Error: rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
File:                     Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft (raw, json)
Hash identifier:          gp+3dGY3ppPiWI9kNhUsDpvQ2vcTogkF68eXBvA7RSE=
Subject key identifier:   72:45:38:02:1E:54:FC:00:C4:DF:D6:B2:E4:52:79:A3:99:51:8F:0C
Authority key identifier: 5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
Certificate issuer:       /CN=F3664F7BAF/serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
Certificate serial:       60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
Manifest number:          5D
Signing time:             Sun 25 Oct 2026 05:47:14 +0000
Manifest this update:     Sun 25 Oct 2026 05:47:13 +0000
Manifest next update:     Tue 27 Oct 2026 05:47:13 +0000
Files and hashes:         1: Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl (hash: ZWJy67pBSlk9ao4bvhVEn6DmnE4ncopQDTTC8frKPEg=)
                          2: F26EC26A8A4E11F1B7AEDED7CE1D38B0.roa (hash: aCcxDmtX/tnLhZ6JcUFSofoUniwx3floStRDNlGRoHU=)
                          3: B9E595E08A4E11F18F6CB1D7CE1D38B0.roa (hash: B4ThLzrbIVO16jLTzmKePpz4F2ddN768weBvs+JXx/U=)
                          4: D71B62A28A4E11F1B606C7D7CE1D38B0.roa (hash: KR4X6gtcRk+5VuKUYUA4G1pQskL0suzWflfpye7zrSA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664F7BAF, serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
        Validity
            Not Before: Oct 25 05:47:13 2026 GMT
            Not After : Oct 27 05:47:13 2026 GMT
        Subject: CN=6add97e1-4c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:6b:dd:4e:35:1b:a1:e5:7f:2d:a6:28:f4:
                    c3:7e:a7:76:0b:bf:9f:3c:da:35:67:2c:dd:b5:73:
                    29:2d:f5:ed:b6:4d:d7:88:59:02:97:78:7f:ab:74:
                    8a:c2:60:86:8e:6e:8c:25:91:e1:bf:3f:67:7d:82:
                    86:ac:42:0f:1e:5b:ba:af:29:9c:53:00:39:01:cc:
                    15:fc:58:c9:08:1d:cd:8d:8c:e3:6b:71:64:81:94:
                    59:1c:4d:61:45:1a:dd:4d:7f:08:3b:89:bf:cb:29:
                    94:90:00:c0:5e:c2:19:13:7b:13:45:62:e4:7a:4a:
                    46:d4:99:df:b1:d4:2b:10:69:d6:be:1f:1d:f9:15:
                    22:78:e8:00:e3:7c:f2:0e:13:e8:11:ca:27:2d:25:
                    c0:77:77:fa:3e:c1:b5:8b:79:3d:5b:58:ef:16:28:
                    8c:af:2d:ad:5f:b5:80:c5:5a:4c:91:47:8b:50:cf:
                    46:4c:66:22:73:d1:d8:e6:c1:0c:52:54:fb:e6:a5:
                    1e:08:ac:99:ec:df:dc:af:4e:e6:76:4e:a4:93:1b:
                    bb:cd:7e:5a:dd:9c:ba:ac:a4:ce:28:be:bb:bc:6a:
                    5b:d6:d9:20:86:82:07:96:0f:3f:ba:0e:b9:05:7f:
                    9b:16:9c:3f:a5:e9:37:69:e8:96:e6:42:27:6c:81:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:45:38:02:1E:54:FC:00:C4:DF:D6:B2:E4:52:79:A3:99:51:8F:0C
            X509v3 Authority Key Identifier:
                keyid:5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:49:18:88:ae:2b:3c:7e:b5:32:6e:1a:53:ae:07:01:90:f6:
         77:68:b9:85:9f:33:4c:77:5b:fb:a5:65:db:36:de:3c:7e:bc:
         b0:7d:04:d0:28:f7:d2:a7:25:da:c4:68:77:70:1e:1e:bc:85:
         28:69:8d:db:c6:f2:cc:d3:64:a6:24:4c:9a:3a:58:7e:c3:d3:
         ff:ff:6f:11:93:43:8d:7d:6c:22:4f:1f:d1:5a:2e:81:f2:f8:
         99:79:c6:51:3c:97:75:c0:ae:b7:85:d4:12:f0:56:a3:38:c7:
         51:bc:db:e1:80:6a:c0:0b:41:f0:01:6f:d4:9c:d9:fd:da:59:
         8d:c5:ea:be:96:55:62:db:ba:32:5d:be:76:b0:88:e4:ea:73:
         9a:37:b3:a9:a4:5d:a1:d7:e4:dc:f9:e2:b9:7b:24:90:4d:a0:
         d5:80:7d:02:b3:ba:91:87:07:47:28:e0:f4:8f:5d:27:b5:13:
         73:3d:f2:bc:96:3c:76:b7:ef:43:75:63:bc:35:10:93:ca:fd:
         09:66:e8:fd:9d:aa:33:2f:f1:cc:89:d2:cd:f0:b2:8b:a5:a5:
         93:f5:e5:ae:1d:6a:e5:1e:74:8b:fd:8c:b0:03:ba:5a:1f:6e:
         93:be:11:82:c8:e9:de:d4:1e:4f:9d:de:b4:85:71:3c:69:b5:
         3d:10:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:54:23 2026 by rpki-client