Error: rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
File:                     gVdGXshx9nfFuXh07KV5IzijWSQ.mft (raw, json)
Hash identifier:          OPwz4jwHXLCZ3dwpLqYkyRf9ueJleWbu1iyfhiQno0g=
Subject key identifier:   70:0B:93:34:24:FB:43:14:97:94:AC:6F:B8:5F:6D:D1:AA:11:AB:C5
Authority key identifier: 81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
Certificate issuer:       /CN=F3645EEFAF/serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
Manifest number:          13
Signing time:             Sat 19 Sep 2026 10:09:17 +0000
Manifest this update:     Sat 19 Sep 2026 10:09:16 +0000
Manifest next update:     Mon 21 Sep 2026 10:09:16 +0000
Files and hashes:         1: gVdGXshx9nfFuXh07KV5IzijWSQ.crl (hash: IpjIw7DdXx9IOBGQnxABCAhAP1MnSmZTf/9sb0unul4=)
                          2: BCA47662AC3A11F1BD37C8CFCE1D38B0.roa (hash: 1aHOqjAbG/Vyek5fSEwl25glNibnEDDQivHJEhgfU/o=)
                          3: EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa (hash: QwlK+QN112m44lVk1uPEgi3OJcDWCvd/zy8bamKKzqY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645EEFAF, serialNumber=8157465EC871F677C5B97874ECA5792338A35924
        Validity
            Not Before: Sep 19 10:09:16 2026 GMT
            Not After : Sep 21 10:09:16 2026 GMT
        Subject: CN=6aae5f4d-738a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:9e:d5:77:57:19:d2:68:4f:0d:be:3c:75:
                    8e:2b:20:0a:36:94:98:27:57:59:ee:ae:ef:82:ea:
                    40:9c:df:c4:7b:bd:21:db:2d:6e:dc:79:08:da:e2:
                    c8:25:f4:8d:2d:53:22:0a:65:24:8e:87:2b:e8:9a:
                    ea:a8:b3:8b:33:cf:2e:34:4f:87:77:c9:78:d9:74:
                    7d:ab:1e:eb:04:35:07:ed:c4:5d:e5:8b:a3:e8:0a:
                    af:8b:8d:f2:10:74:91:a7:6b:57:e6:19:22:89:1d:
                    c5:bb:cd:1f:4b:e1:00:6a:02:a8:eb:7d:46:00:ef:
                    a0:97:00:ee:ea:c1:6a:09:6e:0b:55:2f:48:4c:24:
                    51:d0:e1:6f:9f:4d:43:01:42:c5:d0:74:ac:10:64:
                    2f:a2:87:20:72:4e:34:78:3b:ff:93:6b:a8:f5:74:
                    64:20:ba:ce:fe:72:8e:39:a6:e1:cf:91:52:c3:dd:
                    43:b8:5a:71:78:f8:8a:1f:48:e0:b2:60:7c:27:7d:
                    1b:38:28:f8:2c:b6:f6:02:1c:dc:2e:d1:d5:c8:e9:
                    ec:e5:08:22:11:1d:e1:20:05:64:f3:d9:d2:bf:32:
                    db:c1:fc:ed:45:c6:3b:c3:f9:f0:ae:86:0b:f7:6d:
                    cc:2b:9c:f8:37:51:1d:ad:ed:3a:31:2f:68:b2:f7:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0B:93:34:24:FB:43:14:97:94:AC:6F:B8:5F:6D:D1:AA:11:AB:C5
            X509v3 Authority Key Identifier:
