Error: rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft
File:                     Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft (raw, json)
Hash identifier:          4ynmVN0ihChbTwBdAsz/p/rOt5Rr5u3jHn29nE4ABy8=
Subject key identifier:   69:D1:E7:C8:8A:2C:E7:0D:90:4B:06:94:C1:97:71:05:7C:36:05:77
Authority key identifier: 56:E9:3A:98:5F:6B:36:7D:36:8B:98:90:37:41:41:23:C0:4A:00:71
Certificate issuer:       /CN=F362E4AFAF/serialNumber=56E93A985F6B367D368B989037414123C04A0071
Certificate serial:       69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vuk6mF9rNn02i5iQN0FBI8BKAHE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft
Manifest number:          69
Signing time:             Sun 25 Oct 2026 05:44:49 +0000
Manifest this update:     Sun 25 Oct 2026 05:44:48 +0000
Manifest next update:     Tue 27 Oct 2026 05:44:48 +0000
Files and hashes:         1: Vuk6mF9rNn02i5iQN0FBI8BKAHE.crl (hash: FxWnpXzrITFyjxNVnilFeuVlezaBvYo9T3yBsdt+Gds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vuk6mF9rNn02i5iQN0FBI8BKAHE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E4AFAF, serialNumber=56E93A985F6B367D368B989037414123C04A0071
        Validity
            Not Before: Oct 25 05:44:48 2026 GMT
            Not After : Oct 27 05:44:48 2026 GMT
        Subject: CN=6add9751-2786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:7f:88:9c:84:46:22:53:97:43:46:1a:d9:
                    fe:0e:c4:ce:61:ef:6b:de:fd:8d:47:2b:66:d9:99:
                    ed:0e:92:1f:d2:65:20:65:15:08:ae:99:37:2c:16:
                    9d:93:c8:28:3d:ce:bc:81:2c:62:70:2f:c2:b0:2c:
                    13:89:ee:70:53:e1:08:2d:99:47:ca:54:1f:4b:d7:
                    47:02:61:65:0f:38:10:65:04:ac:57:57:12:58:ce:
                    4d:ea:5f:18:05:95:b2:32:bd:e8:16:a9:70:0a:e4:
                    41:50:9c:5c:fd:d4:32:41:07:26:72:3d:b5:4e:0c:
                    97:b2:f6:74:a8:5d:50:cb:96:49:b2:f3:97:ed:42:
                    f8:95:93:17:cd:b5:eb:3e:aa:4b:b7:ee:83:53:2c:
                    a0:a1:a8:65:33:f5:da:4f:3e:c8:b2:f7:a7:2e:1c:
                    b2:52:55:33:08:09:d3:6b:a4:ff:00:7e:1d:fd:10:
                    64:98:e0:ce:ce:1a:03:75:97:a3:9e:d2:63:30:1d:
                    63:95:20:cf:49:7e:af:d6:5f:1c:65:e5:5f:21:ef:
                    e8:50:02:19:5f:1c:54:47:9d:e0:7f:ab:2b:c1:22:
                    37:94:cd:af:57:9c:04:10:04:82:91:cb:73:c8:38:
                    64:0f:fa:b9:76:f9:e6:52:a2:79:b6:97:ec:04:ca:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D1:E7:C8:8A:2C:E7:0D:90:4B:06:94:C1:97:71:05:7C:36:05:77
            X509v3 Authority Key Identifier:
                keyid:56:E9:3A:98:5F:6B:36:7D:36:8B:98:90:37:41:41:23:C0:4A:00:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vuk6mF9rNn02i5iQN0FBI8BKAHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:82:6a:00:53:9e:ed:1a:94:95:25:f5:9c:af:46:27:e7:
         0c:a5:e4:b4:8c:64:00:ed:bf:77:ae:4a:24:f8:cd:23:75:e2:
         28:05:6a:b8:69:c4:89:1e:1d:11:1d:02:44:f5:2e:50:5b:1c:
         a5:2b:9f:1b:50:a2:d8:59:fb:ed:08:6d:35:5e:ed:1c:ad:4c:
         61:f9:a8:16:88:e0:6a:bc:74:6f:2b:e9:5e:08:83:9b:9c:6a:
         46:39:e2:51:a4:5b:a1:23:b7:23:28:f1:9a:cc:c3:d2:32:17:
         cd:39:8b:b7:aa:7f:3e:2f:64:88:40:fd:48:3d:d2:24:dd:9b:
         34:d6:4b:ad:b2:8a:fa:44:05:f9:30:af:63:ae:75:84:9c:6e:
         bd:51:d2:25:74:5d:10:cb:de:2b:b6:15:e6:8d:f3:45:75:3c:
         4f:79:bc:f8:5c:c2:57:64:e5:02:a9:2a:99:17:60:26:c5:6a:
         4a:bc:00:58:91:60:0d:62:e8:7f:f7:11:63:3a:8c:52:74:ad:
         a1:10:a1:79:f7:77:cb:4a:97:12:4c:27:43:d4:f2:3c:5d:99:
         27:55:af:7f:8d:43:1e:9b:0d:85:c2:cb:65:d3:01:9a:4e:a6:
         5d:ce:11:ea:8a:14:0b:75:8f:0c:ca:e7:e9:be:70:cc:ad:9e:
         0c:b9:22:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:48:45 2026 by rpki-client