Error: rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.mft
File:                     GD-ldf98lx8WCL36X7u0jhajJkQ.mft (raw, json)
Hash identifier:          ppk+zI/YwquMwDwWx9okSQyts19353p9FtazvGv+m+o=
Subject key identifier:   3D:F5:CF:10:5D:87:9A:46:20:63:56:72:36:98:B9:95:92:38:0D:B6
Authority key identifier: 18:3F:A5:75:FF:7C:97:1F:16:08:BD:FA:5F:BB:B4:8E:16:A3:26:44
Certificate issuer:       /CN=F363A843AF/serialNumber=183FA575FF7C971F1608BDFA5FBBB48E16A32644
Certificate serial:       0E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GD-ldf98lx8WCL36X7u0jhajJkQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.mft
Manifest number:          0E
Signing time:             Tue 03 Nov 2026 06:05:30 +0000
Manifest this update:     Tue 03 Nov 2026 06:05:30 +0000
Manifest next update:     Thu 05 Nov 2026 06:05:30 +0000
Files and hashes:         1: GD-ldf98lx8WCL36X7u0jhajJkQ.crl (hash: 4yIFCtpwV1yinTDTQCWJjryyGsW9/frtkUmGve4/eyA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GD-ldf98lx8WCL36X7u0jhajJkQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 06:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A843AF, serialNumber=183FA575FF7C971F1608BDFA5FBBB48E16A32644
        Validity
            Not Before: Nov  3 06:05:30 2026 GMT
            Not After : Nov  5 06:05:30 2026 GMT
        Subject: CN=6ae979aa-d350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:ba:8b:bb:7f:95:0e:2d:fe:06:75:92:a6:
                    f5:51:95:99:f6:06:2f:30:46:0c:32:85:80:f6:0f:
                    b8:44:64:a5:50:8d:5e:49:b0:62:eb:11:5f:33:72:
                    fb:d4:51:69:40:bd:79:68:30:f5:52:cc:86:4e:39:
                    12:4e:5a:77:08:b7:41:79:6e:5b:46:a0:b9:a2:eb:
                    51:c2:0f:af:28:7c:45:fd:d2:88:a7:9c:e4:2e:8b:
                    e7:33:7b:7e:bc:bc:f8:21:1f:a1:76:ea:90:c8:e0:
                    24:60:bd:24:69:35:6a:11:f0:8c:61:cb:0c:5a:8c:
                    3e:a5:aa:5d:79:c3:84:86:89:54:71:3e:45:0e:82:
                    44:70:2b:57:83:de:ee:24:d4:b6:60:d2:bc:6b:89:
                    bc:d3:6b:c2:d3:83:13:29:df:a5:f1:16:43:84:1b:
                    45:20:14:df:d9:ef:71:9d:ac:c5:8b:ec:51:c5:15:
                    83:e2:2e:70:e7:93:be:a3:33:75:6c:ac:d8:69:e5:
                    e4:29:1f:7e:98:c8:33:d7:64:8d:26:3e:a6:ef:be:
                    2a:c8:72:75:86:5b:30:81:ff:ea:28:0b:de:cb:7c:
                    81:40:e1:28:26:21:20:fd:9d:39:f9:0c:0e:08:b2:
                    3e:a4:18:5b:f7:1d:cf:08:0f:b7:77:0a:2f:35:38:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F5:CF:10:5D:87:9A:46:20:63:56:72:36:98:B9:95:92:38:0D:B6
            X509v3 Authority Key Identifier:
                keyid:18:3F:A5:75:FF:7C:97:1F:16:08:BD:FA:5F:BB:B4:8E:16:A3:26:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GD-ldf98lx8WCL36X7u0jhajJkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:68:3e:6c:9e:b6:19:7d:f6:d7:dd:60:4e:c9:27:62:28:
         80:98:89:ac:0a:e0:39:ea:80:9e:da:9f:1c:3e:b9:c0:cd:23:
         fb:9b:a9:59:db:24:82:a2:37:19:e0:24:99:c1:81:83:05:4b:
         19:ca:e4:69:ea:f7:0e:57:ae:02:17:85:1b:56:1d:0d:cf:49:
         42:90:21:a0:68:79:28:e8:ea:11:03:77:96:f8:28:66:9e:78:
         73:a0:da:c2:63:e0:2c:09:7c:dd:78:50:49:a9:95:0b:78:75:
         1b:4e:9a:62:67:06:41:b0:c6:f2:46:a7:1d:24:89:3c:3f:05:
         ac:5a:42:10:21:ee:a0:33:10:5b:43:c4:d3:a8:f8:50:8e:46:
         db:7f:c6:41:bb:f9:66:c5:9e:80:3a:25:dd:8f:15:15:7e:95:
         8a:a6:41:5d:6c:aa:4e:b7:1d:07:fe:92:d8:a2:8b:7a:3a:86:
         5c:5d:03:08:d0:f3:69:46:8f:91:45:eb:ae:0a:22:af:e1:26:
         c2:6f:85:35:e3:34:04:92:75:f2:70:71:90:48:d1:a3:bf:4d:
         23:96:a1:38:7f:86:b8:b9:70:b1:5b:dd:b6:3a:ac:6e:11:cb:
         2d:14:b9:2e:5e:eb:be:79:3b:d7:6f:fa:0e:ff:e4:e5:a0:b8:
         48:a0:bb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 08:18:24 2026 by rpki-client