Error: rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/dx6EuyD1FdzAN7LDZvjDgrgZv-c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/dx6EuyD1FdzAN7LDZvjDgrgZv-c.mft
File:                     dx6EuyD1FdzAN7LDZvjDgrgZv-c.mft (raw, json)
Hash identifier:          42+4AAZSpoA1/LEm1lz6rj6LA+aDZQzD76ZYwnWT7OE=
Subject key identifier:   F7:D5:68:C5:6C:8C:23:F0:C4:46:9C:BC:4A:01:92:6F:22:E1:A1:97
Authority key identifier: 77:1E:84:BB:20:F5:15:DC:C0:37:B2:C3:66:F8:C3:82:B8:19:BF:E7
Certificate issuer:       /CN=F366EAA1AF/serialNumber=771E84BB20F515DCC037B2C366F8C382B819BFE7
Certificate serial:       44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dx6EuyD1FdzAN7LDZvjDgrgZv-c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/dx6EuyD1FdzAN7LDZvjDgrgZv-c.mft
Manifest number:          43
Signing time:             Mon 12 Oct 2026 05:49:51 +0000
Manifest this update:     Mon 12 Oct 2026 05:49:50 +0000
Manifest next update:     Wed 14 Oct 2026 05:49:50 +0000
Files and hashes:         1: dx6EuyD1FdzAN7LDZvjDgrgZv-c.crl (hash: mf01vlBzy5X/rkh24yvpb46dAt8ae1weCmP2bAKKtGk=)
                          2: 9E0200DE931811F1AED0AECBCE1D38B0.roa (hash: PHYixGjtnNsWMxr7k4ccARleRWY8Vl+qnwhzE6bVdn4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/dx6EuyD1FdzAN7LDZvjDgrgZv-c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/dx6EuyD1FdzAN7LDZvjDgrgZv-c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dx6EuyD1FdzAN7LDZvjDgrgZv-c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 05:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366EAA1AF, serialNumber=771E84BB20F515DCC037B2C366F8C382B819BFE7
        Validity
            Not Before: Oct 12 05:49:50 2026 GMT
            Not After : Oct 14 05:49:50 2026 GMT
        Subject: CN=6acc74ff-00ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:36:46:2d:e2:02:7b:83:d1:45:c0:fa:9c:
                    ee:93:44:7c:73:e2:3d:73:20:e0:7a:40:f4:c6:8b:
                    44:23:be:a7:86:d3:4d:5a:b7:94:b5:ac:d1:b6:2b:
                    23:d0:54:92:fd:ef:cd:77:59:1a:70:71:19:7a:c6:
                    b7:10:f6:02:3b:87:10:a6:0b:9c:d7:3a:e2:99:12:
                    8f:15:01:63:bb:5e:f7:b9:04:3b:a0:06:9a:3b:bf:
                    44:cb:22:61:73:50:30:cc:17:75:14:cd:5e:76:3a:
                    66:a5:a7:35:e6:92:43:32:98:f0:e8:15:3b:1e:ad:
                    ba:33:13:ee:5b:13:fd:e3:92:5f:03:5b:e8:5e:79:
                    41:30:c4:cb:6e:2a:ad:da:61:29:4e:a1:d8:7b:60:
                    15:9a:8c:9c:a3:b2:7f:b3:ce:2c:c8:a4:5d:90:32:
                    1b:3d:60:9d:79:bb:48:64:78:b5:ed:de:90:29:9d:
                    54:f1:33:bb:de:0e:e5:59:86:58:83:c0:82:0d:82:
                    1a:42:56:c2:8f:c1:0a:ae:b0:9f:fb:f4:cc:de:07:
                    40:e3:42:2e:2c:9a:4b:a4:ab:03:bf:ee:74:03:bc:
                    87:48:99:2b:79:12:df:b2:49:6c:9a:89:e2:36:42:
                    ba:95:6f:63:ce:8e:4c:93:be:f5:b7:08:9f:28:29:
                    75:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D5:68:C5:6C:8C:23:F0:C4:46:9C:BC:4A:01:92:6F:22:E1:A1:97
            X509v3 Authority Key Identifier:
                keyid:77:1E:84:BB:20:F5:15:DC:C0:37:B2:C3:66:F8:C3:82:B8:19:BF:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/dx6EuyD1FdzAN7LDZvjDgrgZv-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dx6EuyD1FdzAN7LDZvjDgrgZv-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/dx6EuyD1FdzAN7LDZvjDgrgZv-c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:a0:a7:0f:57:61:0d:8f:12:77:b0:09:82:c3:c0:ce:78:11:
         35:12:52:62:42:50:62:bc:0a:79:de:d9:87:8a:e4:6a:36:6e:
         59:81:a4:60:90:48:77:08:d3:03:28:41:2f:da:d8:ac:c0:5f:
         2d:a8:d3:9b:07:db:bd:ef:18:f3:2a:80:1c:11:82:fe:65:3a:
         8b:91:a2:e0:91:cb:ec:f9:86:f3:d3:bd:17:68:28:f0:1a:3c:
         28:48:6a:98:f0:95:56:8b:5b:3a:e1:5a:98:25:bc:62:2d:2b:
         64:ec:05:2b:1e:93:8d:d5:c7:d4:9c:99:5e:ae:1c:54:0d:70:
         0b:0e:54:eb:7d:e2:a1:21:b4:7a:68:c4:45:00:35:d2:19:6e:
         95:e1:21:aa:c9:b1:03:ab:8f:59:78:90:67:bf:a4:b1:fb:bf:
         0c:04:26:60:3e:d5:46:fd:8a:08:f6:d1:04:89:20:2d:07:d7:
         d0:e8:1e:c4:ed:fe:e2:bc:89:8c:e3:47:f7:dd:7b:57:6e:42:
         cd:13:88:0b:13:68:66:9d:1f:b0:00:8d:51:2e:52:b1:db:f9:
         28:f5:e3:0d:53:51:72:c2:e1:10:d9:6d:ef:56:b3:a6:db:44:
         59:b0:2e:30:64:62:60:c8:c7:f8:c5:44:60:b2:99:d6:cd:90:
         2c:e7:45:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:22:06 2026 by rpki-client