Error: rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft
File:                     6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft (raw, json)
Hash identifier:          dkhC96NW23fPXiZplCWly8BI19aQ546w+T4DpAJxAq4=
Subject key identifier:   2D:EF:E1:6F:7A:1A:91:AE:81:50:C0:1A:6F:AE:5D:BE:24:AD:55:45
Authority key identifier: EA:33:4C:16:45:C0:CD:49:A1:D8:39:5A:E3:CA:52:FF:2D:51:B6:6C
Certificate issuer:       /CN=F3674008AF/serialNumber=EA334C1645C0CD49A1D8395AE3CA52FF2D51B66C
Certificate serial:       0479
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6jNMFkXAzUmh2Dla48pS_y1Rtmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft
Manifest number:          0478
Signing time:             Mon 21 Sep 2026 03:41:18 +0000
Manifest this update:     Mon 21 Sep 2026 03:41:17 +0000
Manifest next update:     Wed 23 Sep 2026 03:41:17 +0000
Files and hashes:         1: 6jNMFkXAzUmh2Dla48pS_y1Rtmw.crl (hash: Vb9qE0Ijx8gZauqmyDVveYpYscvO+bLxkdlHbsGFxqQ=)
                          2: 65664DC075A111EF89CAA679762E951A.roa (hash: XxRKb4SfyFdMFhBN2PfDNEUZavtGLlcUwDxbpsbnBrs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6jNMFkXAzUmh2Dla48pS_y1Rtmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674008AF, serialNumber=EA334C1645C0CD49A1D8395AE3CA52FF2D51B66C
        Validity
            Not Before: Sep 21 03:41:17 2026 GMT
            Not After : Sep 23 03:41:17 2026 GMT
        Subject: CN=6ab0a75e-e964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:31:ec:94:02:3e:a2:9e:5a:c6:ab:58:6e:
                    d0:ff:31:81:e9:76:af:87:26:6a:0a:0c:c3:f5:07:
                    6b:ff:5d:c7:ad:b6:a7:fe:69:cf:26:e0:17:72:8f:
                    24:c8:75:f0:b6:3b:3b:00:09:b8:e1:f1:7e:33:b5:
                    07:3f:1e:5b:fc:bc:b8:68:58:29:ed:37:a6:da:d2:
                    64:85:3c:11:fa:3a:7d:24:0f:00:ac:8d:0e:5c:4e:
                    64:fa:c4:92:ae:ab:c6:cd:02:e0:00:7d:38:d2:95:
                    1c:64:12:84:3e:93:6d:dc:54:5f:bf:79:71:31:c8:
                    18:e9:c8:a6:20:0c:2b:50:a6:ab:58:f1:2b:c3:d4:
                    27:95:d8:69:a3:9a:65:91:ed:58:7f:ca:9a:f6:45:
                    d9:cd:16:b9:3f:f9:ab:82:1e:00:5b:e1:1e:c7:42:
                    24:5a:91:2d:8f:5b:88:f8:77:ba:27:5a:76:0d:ff:
                    4d:40:e5:e7:09:a8:1e:22:36:97:43:38:a3:50:f7:
                    12:ce:6b:ff:c3:96:f5:51:a1:fd:aa:e3:62:c1:36:
                    b1:85:81:0b:87:e9:a0:c2:32:51:ee:57:ea:f5:ee:
                    31:3f:52:d3:33:bc:79:44:89:62:da:75:1e:fe:e9:
                    b6:72:de:91:5f:ae:64:e0:2e:87:20:2a:d7:85:30:
                    a4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EF:E1:6F:7A:1A:91:AE:81:50:C0:1A:6F:AE:5D:BE:24:AD:55:45
            X509v3 Authority Key Identifier:
                keyid:EA:33:4C:16:45:C0:CD:49:A1:D8:39:5A:E3:CA:52:FF:2D:51:B6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6jNMFkXAzUmh2Dla48pS_y1Rtmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:31:81:21:37:05:97:2a:81:16:0f:18:be:28:7b:4d:c3:21:
         4b:b6:f2:b4:13:55:8d:1f:02:9b:45:2d:18:67:37:32:db:76:
         52:70:5d:98:35:2d:75:f9:e1:de:cf:6f:d8:45:b6:8f:9f:22:
         31:a5:82:bc:71:ac:40:2e:31:1f:b8:93:53:3c:ba:44:26:a3:
         4f:0b:e1:a6:58:12:e1:9a:9e:c0:81:e3:a0:f9:b8:76:38:0b:
         ab:36:da:2f:26:15:c5:f4:56:ac:6b:52:d3:df:2a:d7:c3:66:
         65:86:5e:b8:33:dc:4d:e7:58:1d:2d:65:4d:a2:e0:85:b4:f6:
         b0:a3:39:13:c1:cb:b6:de:b1:6a:9c:91:bf:9a:48:b8:a6:0d:
         c5:07:d9:c2:44:16:d1:93:53:69:60:0b:27:5c:29:ea:c3:a4:
         98:c1:52:04:7b:65:16:a1:8f:de:19:66:dc:30:99:b6:cd:2d:
         a5:4b:29:3e:6f:78:67:e5:e9:43:20:96:3d:65:f4:3d:c7:65:
         23:be:23:bf:4e:d2:f3:a5:2c:cc:d2:d1:d2:23:f5:50:22:fc:
         5f:85:06:bd:32:ff:7e:c7:7a:6b:ab:19:b3:23:8b:bb:91:12:
         ad:d3:33:2d:34:88:14:8f:c0:63:5a:22:4d:24:15:7f:38:06:
         5e:13:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:14:09 2026 by rpki-client