Error: rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
File:                     GVvktSNN9Q1x07s1Ccaxtchzy6M.mft (raw, json)
Hash identifier:          8RuBYLh4smLTR+KBs+Ovz7L/bWvNFyqveizwUFSwJvo=
Subject key identifier:   D0:90:7D:D5:EE:89:58:3C:6C:C9:06:0C:F1:63:EB:1B:98:6C:AA:84
Authority key identifier: 19:5B:E4:B5:23:4D:F5:0D:71:D3:BB:35:09:C6:B1:B5:C8:73:CB:A3
Certificate issuer:       /CN=F3657C0DAF/serialNumber=195BE4B5234DF50D71D3BB3509C6B1B5C873CBA3
Certificate serial:       05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
Manifest number:          04
Signing time:             Fri 18 Sep 2026 05:56:54 +0000
Manifest this update:     Fri 18 Sep 2026 05:56:53 +0000
Manifest next update:     Sun 20 Sep 2026 05:56:53 +0000
Files and hashes:         1: GVvktSNN9Q1x07s1Ccaxtchzy6M.crl (hash: gY1KawOwNaQMN8p9BfMBrCV+Jcv0qjQo4fmVmsXFZIA=)
                          2: E4FD77E4B1CB11F1AD817706CF1D38B0.roa (hash: uICGBeopa56mAEq4BBSjya2Wk/H4T/vpIlsV1cTfWho=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3657C0DAF, serialNumber=195BE4B5234DF50D71D3BB3509C6B1B5C873CBA3
        Validity
            Not Before: Sep 18 05:56:53 2026 GMT
            Not After : Sep 20 05:56:53 2026 GMT
        Subject: CN=6aacd2a6-0833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:3d:03:c1:f3:b0:d9:c6:76:7f:dc:1b:8b:
                    c8:97:1d:57:15:6a:ac:0a:29:97:97:97:9c:f5:65:
                    7b:1c:7a:d7:64:f7:b4:e8:e0:9f:53:1e:0c:7c:ca:
                    b7:14:96:b7:06:06:33:bd:41:83:62:c6:79:af:17:
                    2b:4c:7c:e0:81:76:4c:e7:87:74:49:d1:00:f3:8b:
                    a3:9a:aa:31:2f:fe:58:c1:5d:94:3d:59:36:67:9a:
                    b3:fd:8f:3f:16:48:04:44:53:1a:fd:b5:ba:cd:59:
                    da:73:67:da:f8:88:08:9d:a6:d0:49:29:5b:55:4c:
                    cc:40:49:88:75:32:81:d2:39:e6:25:50:c0:85:d7:
                    35:48:a1:99:63:bf:a2:1a:98:5d:42:26:7e:ef:f6:
                    c5:fa:48:ed:90:e5:d6:a0:8b:2c:d5:11:88:58:26:
                    d7:4e:35:f5:3d:71:fd:19:1e:80:48:54:af:16:53:
                    e0:36:b3:65:49:cc:64:63:f0:22:6d:6b:f0:98:64:
                    af:5c:c0:69:0d:ff:b0:92:0f:3d:c4:c0:a1:e3:e3:
                    9d:d6:67:9b:ae:69:3e:05:6d:55:47:1f:8a:39:d3:
                    81:c3:f1:04:cb:43:97:67:e2:9e:b0:2c:23:61:07:
                    20:eb:74:0b:e6:39:c3:dc:a1:b6:98:a9:fb:72:08:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:90:7D:D5:EE:89:58:3C:6C:C9:06:0C:F1:63:EB:1B:98:6C:AA:84
            X509v3 Authority Key Identifier:
                keyid:19:5B:E4:B5:23:4D:F5:0D:71:D3:BB:35:09:C6:B1:B5:C8:73:CB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GVvktSNN9Q1x07s1Ccaxtchzy6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657C0D/473E6450B1CB11F1A8DC2A04CF1D38B0/GVvktSNN9Q1x07s1Ccaxtchzy6M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5d:a2:1a:ca:17:08:c5:5b:46:98:ad:93:d4:66:ea:a4:7c:
         e8:09:9c:74:9b:68:13:0b:4b:3b:0b:db:9d:71:b4:76:46:0e:
         30:d3:91:15:86:90:35:4f:cc:c3:2d:59:42:49:a8:23:34:85:
         33:82:70:ac:54:7c:1f:d7:67:69:6f:03:1d:a3:cc:cd:c6:c3:
         3b:1d:96:dd:f0:63:7a:d8:8e:cb:6f:7f:8f:28:9b:c4:56:1c:
         18:a4:8e:79:6c:fd:d4:4f:19:30:6b:b9:58:90:12:ac:9a:f2:
         67:bd:79:fc:5d:af:a9:17:08:b8:e1:c9:4e:ae:4b:e1:9f:59:
         01:51:e6:fb:5e:65:9a:b0:21:96:e6:b9:75:27:1a:64:4e:33:
         e7:ce:31:a3:1d:db:59:e9:03:b7:de:ff:a0:14:2e:f5:8c:46:
         c0:56:f1:72:69:e4:56:a9:13:9d:5d:2d:da:af:9e:14:49:f9:
         64:37:cc:c0:c4:b9:40:0b:4b:87:c5:55:70:ab:aa:27:b9:99:
         5f:b9:ad:20:10:b6:bf:be:d2:bc:f3:72:4d:82:9c:d4:81:fa:
         ad:65:1d:01:5c:57:9b:bb:30:a8:6f:14:62:8e:bc:9b:49:b7:
         01:91:3c:22:cf:f5:9c:16:76:4b:a9:37:3b:36:9d:a6:ed:f7:
         58:7e:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:44:15 2026 by rpki-client