Error: rpki.afrinic.net/repository/member_repository/F366CADE/F25B0A8AFCDD11F08271BDD3DAE4EC9C/6x4VY269WeKyoITsLZhbzmbUCpQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366CADE/F25B0A8AFCDD11F08271BDD3DAE4EC9C/6x4VY269WeKyoITsLZhbzmbUCpQ.mft
File:                     6x4VY269WeKyoITsLZhbzmbUCpQ.mft (raw, json)
Hash identifier:          aj2F3kjtJvLyTLnYVcpIdUPkAubOj6n60hjKou+t7hQ=
Subject key identifier:   F7:61:C4:8B:C8:10:50:39:04:22:B8:BD:FC:3E:CE:BB:6E:94:DC:A5
Authority key identifier: EB:1E:15:63:6E:BD:59:E2:B2:A0:84:EC:2D:98:5B:CE:66:D4:0A:94
Certificate issuer:       /CN=F366CADEAF/serialNumber=EB1E15636EBD59E2B2A084EC2D985BCE66D40A94
Certificate serial:       ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6x4VY269WeKyoITsLZhbzmbUCpQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CADE/F25B0A8AFCDD11F08271BDD3DAE4EC9C/6x4VY269WeKyoITsLZhbzmbUCpQ.mft
Manifest number:          ED
Signing time:             Mon 21 Sep 2026 05:25:15 +0000
Manifest this update:     Mon 21 Sep 2026 05:25:14 +0000
Manifest next update:     Wed 23 Sep 2026 05:25:14 +0000
Files and hashes:         1: 6x4VY269WeKyoITsLZhbzmbUCpQ.crl (hash: OHvjFg6JRcsMO6S8I+SI1Mea1g3Nv4v3MoOVA8Zj4do=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366CADE/F25B0A8AFCDD11F08271BDD3DAE4EC9C/6x4VY269WeKyoITsLZhbzmbUCpQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366CADE/F25B0A8AFCDD11F08271BDD3DAE4EC9C/6x4VY269WeKyoITsLZhbzmbUCpQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6x4VY269WeKyoITsLZhbzmbUCpQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CADEAF, serialNumber=EB1E15636EBD59E2B2A084EC2D985BCE66D40A94
        Validity
            Not Before: Sep 21 05:25:14 2026 GMT
            Not After : Sep 23 05:25:14 2026 GMT
        Subject: CN=6ab0bfbb-b2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:ca:43:fe:86:5a:0d:c2:95:9c:c6:e7:09:
                    14:63:d6:5d:24:d8:f1:2a:5e:a1:c5:15:83:ff:df:
                    1b:bc:03:4e:7b:43:fa:08:9e:6f:5a:49:b6:6e:8f:
                    64:c0:cb:2a:10:68:59:9d:d2:9c:d2:4f:bf:42:21:
                    56:ed:c7:48:cd:bf:ca:dd:71:44:2d:ac:81:dd:5b:
                    01:5d:c8:17:dd:b0:b8:37:23:51:45:59:59:e1:1d:
                    2f:a3:44:36:fd:e9:75:54:31:52:94:2e:7d:94:53:
                    cb:96:61:98:8a:0f:76:5e:ec:ca:6f:a2:ad:8a:2b:
                    8c:9a:09:79:bb:b8:fe:3d:d7:26:92:c5:57:b3:dc:
                    b0:de:b3:95:84:93:12:68:79:d6:20:8e:7e:f1:a9:
                    d3:24:b3:ae:bf:50:9e:a0:10:b3:18:1c:3f:55:93:
                    7c:29:47:5b:6d:f3:4a:64:60:68:9e:3d:9c:66:2e:
                    ba:d7:b2:56:6c:f0:16:ee:14:9f:c8:64:a5:86:28:
                    51:d2:67:22:56:5e:22:96:ae:d7:c3:ac:9c:c2:ab:
                    04:cf:89:90:38:45:b9:f5:6a:81:8c:39:2c:6e:e9:
                    73:82:d9:36:04:25:b5:35:91:64:25:72:86:b0:04:
                    e8:b0:77:b1:ae:02:fc:a2:63:49:36:5e:94:f1:da:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:61:C4:8B:C8:10:50:39:04:22:B8:BD:FC:3E:CE:BB:6E:94:DC:A5
            X509v3 Authority Key Identifier:
                keyid:EB:1E:15:63:6E:BD:59:E2:B2:A0:84:EC:2D:98:5B:CE:66:D4:0A:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CADE/F25B0A8AFCDD11F08271BDD3DAE4EC9C/6x4VY269WeKyoITsLZhbzmbUCpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6x4VY269WeKyoITsLZhbzmbUCpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CADE/F25B0A8AFCDD11F08271BDD3DAE4EC9C/6x4VY269WeKyoITsLZhbzmbUCpQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b3:db:cb:7b:84:b6:af:35:89:73:20:75:75:fe:59:c2:70:
         c1:93:b2:8e:91:83:16:7e:21:b3:e2:53:40:b6:20:d9:d9:b8:
         eb:c8:91:45:eb:76:38:92:9e:d2:60:8d:30:f8:81:02:ed:83:
         64:b2:61:06:ea:10:a1:59:66:f9:e4:e2:01:34:26:b4:bf:91:
         a8:34:72:3c:06:6d:83:60:d8:7b:55:27:37:90:28:1e:14:95:
         53:e6:1b:29:d3:4e:fb:e2:1a:d7:2f:f2:63:32:af:0f:85:f3:
         2e:2b:9e:19:c5:79:2a:c1:10:3c:8a:ac:68:28:34:3f:63:e7:
         3f:39:d3:ef:44:32:8a:92:9a:8e:2a:12:af:76:eb:f8:71:84:
         47:d7:7c:6e:01:29:67:3a:7d:f8:59:40:96:3d:e7:8b:d4:23:
         b4:53:7d:46:ce:88:7a:92:78:41:f9:24:52:f3:e7:ff:db:db:
         c4:a6:bd:69:cf:3d:33:d0:fb:57:27:6a:2d:2b:0f:33:85:ee:
         03:71:e6:1d:87:da:d1:02:9f:e6:47:89:5f:65:7e:d9:13:74:
         23:47:a6:b9:b6:8c:d9:26:82:c0:c8:c6:28:05:66:68:e8:79:
         00:a7:99:fd:5b:44:d2:35:a2:38:2a:62:86:f1:bf:be:a9:b9:
         29:11:d4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:45:17 2026 by rpki-client