Error: rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
File:                     gAEXeatK0jDEfjKtDyaMBltYJzk.mft (raw, json)
Hash identifier:          XCJ81RhwzoLrrkH1GHZLTJcjtJwPC28R75n9UgH80OE=
Subject key identifier:   5A:EA:1B:7B:A2:AC:48:E6:99:57:0C:D8:E0:9D:E5:C9:6B:54:41:11
Authority key identifier: 80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39
Certificate issuer:       /CN=F3678405AF/serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
Certificate serial:       4F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
Manifest number:          4C
Signing time:             Sat 10 Oct 2026 05:49:27 +0000
Manifest this update:     Sat 10 Oct 2026 05:49:26 +0000
Manifest next update:     Mon 12 Oct 2026 05:49:26 +0000
Files and hashes:         1: gAEXeatK0jDEfjKtDyaMBltYJzk.crl (hash: uOIZwD2U4cj5JKNW957l04yw9jVdaIC28bvZjwITBYQ=)
                          2: EC3E8552925911F1861D7FC6CE1D38B0.roa (hash: wMxM6iiSP5VezernVRQAzC5Ti2yHn1gKly6ToFgfUc4=)
                          3: AFC3C4F48CFD11F1AEB72BB7CE1D38B0.roa (hash: SgKxF5/8dtqg/2YdGcT3nH3vWLieJxae9WqWx8WQJDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678405AF, serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
        Validity
            Not Before: Oct 10 05:49:26 2026 GMT
            Not After : Oct 12 05:49:26 2026 GMT
        Subject: CN=6ac9d1e7-73b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:f6:87:3b:11:62:0c:14:86:50:6b:d6:53:
                    9d:23:ff:c7:4a:4d:66:4e:ad:ed:f8:38:aa:e3:e9:
                    b8:ee:49:52:ec:ac:2d:27:10:80:cc:3f:87:5d:0d:
                    12:8d:1f:05:64:a6:c8:ca:df:de:51:e7:32:0b:6b:
                    7a:ee:8f:42:41:97:2a:5d:a6:8e:7f:f5:52:ba:d8:
                    98:06:54:44:0c:42:fe:a1:12:5c:a7:3d:83:06:d1:
                    a6:ab:ff:05:06:39:88:50:fc:7f:b7:af:ad:f2:53:
                    67:50:e7:02:20:1f:d5:21:16:9c:0d:b8:46:6c:04:
                    2a:ba:da:cf:db:97:24:88:2f:95:f4:41:31:b9:2e:
                    5d:a8:e8:d6:b5:24:11:9f:50:b4:33:4b:14:6c:77:
                    ce:e2:b7:78:d2:5b:f9:e5:fa:45:7f:c6:73:ca:61:
                    ac:9c:17:56:48:85:06:a2:88:3d:66:41:ae:ea:07:
                    65:ff:76:78:8e:dd:0a:1e:31:23:5d:c0:b8:cb:b9:
                    a4:cf:57:a8:6e:31:eb:17:fa:d5:3c:57:f6:74:74:
                    87:a6:8a:c2:b3:22:00:a8:64:8e:a2:26:ab:e8:2a:
                    89:b6:85:ad:bc:37:ba:93:c9:d6:ac:e5:a1:ed:bc:
                    a6:41:1d:84:c9:d7:f6:a5:91:dc:9a:1e:b2:46:84:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EA:1B:7B:A2:AC:48:E6:99:57:0C:D8:E0:9D:E5:C9:6B:54:41:11
            X509v3 Authority Key Identifier:
                keyid:80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6e:2b:84:ff:93:c0:cb:93:7f:63:37:a4:15:fa:2c:b2:17:
         f6:6e:c7:95:7b:10:1e:19:3a:1d:0a:5b:0c:99:69:48:be:ca:
         e5:0f:a4:67:0d:6e:c5:4c:7c:3c:0e:d5:e5:f0:cb:7a:21:3f:
         cd:e0:ee:58:44:e4:7a:9f:13:a6:83:32:45:b1:5a:df:df:11:
         ec:d9:fb:20:ff:5b:3f:d6:6c:69:7c:e5:bb:dc:d0:bd:b5:d5:
         ea:3a:11:d4:fa:b5:ec:c2:03:5e:5e:a0:9d:09:d2:01:65:91:
         f7:a3:1c:0a:51:41:be:30:29:91:72:ac:12:fc:59:09:6c:8f:
         92:6e:9f:9f:b4:e4:6a:5b:36:59:48:bb:77:9d:7e:7e:92:63:
         24:2b:a7:08:c6:d1:48:09:f8:83:d9:b1:25:a5:12:e2:b0:4a:
         48:63:15:df:1e:ab:32:07:5e:74:e2:53:0b:33:38:29:f3:1b:
         4e:f2:f6:7d:18:14:39:de:3b:2f:d8:61:12:7e:97:ce:28:8e:
         e6:c2:f6:c8:e1:22:0d:4f:6a:1e:dd:75:9e:ab:f5:34:b7:4b:
         bb:e3:8d:fc:47:70:ef:49:a2:bc:29:49:5f:b6:99:17:12:16:
         f7:be:52:0b:34:ea:02:80:2d:54:08:70:2b:e5:7c:ab:71:a9:
         95:53:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:59:10 2026 by rpki-client