Error: rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
File:                     vuhQJeKvFdQRCrom9RsNdAV9rss.mft (raw, json)
Hash identifier:          xB/kk7UZdqGj25kHuKwkPY+Ok9DE3xng8p1EkWcpK6w=
Subject key identifier:   31:99:59:83:C7:88:4E:83:88:4B:A0:B3:21:0A:87:2A:EC:25:F9:BE
Authority key identifier: BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB
Certificate issuer:       /CN=F3617D8EAF/serialNumber=BEE85025E2AF15D4110ABA26F51B0D74057DAECB
Certificate serial:       0501
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
Manifest number:          0500
Signing time:             Sun 20 Sep 2026 03:23:56 +0000
Manifest this update:     Sun 20 Sep 2026 03:23:56 +0000
Manifest next update:     Tue 22 Sep 2026 03:23:56 +0000
Files and hashes:         1: vuhQJeKvFdQRCrom9RsNdAV9rss.crl (hash: UEmq7KdDfV59QSJMckaaNVkIWTmM0NABMrKJolQYnV0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617D8EAF, serialNumber=BEE85025E2AF15D4110ABA26F51B0D74057DAECB
        Validity
            Not Before: Sep 20 03:23:56 2026 GMT
            Not After : Sep 22 03:23:56 2026 GMT
        Subject: CN=6aaf51cc-8159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:10:26:d7:43:8e:d9:67:5c:ca:32:72:79:
                    eb:12:ce:4d:53:12:6d:d8:d6:62:15:d7:c8:29:a7:
                    2e:e8:5c:8c:47:f5:f9:5b:2f:ba:54:d2:8b:8d:cf:
                    70:8d:2a:66:70:04:08:3b:13:16:69:7f:50:1a:a0:
                    17:aa:60:b8:35:31:1c:29:d1:ac:44:31:7a:f6:64:
                    ea:22:db:77:1d:bb:13:85:86:13:3b:6a:cd:2a:5c:
                    f8:d1:d1:43:11:aa:a5:3e:da:7c:45:3a:29:39:1a:
                    7c:b8:37:dd:ea:f6:71:43:20:d2:ba:ee:a5:36:1b:
                    07:c2:14:95:0f:d4:22:bc:2c:21:a6:ab:c0:38:fc:
                    9d:36:44:4c:85:de:75:de:9e:fc:9d:82:fa:67:c9:
                    3b:7f:9d:e8:e4:4d:62:02:18:cc:32:1b:62:2f:4e:
                    fc:2d:64:a1:01:73:52:29:a5:7e:18:02:09:ec:87:
                    02:96:bd:72:f4:2a:99:e4:98:db:55:45:39:40:65:
                    8e:14:22:7a:ba:8d:40:74:19:28:f4:5e:5f:b6:ab:
                    18:a4:e4:57:ff:5c:a3:7f:b0:d9:e5:40:56:97:17:
                    1b:bc:bd:f2:9f:93:08:71:15:fd:c2:f9:9a:d0:4c:
                    d7:8e:67:bb:fd:74:14:68:f3:dd:0b:d5:27:fa:02:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:99:59:83:C7:88:4E:83:88:4B:A0:B3:21:0A:87:2A:EC:25:F9:BE
            X509v3 Authority Key Identifier:
                keyid:BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:29:43:15:e5:72:ee:5c:2c:fb:6c:93:4b:10:20:9d:4e:
         52:a4:42:54:00:1a:60:20:33:99:76:13:b7:7b:b4:96:ae:31:
         31:d8:86:59:13:17:14:35:8d:25:33:b2:5a:03:96:e2:4b:3f:
         f5:b0:5b:ba:9a:2c:65:3f:0f:dd:f0:e3:a5:4c:b0:12:2d:a6:
         dc:27:cb:b6:47:23:c9:de:2b:e8:5d:bc:3c:c0:84:e3:68:1b:
         32:8c:1e:c9:6c:23:67:0f:74:81:7a:b0:ad:e8:f2:b1:e3:d0:
         b7:26:b4:22:7c:4c:d4:f3:2d:7f:7c:4e:a8:f1:fa:a3:da:51:
         05:d9:08:ff:eb:24:80:08:32:08:fd:7a:cc:15:17:46:2c:ea:
         5f:9a:92:a0:7d:a8:bd:5b:64:0a:ed:ca:33:68:78:2b:e5:80:
         73:94:3a:de:e1:f4:7a:c7:89:08:04:e0:19:42:8e:ae:dc:c6:
         a5:41:eb:c8:02:a1:3f:99:21:42:bc:30:f1:ac:ec:55:a4:62:
         55:8b:17:75:72:8a:ef:2f:95:30:41:b7:55:4f:67:3d:3c:0b:
         c0:92:d7:05:a4:c3:aa:5d:9a:02:d0:e1:7f:67:06:1b:cc:a9:
         15:be:2a:0f:1d:dc:cd:3e:fd:e3:40:d9:01:0d:ff:1b:1f:35:
         59:46:b1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:50:17 2026 by rpki-client