21:58:e9:34:
                    0d:2e:4d:aa:bb:aa:6c:c3:0a:1f:d1:82:ce:27:d0:
                    ff:65:2d:c4:c3:e9:00:3c:a4:77:9b:8a:0d:e5:ad:
                    08:4d:b3:39:80:cc:c5:4b:b5:e0:fa:28:0c:c5:88:
                    d6:12:45:ab:90:84:e6:6f:93:b6:f4:32:6d:7b:c8:
                    62:bd:68:8d:02:96:18:b8:ca:3b:db:e8:ed:df:c0:
                    04:a8:8e:e0:51:57:3c:af:d5:c8:43:3a:7a:98:7c:
                    d7:56:5e:3b:9d:21:db:eb:55:85:a4:e9:67:91:2b:
                    7e:fd:61:b2:48:ce:bb:e7:71:da:1d:77:4d:f6:ea:
                    51:88:10:55:82:8a:5f:0c:b5:0b:7c:a2:25:e7:1e:
                    b6:17:a9:a9:b3:89:08:12:aa:44:51:cd:17:58:48:
                    fb:5e:fa:c2:e2:b7:12:45:7e:43:7c:81:31:bc:3f:
                    78:da:ab:01:e5:e8:3e:86:39:ad:ef:86:82:11:9a:
                    c1:db:5c:c2:54:1e:92:57:36:f3:fd:eb:6d:82:26:
                    f0:21:bc:13:e6:0d:4b:52:f3:7d:a4:d0:ee:08:43:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:9D:32:21:FE:96:B5:E1:10:B6:86:00:65:42:B2:5B:BE:C9:FB
            X509v3 Authority Key Identifier:
                keyid:18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2c:b4:a6:b0:93:85:bf:60:d9:53:03:d5:b9:50:32:94:75:
         db:23:1a:b2:41:da:af:77:94:1d:44:ff:55:4b:b1:1c:2b:8b:
         8c:fc:ca:ef:b9:07:ec:1f:e1:40:c1:17:69:63:5a:37:30:b3:
         fc:38:ab:7f:1c:2f:2b:7a:e5:1b:e7:12:d8:f9:1b:f8:65:d5:
         42:54:07:1b:37:90:07:9a:db:eb:4b:ca:c4:35:bf:d1:82:a8:
         5d:52:23:8a:73:af:cc:a9:86:c8:7e:28:a6:dc:58:65:03:31:
         61:00:5f:c2:9d:29:e7:e9:05:b8:4a:ee:c3:11:a1:20:7f:ae:
         ed:e9:7a:97:0a:4e:9b:7f:fa:b8:be:1a:2b:a6:02:5b:61:3c:
         47:c4:4f:21:6a:9d:37:98:5f:8c:44:aa:e5:6c:c2:6e:86:93:
         bb:85:8a:e9:24:fc:71:81:31:76:fa:a2:2c:18:95:ef:e4:6d:
         ef:d5:2f:b1:72:69:21:4e:c7:19:05:a3:d5:19:30:54:84:94:
         ac:50:2b:1e:c5:15:8a:ab:13:99:65:e6:cb:40:92:a3:e9:18:
         53:2e:69:5d:d7:d4:fa:a5:18:4e:53:34:57:fa:09:fb:fa:b0:
         d4:b8:cb:68:3b:9d:2f:b9:09:b8:98:e3:f2:ec:bc:29:81:db:
         ca:1d:23:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:23 2026 by rpki-client