Error: rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
File:                     8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft (raw, json)
Hash identifier:          0LFhxElThQVJ73H1NEBshSfjQiCeonxBCpnR8jWiYAE=
Subject key identifier:   55:86:A0:A6:25:33:55:B4:95:F4:5E:FE:AA:14:D4:24:2B:87:97:59
Authority key identifier: F1:DB:20:51:32:3D:BA:03:06:27:55:34:5D:84:37:6F:A6:E4:8A:6D
Certificate issuer:       /CN=F365E09BAF/serialNumber=F1DB2051323DBA03062755345D84376FA6E48A6D
Certificate serial:       1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
Manifest number:          1A
Signing time:             Sat 24 Oct 2026 06:01:27 +0000
Manifest this update:     Sat 24 Oct 2026 06:01:26 +0000
Manifest next update:     Mon 26 Oct 2026 06:01:26 +0000
Files and hashes:         1: 8dsgUTI9ugMGJ1U0XYQ3b6bkim0.crl (hash: cbKOLzvC9DTwCgRARHUZn8Ejv5n24wd5G1HncWuPgB0=)
                          2: 2A9A50EABFB611F1A8B8DCC4CE1D38B0.roa (hash: aPUPt84HHQ0VTMN+ecWBYGOhe1QdcPmcGtI1AN7s+0o=)
                          3: C71EF05CBFB511F1A5E716C4CE1D38B0.roa (hash: 2Enb3h8sPL3KeOyACfoGa8aoGm1VoiS0Tv/OamL1mjM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 06:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E09BAF, serialNumber=F1DB2051323DBA03062755345D84376FA6E48A6D
        Validity
            Not Before: Oct 24 06:01:26 2026 GMT
            Not After : Oct 26 06:01:26 2026 GMT
        Subject: CN=6adc49b7-e756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:3d:63:96:8f:aa:cd:5b:a1:08:47:cc:d3:
                    7a:a4:bc:c6:4d:f9:a8:e8:72:f9:79:bd:60:b3:46:
                    9f:09:89:d2:92:47:9c:50:fc:ba:e4:e2:97:a1:c8:
                    f7:6e:21:16:c2:ac:e6:86:d6:3c:09:88:44:3e:2b:
                    54:33:b0:95:fa:39:2f:50:d5:02:01:90:1f:90:fa:
                    25:8d:e0:a5:74:7d:7c:ca:ae:63:09:0a:61:94:9e:
                    47:d4:73:a2:24:7f:84:68:9f:70:ee:08:10:53:d8:
                    45:74:63:1b:83:db:c3:64:c1:d8:03:40:98:ce:d6:
                    9a:6e:03:c9:40:24:1d:54:f4:c8:95:9e:cc:b4:f3:
                    f3:83:08:5f:1d:ba:85:0f:69:f9:f4:4e:8f:98:bc:
                    c7:4f:de:a0:1b:a3:5b:fd:cf:05:2a:db:27:bd:ac:
                    01:f9:13:34:4c:09:e3:5c:03:8b:87:71:78:30:c9:
                    69:8a:24:6a:e3:37:e8:9c:67:8d:53:25:58:b5:0b:
                    30:6b:1f:f0:fd:4a:7a:88:ae:e1:a6:c7:18:8b:cf:
                    bb:c6:04:9a:87:0a:17:a2:aa:87:e6:15:1c:23:41:
                    03:65:ae:cf:fc:6e:db:ce:e4:7b:bb:30:e8:46:91:
                    ba:d7:98:1a:bb:e9:0b:90:fe:87:aa:5a:97:96:c2:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:86:A0:A6:25:33:55:B4:95:F4:5E:FE:AA:14:D4:24:2B:87:97:59
            X509v3 Authority Key Identifier:
                keyid:F1:DB:20:51:32:3D:BA:03:06:27:55:34:5D:84:37:6F:A6:E4:8A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:75:9a:2a:e2:f7:46:d5:a8:57:af:da:25:49:0e:c5:2a:42:
         bd:b2:72:4b:d3:05:5b:a3:45:6c:e5:8e:97:ce:27:58:d8:b2:
         b5:f9:e6:61:71:a0:2d:10:60:b1:c4:01:5f:ae:8b:50:41:39:
         d2:6e:83:da:d0:25:da:2c:49:ad:70:bc:9b:f2:bf:45:7c:fe:
         b7:00:e0:42:24:f9:d0:10:09:ed:2d:18:16:a8:91:b4:81:29:
         5f:fc:23:24:c6:20:d3:ee:5c:39:b0:2f:1f:c9:e4:49:d4:96:
         24:5e:cf:8c:80:f6:f4:3c:c3:2b:9b:3b:ab:44:bf:d6:f9:dc:
         38:4e:ba:ba:ab:d8:06:49:bf:ee:dc:a0:8f:1e:d9:1c:92:c2:
         2f:22:33:1d:66:31:1b:af:e9:bc:d1:c0:7a:81:65:2f:35:26:
         55:16:0b:f4:a1:c9:41:84:91:ae:44:7f:80:4b:87:96:5b:a1:
         e7:64:76:80:e7:d0:54:30:30:c4:16:dd:12:01:c6:6a:aa:cd:
         62:19:c5:ba:a2:ce:9a:35:2a:c1:c2:5e:5c:1a:fa:44:ad:94:
         ac:bb:cd:a9:42:05:1c:39:b2:62:6e:67:0c:3f:d7:4c:fa:14:
         fd:88:09:ff:ed:64:d0:9f:43:41:5a:97:33:fb:4d:94:22:3b:
         f7:97:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:43 2026 by rpki-client