Error: rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
File:                     VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft (raw, json)
Hash identifier:          EY00TbcPD197WdI+Qa4c8bKMsUbXunOQjkS70RQAQrk=
Subject key identifier:   7C:52:4A:58:15:09:44:9A:6C:3E:5A:F8:68:7D:D4:4F:2B:8A:E1:90
Authority key identifier: 55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F
Certificate issuer:       /CN=F3659F22AF/serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
Certificate serial:       03A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
Manifest number:          039A
Signing time:             Mon 28 Sep 2026 04:09:54 +0000
Manifest this update:     Mon 28 Sep 2026 04:09:53 +0000
Manifest next update:     Wed 30 Sep 2026 04:09:53 +0000
Files and hashes:         1: VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl (hash: s5vCkUAVk2Kx6l6hzJDOAPRevUWAqpqY8NH0hrgyG6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F22AF, serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
        Validity
            Not Before: Sep 28 04:09:53 2026 GMT
            Not After : Sep 30 04:09:53 2026 GMT
        Subject: CN=6ab9e892-689e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:64:8f:c0:3c:70:89:75:d2:21:d0:c2:fa:
                    65:86:29:9b:ca:d5:f6:96:24:f0:72:0f:0e:bb:82:
                    72:e5:f9:0f:a9:cc:ae:d0:80:60:5e:80:ce:e9:37:
                    c5:59:58:e3:aa:0d:2e:18:9a:1a:9c:e7:14:52:25:
                    88:16:b0:e9:ff:37:fd:78:46:07:e5:22:b2:e7:43:
                    9e:18:b4:6d:b4:4c:92:b2:c1:36:d4:39:ac:b1:a7:
                    b5:cf:d1:d3:86:f9:54:0d:ea:61:79:46:49:e0:d2:
                    a1:8e:26:c0:37:72:3d:88:6e:ef:75:f7:20:76:48:
                    29:7b:f9:1a:23:a7:19:3e:e9:5d:3d:aa:20:48:c5:
                    e3:9c:35:52:83:6a:f4:81:07:49:0f:67:1f:1f:e8:
                    44:28:42:cf:cc:08:90:d3:d3:53:34:b2:7e:aa:6a:
                    59:a6:86:15:3c:ae:1a:bd:ae:d5:c3:aa:56:82:e4:
                    e4:39:32:5e:5b:3a:67:88:89:48:88:7b:79:c2:be:
                    84:4f:e8:17:3e:16:9c:37:72:af:f6:44:08:03:69:
                    30:1f:38:e0:99:98:27:fd:16:eb:3b:57:4e:2e:ef:
                    de:35:67:03:65:be:93:14:b7:dc:68:36:94:4c:2e:
                    2f:7c:fb:35:51:4e:5b:aa:fb:11:7b:b9:d9:fd:af:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:52:4A:58:15:09:44:9A:6C:3E:5A:F8:68:7D:D4:4F:2B:8A:E1:90
            X509v3 Authority Key Identifier:
                keyid:55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b7:12:dd:c5:7a:82:80:52:4d:ad:ad:74:fd:3e:bb:fb:11:
         86:f5:42:06:56:56:05:08:58:73:0b:6b:f2:90:4b:26:b2:e8:
         34:2f:e6:d2:3d:ee:ff:2b:99:ec:4a:90:3c:81:de:d8:00:e4:
         00:17:4c:d2:02:45:19:18:40:54:3d:ff:00:16:c5:98:50:6b:
         53:e9:72:9f:d7:60:1a:e6:8a:40:8e:8f:41:6b:88:c7:c7:b0:
         28:9f:c0:de:37:95:76:95:34:87:8a:ea:07:0f:67:12:74:d4:
         8b:c7:f7:51:18:56:00:8e:e6:8e:30:f3:60:98:29:b5:4b:35:
         86:c6:d7:ca:9e:53:a2:ee:78:75:be:d4:65:9f:94:04:da:18:
         6f:49:a6:2c:2f:ce:84:f5:0f:37:fd:c6:52:e4:34:74:86:3e:
         d5:d6:ad:18:32:20:b1:9e:80:85:2a:69:8f:e0:a9:83:b9:12:
         65:57:bb:a9:5e:14:fe:87:a0:00:8c:78:2f:b5:55:a8:bd:cb:
         b6:aa:6c:3f:1b:89:16:73:3f:2e:2f:3f:8f:3a:01:74:22:a2:
         c2:17:36:a6:65:9a:2a:c3:ee:76:f9:01:56:f2:86:6e:b9:1b:
         20:1d:55:3e:97:ec:3e:ef:ec:1f:95:07:d0:c2:7c:8c:aa:55:
         09:e8:90:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:21:52 2026 by rpki-client