Error: rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
File:                     GVvktSNN9Q1x07s1Ccaxtchzy6M.mft (raw, json)
Hash identifier:          8LDcZJ/ViZ6X+9rvng4G3awrcjqokdZWEBuY9ft2MH4=
Subject key identifier:   41:EB:5E:0B:CD:C8:14:C6:3E:C9:69:30:19:97:78:91:58:1A:D4:9B
Authority key identifier: 19:5B:E4:B5:23:4D:F5:0D:71:D3:BB:35:09:C6:B1:B5:C8:73:CB:A3
Certificate issuer:       /CN=F3657C0DAF/serialNumber=195BE4B5234DF50D71D3BB3509C6B1B5C873CBA3
Certificate serial:       09
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
Manifest number:          08
Signing time:             Mon 21 Sep 2026 05:56:58 +0000
Manifest this update:     Mon 21 Sep 2026 05:56:57 +0000
Manifest next update:     Wed 23 Sep 2026 05:56:57 +0000
Files and hashes:         1: GVvktSNN9Q1x07s1Ccaxtchzy6M.crl (hash: 2FWmBZ8fpZUhJQgSsYODdjn3gcic8vDpW1oPFaQ0Pdk=)
                          2: E4FD77E4B1CB11F1AD817706CF1D38B0.roa (hash: uICGBeopa56mAEq4BBSjya2Wk/H4T/vpIlsV1cTfWho=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3657C0DAF, serialNumber=195BE4B5234DF50D71D3BB3509C6B1B5C873CBA3
        Validity
            Not Before: Sep 21 05:56:57 2026 GMT
            Not After : Sep 23 05:56:57 2026 GMT
        Subject: CN=6ab0c729-6ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:94:a8:ac:e9:9d:eb:38:92:95:26:8d:9d:
                    32:f3:c1:c7:e2:78:c1:fa:4d:ea:f3:af:60:e8:4a:
                    d9:40:e4:22:65:f8:02:51:df:f1:3e:0d:14:26:24:
                    36:d1:5e:50:eb:9d:f4:a7:e7:13:3d:62:8f:73:8f:
                    1d:5e:44:9b:ab:dd:07:05:66:de:b3:d5:b6:23:9b:
                    44:e9:83:c1:0b:5b:cc:f2:51:4a:7f:5c:7a:7c:cf:
                    75:c6:52:e2:2a:68:66:34:76:1f:94:dd:91:79:f8:
                    d7:04:1e:0e:4c:b8:ff:4f:36:3a:ee:b3:2c:5d:74:
                    06:5e:86:96:8e:4b:24:4c:79:fd:4f:b3:d9:2b:01:
                    2b:5a:ad:a8:54:37:98:90:a3:2f:34:70:df:de:88:
                    2a:d5:1f:ee:13:91:5a:84:39:30:49:2e:25:f3:cd:
                    7e:0a:12:09:ab:ee:e4:9d:72:34:2b:ca:82:37:63:
                    cf:db:af:b1:30:16:20:83:c8:74:01:ee:f0:44:ae:
                    8e:e4:39:d8:ee:45:cb:5d:51:25:44:5f:fc:a1:3a:
                    58:e6:92:95:52:30:35:9e:c9:07:c7:d1:0a:41:f2:
                    23:9b:10:e3:46:e9:cf:0a:bb:b4:35:42:9e:35:72:
                    09:a8:69:9f:7b:39:20:64:e2:5c:73:93:87:72:6b:
                    a3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EB:5E:0B:CD:C8:14:C6:3E:C9:69:30:19:97:78:91:58:1A:D4:9B
            X509v3 Authority Key Identifier:
                keyid:19:5B:E4:B5:23:4D:F5:0D:71:D3:BB:35:09:C6:B1:B5:C8:73:CB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:b9:52:fe:80:37:81:18:8a:41:fb:9c:7e:9a:bf:ab:fd:
         5b:4f:12:2f:12:96:bb:88:2f:dc:af:6a:08:d4:27:f8:56:b4:
         1f:dc:d8:d9:d3:fa:23:55:d4:df:fc:27:84:48:4c:ec:da:e5:
         3d:f9:39:73:75:84:24:17:70:6b:c8:a7:14:86:4e:4a:f0:ad:
         06:a1:d6:6f:82:43:13:25:f3:c7:68:2e:ce:e0:29:95:8a:f7:
         ba:b7:53:dc:52:3f:1a:00:5c:e2:80:5c:13:95:c8:84:f8:83:
         29:72:bd:b3:29:8c:3c:dd:2d:46:18:f4:fd:3d:d8:fa:59:41:
         57:85:76:84:bf:63:bd:b9:a2:c9:b0:47:5e:08:32:e7:5a:2f:
         d9:b8:43:e0:c3:85:46:f5:a5:bc:77:cb:08:bf:6b:f5:26:56:
         66:82:8e:e7:44:73:d1:28:d6:8e:17:2e:f0:29:60:0f:0b:11:
         8a:6a:c6:1a:b9:08:65:5c:e4:92:3b:5a:bf:7e:1f:ad:4b:6b:
         84:9b:27:88:f2:1f:6b:24:a7:92:1e:b0:93:b9:84:b5:29:8d:
         30:4a:13:cd:00:1a:01:22:eb:3f:cb:3c:df:11:2d:3e:fc:ac:
         d8:42:11:db:9d:6c:1d:89:30:80:0d:00:07:ee:76:cc:9e:a3:
         cb:4e:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:53:03 2026 by rpki-client