Error: rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
File:                     5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft (raw, json)
Hash identifier:          4qaOTzUDzJQQbsZpxYPuFbamN4OwEPJeNgIPfMRv9Vo=
Subject key identifier:   6F:D0:88:2F:B6:65:62:A4:03:1E:B9:C5:F0:E8:8B:8B:F6:F6:82:1F
Authority key identifier: E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D
Certificate issuer:       /CN=F3691854AF/serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
Certificate serial:       0464
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
Manifest number:          0464
Signing time:             Tue 27 Oct 2026 03:45:36 +0000
Manifest this update:     Tue 27 Oct 2026 03:45:35 +0000
Manifest next update:     Thu 29 Oct 2026 03:45:35 +0000
Files and hashes:         1: 5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl (hash: W6e5gPPEO90LqtGVKyA40zSTlEg/1XZlUFEPj51yncM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 03:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AF, serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
        Validity
            Not Before: Oct 27 03:45:35 2026 GMT
            Not After : Oct 29 03:45:35 2026 GMT
        Subject: CN=6ae01e5f-2105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:a3:be:4e:2d:3a:6f:7f:ac:b3:2f:16:fa:
                    bd:6b:05:ae:07:24:57:f9:98:a2:66:1d:53:b2:98:
                    c2:81:c0:fc:91:36:c6:51:8c:0e:e3:9f:74:61:3c:
                    3f:6e:17:4f:c5:5d:d6:ae:59:4e:78:73:91:90:5a:
                    2c:00:25:a4:a7:a2:f4:f7:cd:e8:5a:f3:da:bc:62:
                    cf:6d:c2:46:71:b6:cd:e6:9a:ea:7d:4b:4c:7a:b1:
                    e9:61:ea:43:ee:fe:a3:59:aa:24:b7:74:f2:3c:69:
                    d0:f0:29:17:3c:c6:ba:e3:6b:6b:80:20:a8:8a:ed:
                    c7:ad:ea:70:c9:b6:83:2c:a3:5a:9f:52:ee:9b:fa:
                    7c:3c:c2:58:0e:7f:93:ff:ee:e8:ee:e4:54:ad:66:
                    df:49:c9:08:b9:ee:f3:33:f0:03:5b:56:5b:2c:28:
                    44:af:c9:be:6f:fb:9e:a6:c2:6c:68:eb:91:c9:a9:
                    ca:65:b6:3f:7d:8c:92:91:ce:17:ee:1c:a2:33:aa:
                    8b:a2:da:43:cc:77:ee:bf:06:43:6a:da:27:02:e7:
                    78:1b:20:63:bf:db:5f:c2:e8:74:b6:f4:8a:fa:65:
                    45:10:37:59:cc:3e:a7:75:d1:ed:38:85:58:39:7e:
                    3a:f1:70:69:4d:34:af:fc:7b:2c:67:ed:4e:5c:98:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D0:88:2F:B6:65:62:A4:03:1E:B9:C5:F0:E8:8B:8B:F6:F6:82:1F
            X509v3 Authority Key Identifier:
                keyid:E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2a:45:70:17:91:5a:f3:71:1a:bf:02:8a:65:fa:d8:16:69:
         2f:18:86:4f:fa:32:e8:38:5c:35:c5:93:95:49:97:c9:8f:dd:
         3e:68:c0:4d:bb:88:4d:9c:a2:76:c8:64:f6:31:74:6b:a0:c3:
         7b:9f:c5:df:84:d2:e4:3a:15:74:6d:87:85:87:21:ae:c4:08:
         21:fe:6d:ea:23:1a:1b:60:b2:a5:ea:1a:c4:e4:f0:7e:b9:6c:
         b3:b8:39:e1:6a:c6:e0:36:78:40:9d:69:fc:4d:2f:6f:68:c4:
         0d:1a:48:e1:59:bb:21:f3:06:7f:ad:44:82:38:f9:26:76:5e:
         a1:c0:ee:52:d3:b6:54:7b:e7:fb:29:a4:ac:6f:ff:75:77:37:
         0a:bc:10:cc:21:8c:1a:1a:ca:55:0b:d7:b3:43:61:58:d0:4a:
         34:bb:84:bc:28:37:14:1a:39:02:cd:47:d1:c5:2d:eb:ff:ef:
         1c:7f:e2:18:a6:8d:56:c4:58:07:28:55:29:1b:ad:17:48:3f:
         d9:82:88:9c:ec:23:4a:3b:09:4f:87:90:d7:f6:50:f9:8c:0f:
         61:35:8e:c6:cb:fb:a5:2c:95:20:bd:b1:c6:8c:a7:c6:3f:1f:
         13:13:e1:dd:5b:e2:dc:b7:f6:2b:6f:90:d9:a3:48:97:74:70:
         94:3c:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:51:41 2026 by rpki-client