Error: rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
File:                     5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft (raw, json)
Hash identifier:          jWswo3Lao5F6Fz0sVXhc+x/gNq2Q9glfBvgOT5SirCw=
Subject key identifier:   E1:61:19:40:7A:4C:3E:D3:D4:0E:57:62:F5:85:50:27:F2:41:41:20
Authority key identifier: E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D
Certificate issuer:       /CN=F3691854AF/serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
Certificate serial:       0447
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
Manifest number:          0447
Signing time:             Mon 28 Sep 2026 03:48:33 +0000
Manifest this update:     Mon 28 Sep 2026 03:48:32 +0000
Manifest next update:     Wed 30 Sep 2026 03:48:32 +0000
Files and hashes:         1: 5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl (hash: nhjfe3+HQJJWSrlETVnFUemUnIhELVXJU5/ZIy50PtM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AF, serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
        Validity
            Not Before: Sep 28 03:48:32 2026 GMT
            Not After : Sep 30 03:48:32 2026 GMT
        Subject: CN=6ab9e390-d7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:4b:62:a9:33:a3:ab:ac:d2:34:0e:f2:87:
                    3a:c6:4a:9c:28:6f:5b:60:6c:21:67:75:50:39:68:
                    42:03:9c:29:8b:1b:a0:bf:90:63:08:3b:1c:f0:58:
                    f4:69:fa:4e:2b:72:0f:38:b1:30:0c:e0:c0:34:35:
                    04:b8:67:24:7a:d2:37:fe:c8:6d:a5:1c:21:49:8a:
                    4b:53:73:f5:13:8a:7b:e1:24:c4:e2:2f:0d:09:7f:
                    f2:62:20:ae:1e:0c:79:6c:9b:a2:f3:69:c9:aa:cc:
                    7f:a8:57:97:3e:94:01:c8:07:8a:fd:7c:51:f9:34:
                    9f:c7:3b:77:e1:be:2c:a2:fc:ef:8e:ac:de:c3:a6:
                    fd:2c:31:d3:03:55:3c:6b:76:6a:71:c3:ba:62:ff:
                    af:db:b8:81:89:ca:81:80:da:b4:5b:65:be:0a:ae:
                    23:0b:d7:28:fd:b2:c1:56:96:52:07:64:e5:d1:69:
                    20:f7:62:a3:53:5f:14:13:e8:30:21:6a:84:fe:57:
                    b6:2c:c7:2d:04:f5:b2:06:6b:68:72:f8:5e:24:8e:
                    4a:74:b6:d5:37:e0:36:0f:09:6b:af:b3:05:be:c2:
                    9c:60:91:8c:08:f8:af:9d:a0:d1:eb:49:27:76:16:
                    a7:c2:b5:ee:c7:8c:68:36:79:18:aa:b7:54:01:4e:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:61:19:40:7A:4C:3E:D3:D4:0E:57:62:F5:85:50:27:F2:41:41:20
            X509v3 Authority Key Identifier:
                keyid:E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e0:d4:40:e1:00:2c:7d:bf:d8:03:84:86:c7:e8:cf:11:4d:
         b7:e2:67:53:60:70:f5:8c:f5:ff:2d:27:ca:f7:a6:db:9b:b8:
         bb:20:22:eb:24:a2:93:fd:a9:ef:3a:03:05:9b:fe:e2:78:2e:
         52:10:1d:5e:ed:5d:b1:b9:38:19:24:03:50:34:f8:48:4b:fe:
         92:99:7c:b2:2a:20:df:45:d8:f2:0f:39:89:3e:b4:c9:34:de:
         af:3e:a3:dc:08:bd:43:e2:32:48:8c:aa:f4:cd:01:c6:2d:92:
         5f:a0:ac:f9:ad:a3:ca:0a:4c:fc:64:79:a5:7a:4f:84:7e:00:
         c2:a7:d7:79:f2:cb:ed:e2:03:8f:dd:df:8c:df:cd:7b:a6:f0:
         11:08:ae:b1:c2:e3:e2:6b:52:e8:3e:f0:6b:8f:fc:b4:bd:02:
         dd:23:e1:4b:b5:5a:62:01:74:bd:9e:41:00:58:f5:b4:df:3b:
         93:56:6a:ff:42:ad:0c:30:25:20:a6:6e:82:0b:73:2d:a7:48:
         e5:a7:63:9b:0b:fd:fc:73:e9:2d:19:7f:6a:0b:6c:db:90:53:
         61:0b:4c:cd:d2:c1:45:a5:a2:8b:5c:f1:f0:1a:bf:0a:f6:99:
         0a:83:ea:db:77:00:a3:27:62:fb:0b:d7:c2:4d:04:9e:ea:02:
         be:59:81:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:30:50 2026 by rpki-client