Error: rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft
File:                     A9jip0pNgGi_ve4AchbBAHrH_dk.mft (raw, json)
Hash identifier:          QW2NxhZf6IiPP81YuIRqpbts98jm2NVLjR/CMR5oO/8=
Subject key identifier:   31:CF:3F:F0:6D:8D:69:9D:2A:D6:D3:C9:7B:11:E1:62:9A:E1:C3:03
Authority key identifier: 03:D8:E2:A7:4A:4D:80:68:BF:BD:EE:00:72:16:C1:00:7A:C7:FD:D9
Certificate issuer:       /CN=F363F4B9AF/serialNumber=03D8E2A74A4D8068BFBDEE007216C1007AC7FDD9
Certificate serial:       083D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A9jip0pNgGi_ve4AchbBAHrH_dk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft
Manifest number:          083A
Signing time:             Thu 24 Sep 2026 02:00:38 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:37 +0000
Manifest next update:     Sat 26 Sep 2026 02:00:37 +0000
Files and hashes:         1: A9jip0pNgGi_ve4AchbBAHrH_dk.crl (hash: jpXxZ19tfwZN2V6dtiZrLgBUz0S3JEnQ6pjG6X/C9ZA=)
                          2: 5E151552684D11EBB3B0CD73F8AEA228.roa (hash: flUQEXj5snMlxFkZcm/MM/z0tsowYDIY7U3XPo+QYGM=)
                          3: 784F4370684D11EB8D87FC73F8AEA228.roa (hash: rzwUo7lFrqBD5qe5XRR7NA2ACx7BQyZHFJN6623sEQI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A9jip0pNgGi_ve4AchbBAHrH_dk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2109 (0x83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363F4B9AF, serialNumber=03D8E2A74A4D8068BFBDEE007216C1007AC7FDD9
        Validity
            Not Before: Sep 24 02:00:37 2026 GMT
            Not After : Sep 26 02:00:37 2026 GMT
        Subject: CN=6ab48446-c809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:3b:2f:ce:21:bb:96:d6:4c:09:98:e3:82:
                    d5:12:e2:ef:c3:31:c8:10:be:5c:e7:65:ae:30:6b:
                    ba:f4:34:42:7d:7d:b3:36:f9:4b:5c:2a:0d:98:c6:
                    8b:5d:4b:77:d1:90:af:12:5e:4c:d2:6e:94:21:06:
                    47:72:2d:9b:e3:9e:d3:eb:2d:47:02:d4:3e:3e:23:
                    a8:8b:38:1f:c2:c6:e9:51:7e:70:4f:62:4e:b0:63:
                    75:00:c1:1f:ed:9b:5b:e7:8a:31:ca:a6:9e:8e:81:
                    91:52:be:2a:d4:63:5e:8c:6d:ee:bf:26:05:89:d2:
                    88:1c:4f:a5:83:aa:2f:c4:d6:f0:3e:32:b5:6f:33:
                    30:1f:8a:e6:2a:28:f6:68:4f:9d:64:f7:2d:b8:90:
                    f0:8a:1e:ad:aa:79:63:45:84:0c:4a:1c:2b:2b:17:
                    84:19:86:1e:fa:8c:10:d2:7a:d0:09:35:21:5c:29:
                    fc:ed:a1:06:4e:24:86:d1:27:25:67:62:68:fc:75:
                    cc:93:67:e4:2c:01:fe:01:cb:4b:13:19:5c:3c:19:
                    ae:13:85:47:d1:cb:13:32:3c:9b:d3:c8:96:74:2a:
                    5a:0a:81:3b:fa:ce:6a:a6:0e:db:19:4b:55:fb:d8:
                    0d:5c:79:ea:a5:1d:72:ec:e0:64:f1:f6:7b:9b:23:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:3F:F0:6D:8D:69:9D:2A:D6:D3:C9:7B:11:E1:62:9A:E1:C3:03
            X509v3 Authority Key Identifier:
                keyid:03:D8:E2:A7:4A:4D:80:68:BF:BD:EE:00:72:16:C1:00:7A:C7:FD:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A9jip0pNgGi_ve4AchbBAHrH_dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:d5:7d:e6:a7:36:04:f8:7e:3f:8e:35:e3:ed:90:b4:b1:
         63:d3:ee:c4:58:fd:4f:ef:33:ad:5e:51:7f:e3:2a:91:c2:57:
         a4:66:7f:95:76:26:18:3e:a0:77:bf:4b:ba:fb:8d:55:51:25:
         fa:bb:79:b3:82:8f:cc:6a:4d:34:8a:bc:b7:d5:44:11:91:ca:
         dd:09:0a:b5:5c:b5:c5:18:ec:20:0b:0a:08:33:c4:0b:92:b0:
         4f:17:62:a3:71:3e:03:da:19:c1:1a:14:06:4c:29:18:26:8e:
         80:ad:e6:06:dc:61:42:c0:49:a0:71:a2:e5:4c:4f:03:e7:ec:
         b9:91:a2:7a:14:e8:6c:af:ae:75:cd:21:31:ab:3d:e0:83:3b:
         bd:a6:f9:db:6d:24:bb:a6:0d:18:9a:f4:b7:4b:63:af:f5:e4:
         b2:10:52:dd:6e:1c:2d:d9:e6:f7:5e:ba:9a:c9:d3:48:62:cd:
         33:40:0e:d1:fb:2a:1f:cf:39:ce:94:78:0b:a7:6d:ab:ba:c7:
         3e:37:93:8f:1c:13:5b:b5:63:e7:8d:20:da:4d:a1:b2:20:83:
         cf:27:25:84:72:00:e1:02:12:27:d1:ea:da:5e:e4:29:e3:f6:
         44:d9:4a:c9:a7:2a:cd:99:cf:f7:4c:a3:3c:7f:52:e2:ef:28:
         4f:48:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:58:18 2026 by rpki-client