Error: rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
File:                     GVvktSNN9Q1x07s1Ccaxtchzy6M.mft (raw, json)
Hash identifier:          /XbSV3mm6umXtJbCMd4arweqsKFOM3qrnPOMwv+VOYo=
Subject key identifier:   1F:15:15:D1:49:88:93:9B:59:C8:99:03:B4:33:A2:51:4D:A0:B2:FF
Authority key identifier: 19:5B:E4:B5:23:4D:F5:0D:71:D3:BB:35:09:C6:B1:B5:C8:73:CB:A3
Certificate issuer:       /CN=F3657C0DAF/serialNumber=195BE4B5234DF50D71D3BB3509C6B1B5C873CBA3
Certificate serial:       35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
Manifest number:          34
Signing time:             Wed 04 Nov 2026 05:55:49 +0000
Manifest this update:     Wed 04 Nov 2026 05:55:49 +0000
Manifest next update:     Fri 06 Nov 2026 05:55:49 +0000
Files and hashes:         1: GVvktSNN9Q1x07s1Ccaxtchzy6M.crl (hash: nAlJXlKxiwbOkTgO/QQI2Ws04qA0HeEPIpR0WFrJf6E=)
                          2: E4FD77E4B1CB11F1AD817706CF1D38B0.roa (hash: uICGBeopa56mAEq4BBSjya2Wk/H4T/vpIlsV1cTfWho=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 05:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3657C0DAF, serialNumber=195BE4B5234DF50D71D3BB3509C6B1B5C873CBA3
        Validity
            Not Before: Nov  4 05:55:49 2026 GMT
            Not After : Nov  6 05:55:49 2026 GMT
        Subject: CN=6aeac8e5-9265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:2f:ae:34:e6:c4:60:4a:01:6e:39:07:6e:
                    27:fa:4a:1e:93:d0:37:10:29:c7:b7:8c:da:8f:de:
                    fe:de:f7:5a:52:98:7f:ec:49:6c:2b:a5:f6:b3:2d:
                    c8:11:21:7e:9e:b4:8d:1e:91:57:c2:78:46:aa:74:
                    09:0e:82:39:27:a8:5b:28:8d:b7:bd:d8:fe:8e:04:
                    63:19:ba:d6:82:3f:94:b5:18:27:b5:62:ce:31:c2:
                    06:98:1d:3b:b6:ed:14:96:bf:fb:12:41:42:bd:12:
                    47:14:00:75:2e:68:39:33:4a:2f:3e:eb:55:67:e5:
                    2c:da:60:87:12:9e:37:f6:4a:0e:f9:17:07:9e:7a:
                    8a:43:a5:21:02:26:53:af:df:b8:3b:3e:c1:39:78:
                    2f:cb:7b:e2:82:51:3e:43:34:9b:0e:a0:f4:8a:28:
                    a7:75:c5:99:8f:f8:9f:b0:d2:3b:7c:25:04:ff:c8:
                    d8:eb:bd:37:ce:86:01:51:39:4e:c0:49:60:bc:00:
                    4f:83:18:a1:b6:45:d5:a5:35:93:be:ed:be:0b:67:
                    30:93:99:32:61:e2:dc:b3:ea:06:36:54:ab:6f:a4:
                    ad:d2:70:ff:aa:9b:4f:c1:92:ad:3b:ac:58:46:8d:
                    3a:59:61:aa:83:4b:ba:a7:05:48:65:49:d5:d3:bf:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:15:D1:49:88:93:9B:59:C8:99:03:B4:33:A2:51:4D:A0:B2:FF
            X509v3 Authority Key Identifier:
                keyid:19:5B:E4:B5:23:4D:F5:0D:71:D3:BB:35:09:C6:B1:B5:C8:73:CB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:3f:14:46:b1:f5:4b:76:6e:29:8a:ac:96:50:22:92:87:0f:
         6c:bb:a5:26:df:42:06:4f:46:8e:75:b0:fd:e4:d3:2a:57:cb:
         2f:f6:6b:f3:f0:23:41:ae:31:f1:67:77:97:45:71:5d:f2:10:
         07:7a:b6:17:a3:2f:62:75:56:dd:1d:a2:3c:9f:90:1f:48:30:
         d9:02:ad:9c:d4:53:9a:5f:26:3e:8a:3f:55:0b:bc:81:9d:5a:
         a6:5e:dd:66:2c:97:23:96:f7:93:58:d1:82:b6:9a:04:ce:06:
         d7:24:e9:3a:9d:a7:9d:79:90:49:88:3a:05:8f:d2:7a:61:fb:
         6a:93:d1:c7:59:3e:10:39:ab:65:ef:dd:bf:a8:f6:7a:47:c4:
         3f:16:9d:0e:45:54:94:b5:dd:1c:04:03:fd:cf:8d:ce:28:24:
         9c:4b:41:a9:3f:a8:1d:fc:3a:d1:d8:cc:29:de:b9:fb:47:7e:
         8a:88:ed:78:8e:93:fd:51:d1:76:e9:72:01:77:cf:3c:a1:59:
         96:b1:b1:0d:56:c5:5a:9c:8f:0c:07:e3:b8:0c:09:c7:5d:35:
         db:08:bd:13:15:33:a5:5d:4e:ba:25:3a:ae:66:46:26:69:3a:
         7b:09:16:73:72:bc:0a:0a:85:06:73:76:41:f9:28:2e:01:f5:
         9c:3a:91:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:48:44 2026 by rpki-client