                keyid:81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:fd:b0:87:65:1a:f1:bd:52:d4:41:b6:67:0e:2d:d7:69:
         ee:2e:5f:37:cb:d5:67:52:38:0b:51:2b:57:89:a1:74:b2:e9:
         69:34:31:cf:ae:c5:03:01:f8:3b:42:3f:e6:94:8f:58:8e:f9:
         27:51:fb:4b:6f:25:94:39:15:f3:80:d9:fd:7f:c4:9c:44:01:
         a0:4e:60:4a:80:4b:aa:67:64:be:e3:8d:8f:26:eb:ec:4f:6f:
         c9:47:c7:28:35:e1:aa:d1:93:e6:cd:1d:97:62:fa:48:23:39:
         be:28:34:3f:d5:3d:06:88:52:ea:40:2d:d3:8f:6b:97:e4:0b:
         83:f9:87:55:02:89:5e:68:f3:ac:7b:a8:34:31:fe:b9:65:d8:
         7a:f8:a8:79:42:b5:2e:d4:dc:85:f9:3b:85:d1:46:b3:e6:9b:
         c3:cf:c0:d9:52:40:bf:c7:dc:8a:ff:b5:40:ba:c7:3f:85:8b:
         ad:28:69:ba:85:43:67:2d:ff:0a:66:c1:30:69:3e:2c:94:41:
         56:e9:b4:8f:95:46:6f:74:3c:3e:76:53:66:2a:e4:1f:1a:4f:
         43:2c:c8:31:a7:fd:07:d4:91:02:83:fa:84:0d:ca:92:32:f8:
         4e:87:69:c1:d4:58:22:99:92:5c:89:b4:f9:f5:8c:f3:ae:b2:
         10:87:7b:dc
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBFzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
NUVFRkFGMTEwLwYDVQQFEyg4MTU3NDY1RUM4NzFGNjc3QzVCOTc4NzRFQ0E1Nzky
MzM4QTM1OTI0MB4XDTI2MDkxOTEwMDkxNloXDTI2MDkyMTEwMDkxNlowGDEWMBQG
A1UEAxMNNmFhZTVmNGQtNzM4YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZNntV3VxnSaE8Nvjx1jisgCjaUmCdXWe6u74LqQJzfxHu9Idstbtx5CNri
yCX0jS1TIgplJI6HK+ia6qizizPPLjRPh3fJeNl0fase6wQ1B+3EXeWLo+gKr4uN
8hB0kadrV+YZIokdxbvNH0vhAGoCqOt9RgDvoJcA7urBagluC1UvSEwkUdDhb59N
QwFCxdB0rBBkL6KHIHJONHg7/5NrqPV0ZCC6zv5yjjmm4c+RUsPdQ7hacXj4ih9I
4LJgfCd9Gzgo+Cy29gIc3C7R1cjp7OUIIhEd4SAFZPPZ0r8y28H87UXGO8P58K6G
C/dtzCuc+DdRHa3tOjEvaLL3s4ECAwEAAaOCArgwggK0MB0GA1UdDgQWBBRwC5M0
JPtDFJeUrG+4X23RqhGrxTAfBgNVHSMEGDAWgBSBV0ZeyHH2d8W5eHTspXkjOKNZ
JDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDVFRUYvODcxOTdBQkVBQzM2MTFGMThCM0I4Q0I3Q0UxRDM4QjAvZ1ZkR1hz
aHg5bmZGdVhoMDdLVjVJemlqV1NRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZ1ZkR1hzaHg5bmZGdVhoMDdLVjVJemlqV1NRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0NUVFRi84NzE5N0FCRUFDMzYxMUYxOEIzQjhDQjdDRTFE
MzhCMC9nVmRHWHNoeDluZkZ1WGgwN0tWNUl6aWpXU1EubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAEeg/bCHZRrxvVLUQbZnDi3Xae4uXzfL
1WdSOAtRK1eJoXSy6Wk0Mc+uxQMB+DtCP+aUj1iO+SdR+0tvJZQ5FfOA2f1/xJxE
AaBOYEqAS6pnZL7jjY8m6+xPb8lHxyg14arRk+bNHZdi+kgjOb4oND/VPQaIUupA
LdOPa5fkC4P5h1UCiV5o86x7qDQx/rll2Hr4qHlCtS7U3IX5O4XRRrPmm8PPwNlS
QL/H3Ir/tUC6xz+Fi60oabqFQ2ct/wpmwTBpPiyUQVbptI+VRm90PD52U2Yq5B8a
T0MsyDGn/QfUkQKD+oQNypIy+E6HacHUWCKZklyJtPn1jPOushCHe9w=
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:45 2026 by rpki-client