Error: rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft
File:                     Jm1JTcM12iFKT7D2ephR7J4wu2s.mft (raw, json)
Hash identifier:          njUaFai4ZgvLAr5hq1omiCFkWW1sU07Y4sAsFpk7PmA=
Subject key identifier:   E7:27:09:3D:A1:4B:9B:0D:C9:74:AB:F7:88:C7:AF:73:D6:2D:D0:80
Authority key identifier: 26:6D:49:4D:C3:35:DA:21:4A:4F:B0:F6:7A:98:51:EC:9E:30:BB:6B
Certificate issuer:       /CN=F363A203AF/serialNumber=266D494DC335DA214A4FB0F67A9851EC9E30BB6B
Certificate serial:       DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft
Manifest number:          DA
Signing time:             Wed 23 Sep 2026 05:28:23 +0000
Manifest this update:     Wed 23 Sep 2026 05:28:22 +0000
Manifest next update:     Fri 25 Sep 2026 05:28:22 +0000
Files and hashes:         1: Jm1JTcM12iFKT7D2ephR7J4wu2s.crl (hash: CMZcpxFQIAi5k9URFhUQiYs+3NfiMnHQ4Myt6pyAqs4=)
                          2: C20CD5EA0F3C11F18C19D2B7DAE4EC9C.roa (hash: 9DL2whMS7ZI7tnV/tidUr5/DmnfTdqpW1ue5JaKqkBw=)
                          3: FD7685AE0F3C11F1AE437FBBDAE4EC9C.roa (hash: DsgvYl/9xFquoIAVZuTIGhxVayNA81ChOAyEAjkTsiQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A203AF, serialNumber=266D494DC335DA214A4FB0F67A9851EC9E30BB6B
        Validity
            Not Before: Sep 23 05:28:22 2026 GMT
            Not After : Sep 25 05:28:22 2026 GMT
        Subject: CN=6ab36377-e2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:7d:da:07:86:a0:af:ba:82:ce:8e:d3:49:
                    fc:d7:b7:74:39:df:4f:4a:b4:8a:7e:9f:47:bf:57:
                    68:0f:7e:6a:26:07:31:23:81:81:70:6a:c8:0f:62:
                    89:99:fb:bc:d3:e1:f9:3f:58:76:6d:2c:f1:9e:1b:
                    e6:f2:f4:09:10:a3:aa:e6:2f:0d:37:91:69:47:18:
                    87:4a:80:cb:5f:b6:1a:5f:b9:a2:ef:38:fd:95:04:
                    e8:59:ab:a8:60:80:ea:b1:30:78:21:6c:98:c0:69:
                    7b:df:e6:11:a6:66:1e:8c:4a:41:2c:16:70:5b:ba:
                    59:88:ca:85:b3:47:4d:10:1a:10:5d:3e:8a:77:9f:
                    e0:61:67:b4:10:9e:1c:57:ba:8e:0b:a0:1c:f1:9e:
                    2c:b8:8e:e5:52:51:ab:cc:89:40:fc:cc:ca:11:76:
                    44:c3:e3:e4:25:50:fd:20:aa:9d:fb:96:49:fb:fa:
                    07:9f:b0:7f:24:bf:17:10:f5:11:6a:c2:48:5d:f6:
                    b4:95:35:13:80:23:cb:c6:48:09:42:bc:d8:dd:73:
                    94:ac:a3:e9:13:a3:d8:e6:d2:3b:ac:51:82:08:4c:
                    c6:7a:b2:cb:23:8b:62:45:8b:68:75:09:ad:48:c1:
                    c6:f2:85:6c:bb:ca:48:92:64:ee:d9:60:56:48:06:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:27:09:3D:A1:4B:9B:0D:C9:74:AB:F7:88:C7:AF:73:D6:2D:D0:80
            X509v3 Authority Key Identifier:
                keyid:26:6D:49:4D:C3:35:DA:21:4A:4F:B0:F6:7A:98:51:EC:9E:30:BB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:57:54:21:c8:6f:89:18:f0:12:91:54:a1:91:57:74:84:4f:
         64:55:3e:00:c1:63:d6:5d:ea:33:41:6c:a3:26:f8:c4:f4:88:
         96:61:29:47:d3:79:56:a7:75:08:6e:04:f5:1d:12:80:8d:74:
         59:b0:c0:d5:ba:db:fb:1c:2b:40:64:2a:bb:c1:a0:32:86:c1:
         0e:a6:bd:0a:63:65:b5:6d:9a:5a:5e:09:d2:21:42:44:13:e9:
         b9:88:d3:26:78:3c:34:a6:b0:a0:00:f1:18:2b:6b:b8:bc:6b:
         85:c0:1c:97:5e:eb:53:00:30:7e:e6:33:b8:ca:fc:4d:ae:b9:
         48:f3:bf:4f:aa:64:ad:8d:e9:22:9d:a2:e0:8e:78:57:b7:23:
         cf:16:1a:7f:63:be:d1:73:6d:d3:e0:43:a6:5b:53:83:a2:7f:
         b9:38:e9:6e:53:3f:2d:dc:a1:b9:82:2a:82:ae:ca:80:9c:fe:
         64:f8:93:56:c1:7e:5a:9d:4d:14:d5:5f:f9:f1:11:43:bb:18:
         7a:eb:58:8a:a6:4d:31:6d:33:b5:fe:21:a5:df:25:65:76:1b:
         5f:6e:59:bd:b4:b3:73:7a:10:56:39:1a:14:62:a1:b0:03:f3:
         50:72:39:f0:59:9e:37:18:ae:72:9e:b7:ba:3d:cb:c7:d2:07:
         f9:0b:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:38:25 2026 by rpki-client