Error: rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
File:                     CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft (raw, json)
Hash identifier:          zUrivCp59yEsboKgIosF8r3kdJvET7ofV3fbQKtusCE=
Subject key identifier:   D6:8B:99:84:96:50:40:35:71:97:7E:9E:BC:FC:91:33:7B:BF:C9:3B
Authority key identifier: 09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8
Certificate issuer:       /CN=F363763AAF/serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
Certificate serial:       05C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
Manifest number:          05C4
Signing time:             Tue 22 Sep 2026 03:03:58 +0000
Manifest this update:     Tue 22 Sep 2026 03:03:57 +0000
Manifest next update:     Thu 24 Sep 2026 03:03:57 +0000
Files and hashes:         1: CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl (hash: vcC6YrlByPfP8dhiUTOSsWCHmaxCI1tV9zYMU1x10q4=)
                          2: 0C17C5923C6511F0BEB31A91DAE4EC9C.roa (hash: Dk3egDXLcZWiCKWFaQebnI7KBH7G+aSO1771Cj6q3cY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363763AAF, serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
        Validity
            Not Before: Sep 22 03:03:57 2026 GMT
            Not After : Sep 24 03:03:57 2026 GMT
        Subject: CN=6ab1f01e-9df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:94:d2:0d:79:a2:da:52:f0:c6:b2:bf:1e:
                    27:54:26:41:e6:67:0a:a4:24:20:33:ff:d0:94:56:
                    8d:bf:8e:e5:e6:42:1b:ff:a6:f1:cc:ff:2d:14:ab:
                    22:79:ba:9e:87:45:a6:cd:f9:ee:d7:da:91:ef:86:
                    da:49:f3:10:20:66:2d:82:77:f5:37:87:92:f6:53:
                    42:68:22:23:ec:74:9c:b7:cb:c9:de:4e:76:ab:da:
                    d5:24:0c:75:66:38:78:67:bd:00:80:49:be:05:96:
                    05:4d:aa:ec:74:8c:db:27:61:27:5f:66:00:eb:c1:
                    f8:68:10:3c:4e:cf:19:ec:6b:4f:ce:45:3e:8e:c9:
                    90:d5:f6:82:d7:a6:b8:b9:eb:64:04:ba:80:86:c8:
                    b5:94:00:97:47:3c:b1:90:75:53:c4:5d:3c:ee:2d:
                    55:85:07:02:b5:dd:54:62:8d:fc:32:d6:f1:83:d3:
                    53:b8:a4:ac:04:f5:ff:fe:b8:81:f0:14:5e:d4:fe:
                    33:ae:37:05:d1:5c:b9:b4:84:f2:d4:74:9d:46:87:
                    f0:53:70:ef:cc:20:d3:8d:64:c6:b2:ca:78:b7:d8:
                    14:34:ad:ae:8f:db:4e:9e:d9:e2:bc:e9:82:35:f2:
                    d1:1b:35:45:89:cd:53:35:0c:8f:3d:8a:b5:08:c1:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8B:99:84:96:50:40:35:71:97:7E:9E:BC:FC:91:33:7B:BF:C9:3B
            X509v3 Authority Key Identifier:
                keyid:09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:f5:d8:c2:d7:c1:6d:3f:1b:73:20:9a:17:47:78:3c:c2:
         03:57:d3:6f:a3:d0:32:28:f1:f9:9f:5e:e8:17:2e:49:b3:c0:
         dc:70:89:6d:1c:f6:0c:c0:86:42:97:d7:31:94:0a:16:52:74:
         2b:63:6c:2c:36:9d:2a:99:28:b9:b2:91:0a:37:6a:79:b4:1f:
         20:13:84:27:9c:b9:40:ef:95:de:c3:43:ce:e1:59:17:8a:ed:
         16:f8:a0:49:92:df:ad:76:cc:ae:50:3b:fe:55:9f:7d:a5:7c:
         e9:e1:2d:e8:d1:18:d9:24:63:79:45:3e:2f:2a:0b:75:b7:ed:
         2b:b9:03:11:16:d3:bf:a9:40:03:fc:2e:24:5f:f2:5f:e1:60:
         e2:5a:7e:b6:ab:f4:e4:9c:0f:32:40:07:98:ea:56:9d:0c:0b:
         d0:63:8e:68:af:f0:8e:00:4f:45:f6:a3:ac:ee:f3:5d:f5:91:
         44:6c:f8:8d:b8:c4:56:c3:78:2e:8e:da:18:81:f3:44:81:20:
         bb:2c:ad:d2:88:f7:2d:47:2c:28:61:7c:10:1b:e6:3c:74:1d:
         a2:fb:c3:de:57:2b:ed:52:28:16:13:99:f9:f3:d1:33:56:0e:
         c6:89:6b:28:cd:ba:65:41:0d:a5:21:22:ea:fd:a3:4a:34:9a:
         c1:d8:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:07:22 2026 by rpki-client