Error: rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.mft
File:                     jyoGTsQZRX82urEc33DzzNG4eHI.mft (raw, json)
Hash identifier:          4uXNMwLHyUOKvHJ6ZtZwbr5PC79JZFFDdwC0Y6CLdJc=
Subject key identifier:   45:CC:04:E6:BC:17:83:BA:DB:CF:B4:78:3F:83:B9:FA:55:0F:A7:01
Authority key identifier: 8F:2A:06:4E:C4:19:45:7F:36:BA:B1:1C:DF:70:F3:CC:D1:B8:78:72
Certificate issuer:       /CN=F3693B0EAF/serialNumber=8F2A064EC419457F36BAB11CDF70F3CCD1B87872
Certificate serial:       0103
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jyoGTsQZRX82urEc33DzzNG4eHI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.mft
Manifest number:          0101
Signing time:             Tue 22 Sep 2026 05:22:03 +0000
Manifest this update:     Tue 22 Sep 2026 05:22:03 +0000
Manifest next update:     Thu 24 Sep 2026 05:22:03 +0000
Files and hashes:         1: jyoGTsQZRX82urEc33DzzNG4eHI.crl (hash: BPKG1YN88FMZuIWLsjKjwVosHmqv9/vgcgGgj8bOPc4=)
                          2: CA37CC7E9AD911F1A447AFD0CE1D38B0.roa (hash: pUXAWCE1fkk7p/lzxtD5uc4gvmAllcCgewPh2lGfMgc=)
                          3: FCEEFBDEEFAC11F0808042D5DAE4EC9C.roa (hash: krRtEvxWWCuCwrpIVIl6JLjXUIjvI/lJBnWBVzu/tKA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jyoGTsQZRX82urEc33DzzNG4eHI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693B0EAF, serialNumber=8F2A064EC419457F36BAB11CDF70F3CCD1B87872
        Validity
            Not Before: Sep 22 05:22:03 2026 GMT
            Not After : Sep 24 05:22:03 2026 GMT
        Subject: CN=6ab2107b-60df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7c:f7:83:4f:9d:e8:b7:be:f0:4f:c0:eb:17:
                    96:b5:63:ad:15:cc:de:f1:bd:12:13:65:45:90:8f:
                    67:f2:1c:2c:45:3a:74:a3:0f:58:e0:1d:32:c1:e4:
                    14:95:41:5f:e7:a9:d4:30:7e:37:a2:17:8a:79:1d:
                    14:51:07:d1:95:0b:c0:f8:d2:f3:4d:21:96:f6:7f:
                    0e:59:11:3f:2e:e7:de:0f:30:7a:49:b6:2e:bc:01:
                    fa:a8:e1:63:29:52:d0:43:47:6d:3f:81:fd:dc:87:
                    81:c9:1c:4c:b7:e4:88:09:4d:e5:f5:fe:e8:67:3b:
                    25:b3:fc:25:60:8e:33:b5:72:e0:17:c2:a0:b8:a1:
                    4d:f6:9b:5d:77:d5:e7:a5:4e:87:9f:f4:1c:6c:7d:
                    67:12:8a:95:07:0a:ca:3c:4b:94:c4:3b:0c:4c:7f:
                    7d:4f:1a:f2:c4:0c:ea:31:d1:e6:e9:17:2d:af:b2:
                    d0:a3:b7:85:ea:c1:02:eb:96:e7:58:0d:e6:0d:27:
                    cf:a6:ab:d5:0a:00:cf:71:05:42:d7:32:d0:7e:2f:
                    24:cf:41:de:00:5c:06:ef:f3:9d:30:60:e4:de:39:
                    98:c8:93:1c:ec:64:fd:e7:94:4e:4c:31:72:ea:a6:
                    f5:7d:52:7d:9a:1e:e9:01:62:b5:13:b9:49:10:e3:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CC:04:E6:BC:17:83:BA:DB:CF:B4:78:3F:83:B9:FA:55:0F:A7:01
            X509v3 Authority Key Identifier:
                keyid:8F:2A:06:4E:C4:19:45:7F:36:BA:B1:1C:DF:70:F3:CC:D1:B8:78:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jyoGTsQZRX82urEc33DzzNG4eHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:da:6f:75:77:35:76:e4:f6:17:73:04:1f:5a:66:7d:0e:92:
         1c:e8:f2:41:43:3c:b6:9e:7b:bf:cb:17:7b:e1:d4:cc:cf:46:
         70:48:d7:86:9e:e5:10:32:5c:de:31:3f:8e:07:eb:67:df:d5:
         70:10:9e:83:bd:70:e2:e9:83:ce:38:94:43:a2:b9:31:e2:2a:
         ec:82:79:6f:b0:b0:92:0c:3f:f3:84:20:25:fb:25:54:ef:d5:
         d5:79:5d:df:57:8c:aa:77:f5:0d:53:13:94:3e:ed:4d:c4:cb:
         ea:f8:43:68:bc:41:c7:89:e0:f3:39:3e:25:f4:08:ee:39:ec:
         3e:dc:cc:cc:ba:61:2f:d8:37:7c:e4:61:2a:ca:56:b5:ab:49:
         80:4a:f4:2e:73:a7:ad:ba:c2:97:bc:da:80:17:d1:47:96:13:
         66:e9:ce:bb:0e:c5:70:84:d4:9d:ad:8f:09:54:c6:9b:b0:35:
         eb:c8:61:8a:67:52:e5:e2:9b:bb:f2:72:9a:61:34:b7:c8:cc:
         c0:df:32:01:83:bc:5d:9f:b1:78:56:80:b9:81:5a:31:c0:47:
         2a:a3:39:fc:56:e1:ee:0b:af:1d:28:2e:11:2d:29:2c:c8:85:
         5d:cf:2d:d7:6c:a8:95:c0:fd:7c:c2:d1:09:25:f7:3e:2f:ca:
         c8:5c:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:29:38 2026 by rpki-client