Error: rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
File:                     gVdGXshx9nfFuXh07KV5IzijWSQ.mft (raw, json)
Hash identifier:          uzGXwJGmR+ijf4zJHuXsIdhXDapRmlqoEdVVTdcOcow=
Subject key identifier:   5F:17:3E:A7:18:02:B6:D9:99:EB:3A:75:AA:FC:67:42:6A:71:05:47
Authority key identifier: 81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
Certificate issuer:       /CN=F3645EEFAF/serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Certificate serial:       19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
Manifest number:          15
Signing time:             Mon 21 Sep 2026 05:53:46 +0000
Manifest this update:     Mon 21 Sep 2026 05:53:45 +0000
Manifest next update:     Wed 23 Sep 2026 05:53:45 +0000
Files and hashes:         1: gVdGXshx9nfFuXh07KV5IzijWSQ.crl (hash: FUYazpOCn0GMf7rgs7HHKyBx5AwllwWa+jGd20yw7rU=)
                          2: BCA47662AC3A11F1BD37C8CFCE1D38B0.roa (hash: 1aHOqjAbG/Vyek5fSEwl25glNibnEDDQivHJEhgfU/o=)
                          3: EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa (hash: QwlK+QN112m44lVk1uPEgi3OJcDWCvd/zy8bamKKzqY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645EEFAF, serialNumber=8157465EC871F677C5B97874ECA5792338A35924
        Validity
            Not Before: Sep 21 05:53:45 2026 GMT
            Not After : Sep 23 05:53:45 2026 GMT
        Subject: CN=6ab0c66a-f987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:c6:e3:e7:ec:88:6e:b4:d7:d2:85:1c:fb:
                    42:89:48:2e:af:3d:2b:ab:04:a9:cd:be:a2:33:94:
                    25:d6:89:19:d5:cf:3a:02:d9:76:e4:cc:87:24:a3:
                    94:04:7b:42:a1:0d:dd:28:18:bb:9a:91:f9:61:a8:
                    58:2b:f5:52:d1:ea:6f:d5:71:76:a8:96:2d:e0:bf:
                    42:3e:70:fe:c7:27:88:e4:77:f5:aa:d7:d1:7d:6f:
                    92:c0:0f:bb:72:f0:e2:7f:88:27:e2:14:60:49:f4:
                    ae:43:5a:62:6a:52:d6:f0:ed:d9:d2:52:87:21:08:
                    3f:f7:0b:f5:d3:98:fa:30:5f:a2:67:41:b4:49:1a:
                    c5:e5:4b:53:dd:aa:1e:77:09:2a:c1:e4:f6:0e:b0:
                    59:71:c7:1f:4e:67:2c:61:4d:43:27:80:6b:b3:e5:
                    2d:63:92:67:b8:19:c1:7a:e1:ef:3f:dd:e3:2c:ae:
                    ed:d2:7b:ca:79:92:aa:ca:8a:bf:ef:4b:0f:34:05:
                    2c:aa:7e:72:e2:39:f1:11:7f:77:60:d5:89:b7:0a:
                    84:a2:22:ad:bd:d0:5d:af:2e:c6:f1:53:51:04:21:
                    9d:ee:f1:3a:9f:9b:39:b6:a7:a8:d7:74:84:14:4b:
                    e3:4b:3e:f2:40:0c:e3:93:a5:9d:d2:f0:93:92:e1:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:17:3E:A7:18:02:B6:D9:99:EB:3A:75:AA:FC:67:42:6A:71:05:47
            X509v3 Authority Key Identifier:
                keyid:81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:ab:00:f3:8b:64:4a:7f:fb:4d:b4:7f:1b:3c:a5:eb:fa:
         55:b5:72:d1:ef:f2:2c:e6:26:2c:9d:2c:a3:a8:5c:ca:07:1d:
         60:e8:00:0e:7c:7c:e8:18:6e:68:bf:43:54:5b:a1:73:77:ee:
         7c:c4:f1:1a:6e:24:e3:5a:8c:3a:93:9f:6e:0a:00:68:f9:c3:
         43:63:17:80:f1:ba:f2:ce:61:75:3c:cf:84:0a:1c:a0:d3:98:
         61:84:e0:89:99:81:82:15:3e:bf:63:5a:e8:af:92:55:55:a2:
         a8:65:d6:8c:e3:ce:c5:fa:dd:6a:a8:a6:fa:45:6a:b7:6d:be:
         17:5c:df:fb:e2:f6:33:e3:c4:88:5e:6b:d1:31:2f:36:82:c5:
         32:9d:2e:36:af:3b:cc:57:98:f6:cb:a5:d5:b4:f8:62:73:5a:
         0f:de:a7:fd:0b:85:30:fd:4f:cb:bd:67:b1:a6:29:d8:54:23:
         b4:74:fd:a3:5c:94:4a:7a:9d:57:2b:2e:0b:79:f8:aa:53:2e:
         99:30:08:19:c3:79:33:58:a1:24:91:da:cb:ab:d5:c8:73:b1:
         35:0f:2b:98:60:1c:7a:1a:61:1c:d3:37:11:d8:e0:48:49:dc:
         ac:d8:36:c1:26:6d:81:5f:f8:e2:f2:89:29:ea:46:e5:32:8d:
         f9:82:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:15 2026 by rpki-client