Error: rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
File:                     K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft (raw, json)
Hash identifier:          sgUh9zHVst7A6JXLIzGUY6XownQ3F9RJ7+KFN7Tt0R8=
Subject key identifier:   9F:DE:0D:75:78:F9:30:48:CE:1D:22:C8:15:3A:CB:4F:8A:5E:D5:5A
Authority key identifier: 2B:93:74:F5:36:72:AE:4C:13:3C:DB:B6:FB:C6:19:51:81:9D:32:B4
Certificate issuer:       /CN=F365BBDAAF/serialNumber=2B9374F53672AE4C133CDBB6FBC61951819D32B4
Certificate serial:       64
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
Manifest number:          60
Signing time:             Sat 26 Sep 2026 05:42:40 +0000
Manifest this update:     Sat 26 Sep 2026 05:42:39 +0000
Manifest next update:     Mon 28 Sep 2026 05:42:39 +0000
Files and hashes:         1: K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl (hash: ZFT2nnlzuXJ1BEVAexwGbUIybQCv/8vn++aGR3VwB8Q=)
                          2: 21D46A1A76F811F1937C3B0DCF1D38B0.roa (hash: MKCYxKjd2uNuwqyT9k0lVtIuI9mAGX3CL0R0CGuQ8yA=)
                          3: 763AA698B2B011F1A0A5E9E8CE1D38B0.roa (hash: f1EzEvOJM51WdQleA7NLcVBr5xI58ejbgvs5g3oD3t0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BBDAAF, serialNumber=2B9374F53672AE4C133CDBB6FBC61951819D32B4
        Validity
            Not Before: Sep 26 05:42:39 2026 GMT
            Not After : Sep 28 05:42:39 2026 GMT
        Subject: CN=6ab75b4f-af01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:46:88:2b:29:c5:22:b2:79:a0:b1:4d:e3:
                    1b:69:c8:52:57:e5:3c:d4:55:28:24:8c:fa:0c:ed:
                    86:b6:59:cb:6e:83:c8:88:77:b1:89:15:48:14:69:
                    8e:3b:54:bc:af:34:0f:d2:7c:8c:80:74:60:50:c3:
                    67:09:6c:12:ba:30:2c:c7:98:0e:bf:17:fc:03:34:
                    46:32:e4:5c:fa:3c:ab:0e:01:5c:7b:fd:36:7b:fb:
                    c9:39:a3:a4:14:cd:92:4b:4d:0e:86:1c:9b:1a:5a:
                    a8:56:5c:e8:fa:cd:9e:26:50:c3:b4:21:4f:92:a9:
                    b8:24:17:45:43:96:0b:91:ad:c4:c8:40:22:ef:c0:
                    ec:06:6e:99:d5:22:84:b9:0b:fd:f1:bf:22:bd:98:
                    88:e2:2c:29:59:4e:1b:48:c6:ae:c6:7f:60:65:d3:
                    b6:52:b2:23:44:59:6b:1b:a0:ff:39:e0:dd:57:75:
                    f6:b7:39:41:83:cf:d8:ef:0c:c3:2e:4f:7f:0c:d4:
                    51:1d:74:f7:d2:b1:6e:9d:82:09:ca:a3:b7:9e:53:
                    d9:d0:61:fa:90:c9:4e:42:84:76:07:6a:ec:fa:f9:
                    82:64:26:0e:c4:ba:04:6e:2d:62:64:03:d4:6c:9d:
                    ae:c3:9c:db:88:76:8c:8f:40:bc:d3:03:28:ad:45:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DE:0D:75:78:F9:30:48:CE:1D:22:C8:15:3A:CB:4F:8A:5E:D5:5A
            X509v3 Authority Key Identifier:
                keyid:2B:93:74:F5:36:72:AE:4C:13:3C:DB:B6:FB:C6:19:51:81:9D:32:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bf:bb:dd:0d:77:aa:6f:bd:3c:1e:10:9f:f2:1c:06:e2:f8:
         ff:b5:34:6e:d5:45:3d:e5:e7:cd:dc:ae:41:9e:9f:67:af:38:
         32:1d:72:53:b6:ca:33:e8:2d:bd:36:c6:ee:13:4d:04:ad:55:
         73:fe:d0:6a:90:79:de:61:4e:1c:16:8f:0d:a9:a7:9e:7d:05:
         ff:b5:99:a7:56:aa:c8:0b:d2:91:14:d8:00:85:57:a8:c6:59:
         57:5a:77:6c:f1:8c:b2:bf:65:68:8a:49:f4:01:f3:e5:7d:52:
         cb:e8:db:3b:15:d4:8e:4d:79:3d:da:94:3b:bf:4a:67:0c:83:
         d3:9d:14:c8:35:3c:d9:4d:af:c8:82:3c:0d:06:59:15:c8:b7:
         b3:f1:9e:47:18:d8:92:a3:54:32:25:2a:21:9d:90:fe:e4:77:
         58:bc:3c:32:75:fe:64:4f:97:50:08:1d:bd:f4:3a:19:84:17:
         5e:fa:83:bc:4c:e3:54:86:e8:85:c6:f8:d9:cb:4a:f5:79:2e:
         97:1a:be:cb:44:0b:e4:71:9c:70:2a:7d:b9:cc:84:40:12:9c:
         d1:6b:3e:8e:26:1f:ef:0f:63:d1:97:10:df:de:34:1a:ec:d6:
         7b:81:80:06:a4:8b:d5:fa:47:3c:5a:71:ec:fa:97:1f:44:d9:
         f3:4e:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:18:15 2026 by rpki-client