Error: rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
File:                     VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft (raw, json)
Hash identifier:          Ze8vVk4auMBofO+pak/CnsPP8OhqEhAVfcePsVqJnsQ=
Subject key identifier:   54:10:62:1B:94:85:98:97:66:70:F2:29:C7:80:93:69:4E:7B:D6:5C
Authority key identifier: 55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F
Certificate issuer:       /CN=F3659F22AF/serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
Certificate serial:       03BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
Manifest number:          03B5
Signing time:             Sun 25 Oct 2026 04:07:57 +0000
Manifest this update:     Sun 25 Oct 2026 04:07:56 +0000
Manifest next update:     Tue 27 Oct 2026 04:07:56 +0000
Files and hashes:         1: VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl (hash: oPxK5xoJJuhFUWqdRsEyhhnjGnN3D6XzI70/mrB0aVU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F22AF, serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
        Validity
            Not Before: Oct 25 04:07:56 2026 GMT
            Not After : Oct 27 04:07:56 2026 GMT
        Subject: CN=6add809c-9952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:01:0d:70:48:ef:2c:13:5a:39:8e:83:d1:f1:
                    d0:a7:25:d1:b1:26:6a:8d:f1:55:ec:b1:72:c3:47:
                    02:a7:07:0d:1c:e1:53:91:f2:d1:f6:db:2b:da:57:
                    f3:56:95:38:97:f8:ba:48:2d:da:7c:5a:9b:03:51:
                    47:dd:16:77:88:28:52:c9:6f:b4:a6:0a:54:6d:fd:
                    3a:61:dc:9d:4b:da:0a:10:b8:4a:bc:cc:09:a7:c5:
                    af:7d:58:9c:b2:05:87:47:14:02:c5:a3:5d:76:5e:
                    21:5d:da:fb:2b:ba:85:04:dc:84:a7:bc:83:5b:8e:
                    65:7d:4f:a9:06:41:c2:d5:64:0a:32:4b:1e:f5:bf:
                    6d:c2:99:84:58:9c:28:d3:6d:bd:5d:57:8b:49:67:
                    2f:0f:94:ee:e0:b8:db:af:d1:77:f9:3c:04:fc:13:
                    03:c2:de:91:0d:72:d1:ad:ac:ed:99:0f:93:f8:1e:
                    49:b1:d0:67:02:62:51:9e:b8:f9:1a:e5:ae:84:69:
                    07:f0:92:58:9d:66:b4:4a:bb:d1:4f:4e:a9:31:9b:
                    24:ac:62:ec:6d:01:1e:8c:86:f5:d1:cf:9a:0f:3c:
                    9a:cb:17:08:06:5a:38:38:90:e9:30:06:c1:f1:83:
                    48:78:39:42:c9:b8:33:85:4d:c7:3f:bb:ea:37:cf:
                    ae:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:10:62:1B:94:85:98:97:66:70:F2:29:C7:80:93:69:4E:7B:D6:5C
            X509v3 Authority Key Identifier:
                keyid:55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5e:85:09:ac:0e:ab:50:71:d8:12:41:59:09:df:4d:3a:d4:
         64:7e:dd:cc:63:43:57:87:c4:11:e9:df:89:54:70:59:aa:e7:
         68:3f:18:af:d4:54:da:13:fd:63:04:82:31:03:bb:ed:02:77:
         a3:86:27:64:e5:45:d7:36:14:c5:9c:30:92:28:89:88:e5:e0:
         aa:95:ae:10:8c:a2:1a:09:26:e2:42:a5:f4:ed:8f:2d:ff:e5:
         20:d7:bf:3d:25:ed:3c:df:07:b6:77:07:26:18:b9:46:a1:96:
         e3:c7:12:0c:bb:96:e8:ed:1d:93:6d:33:2a:16:24:47:36:a1:
         aa:19:07:06:3c:f5:9f:c5:8a:3a:21:ef:c3:89:0a:f2:47:2f:
         c5:9f:8b:97:04:e4:5c:8f:c0:09:57:73:62:64:21:6a:7c:02:
         52:51:30:ae:aa:bb:ac:bb:7a:22:ed:bd:c6:22:fb:e9:b8:7f:
         55:2a:6f:92:ab:d0:3d:4d:28:0f:59:29:29:87:01:b6:80:fc:
         a0:c5:4f:b5:6a:27:38:8e:9e:86:c9:e5:4e:1a:c6:06:11:08:
         8d:d3:e7:3e:84:c8:39:0b:ed:09:5e:2f:3d:c3:d7:e7:7a:85:
         28:49:2e:29:47:2b:d6:f6:5e:7d:82:65:93:15:10:db:fc:58:
         0c:a2:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:35:14 2026 by rpki-client