Error: rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
File:                     LN9YDjdnVbH4xogIQhJt1j3XTuc.mft (raw, json)
Hash identifier:          StXK9CYn8Ric47m5oqX4y57VYioGn2DgK/iRLrKpvQo=
Subject key identifier:   3E:28:C7:C2:FD:BF:82:12:3E:5A:74:8A:46:02:45:B1:40:03:2B:3B
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       0932
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
Manifest number:          0920
Signing time:             Mon 21 Sep 2026 01:52:45 +0000
Manifest this update:     Mon 21 Sep 2026 01:52:45 +0000
Manifest next update:     Wed 23 Sep 2026 01:52:45 +0000
Files and hashes:         1: LN9YDjdnVbH4xogIQhJt1j3XTuc.crl (hash: mR8nTJsdMG2sdUm62KSisKtz+4IVd8suhsNq+5B2SFw=)
                          2: 273CF154890F11EEAE5F7C364AD9E6FC.roa (hash: 6Zyoo60Pz+GnvK6rZB7VRukfQvQPSJF7/Al01Yw7AE8=)
                          3: C01FDA868C9911F18503E1DCCE1D38B0.roa (hash: kQtLsW7D9ICZ09fDE52xx9CZ7qcYPPsGFlQk50LU9yY=)
                          4: 05C23B208C9911F18B7848D8CE1D38B0.roa (hash: UBe/FinZwlLfNd1I4Bm1Xqdo/RNekj20lzTVHaiEBsk=)
                          5: 718E7D0C86B111F19930B2BDCE1D38B0.roa (hash: nBpUPuhm+PdhHS8iH4gpkrl2A2IJbJ1GitlJ8/Nq+0o=)
                          6: EF27689C86A611F18F5DC2FDCE1D38B0.roa (hash: hoi8TgbPp6u8/kTs9rFoka8RNFl9NxDAJ/DZIKG0zYc=)
                          7: 9799CAE68C9811F1BA0F14D6CE1D38B0.roa (hash: TCzfsB8L6naHhIMK6FDSVqSB8/tnKisssUeS0Sja/pM=)
                          8: 66B4A4A48C9911F1BCD0C4DACE1D38B0.roa (hash: 1ybCzxMXlxjH4FAEOI1Qgd0351KDCVr4YxHCk74ZKG4=)
                          9: B65B4AFA86B111F1B35420BECE1D38B0.roa (hash: kmExG71hjRrSnQLc9Za9djJ4yDfiRKmuCxsWcutkbII=)
                          10: 2E8F703A8C9A11F19CA16FDFCE1D38B0.roa (hash: 0LNHFPvTTVmKRurY7oAMszXzqgYdND56d0u2tu3Tva4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 01:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2354 (0x932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Sep 21 01:52:45 2026 GMT
            Not After : Sep 23 01:52:45 2026 GMT
        Subject: CN=6ab08ded-e862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:70:32:6b:66:f3:30:ac:b0:cd:eb:ca:a6:
                    e1:4c:7b:6f:ac:5f:65:cc:42:d1:25:dc:10:1d:9f:
                    37:15:15:54:bb:84:bc:97:25:3f:7d:49:0b:09:c1:
                    ae:f2:7e:79:c4:ea:40:b2:80:01:b1:54:27:f3:06:
                    e6:f4:e2:a2:e1:0b:25:6f:03:6e:80:fe:58:3e:2b:
                    61:4d:8c:de:8d:12:57:58:ed:33:f7:b7:b2:8e:96:
                    17:81:06:e6:49:24:aa:4c:7b:0d:f6:5b:ba:2f:29:
                    05:1e:fd:67:1e:69:8b:22:c1:0b:38:cc:91:c2:4c:
                    ca:bb:3d:bd:fb:e0:9b:1a:8f:e3:98:3f:ec:d0:00:
                    8b:e0:41:8b:69:01:c2:00:bc:35:48:7c:01:5c:2f:
                    5b:0b:38:f7:f7:9a:54:17:ba:f4:56:61:82:9b:f5:
                    dd:84:76:55:fb:2b:88:35:65:54:a3:57:4b:84:e0:
                    c4:bf:f1:cc:5a:0e:7c:84:33:e7:b9:de:35:00:46:
                    0f:35:ac:61:c8:6e:be:46:17:f6:ae:cc:55:ae:62:
                    ce:dd:ec:c8:80:a8:97:f5:18:8a:01:4e:0f:76:1c:
                    d1:08:26:dc:95:76:84:ba:6d:6a:e7:57:ac:8c:f5:
                    74:9c:e5:72:d6:e3:22:84:bd:a8:0e:e6:6f:39:61:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:28:C7:C2:FD:BF:82:12:3E:5A:74:8A:46:02:45:B1:40:03:2B:3B
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ee:9e:69:a5:01:7f:62:39:1a:dc:be:c4:c7:18:e7:80:dc:
         75:b0:f2:1b:03:9a:27:bd:48:ce:36:fb:28:cc:f3:18:9f:01:
         13:ec:44:c2:f3:eb:59:bd:90:04:02:bf:41:f6:62:c7:d5:44:
         f9:67:05:2f:80:95:4b:b2:77:6c:fc:99:dc:6d:c4:1d:98:25:
         66:ca:02:06:b1:eb:23:22:31:e3:bc:0f:88:86:4c:b5:fb:65:
         b1:10:20:41:70:43:71:1e:c8:c9:80:4d:5f:ff:36:47:e0:0e:
         56:82:e2:3a:78:ef:f9:6e:d4:2c:b2:d7:c1:bd:bd:d5:2c:55:
         7a:b5:b3:ef:c7:3a:b7:c3:4e:b2:57:bf:98:9c:03:ad:70:ee:
         34:b8:59:87:17:11:5b:48:f9:ce:b2:30:d0:8e:df:9c:8a:c4:
         0d:51:98:d4:62:5b:21:fb:14:21:26:e5:f3:af:07:f5:dd:1a:
         e2:4b:97:46:00:15:c4:e7:7d:c0:9d:86:f1:3d:a9:8f:c8:6d:
         02:f9:cc:b2:f5:a6:6a:d7:6a:c0:81:59:4b:e5:18:1b:b5:76:
         e6:e9:e4:db:46:41:0f:52:89:91:65:44:1e:91:36:06:e6:aa:
         05:e0:35:dd:de:cb:62:38:2f:e7:07:a8:12:a8:89:13:d8:4d:
         ac:aa:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:57:30 2026 by rpki-client