Error: rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
File:                     FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft (raw, json)
Hash identifier:          N6C/oqMECx21ffGREJ3odg3LM6TGdq67cBhuVGJfa7o=
Subject key identifier:   3D:6C:BC:81:8A:01:32:D9:D8:61:A4:F2:DF:3D:DE:ED:EB:30:18:8B
Authority key identifier: 14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4
Certificate issuer:       /CN=F3660137AF/serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
Certificate serial:       0707
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
Manifest number:          0702
Signing time:             Mon 21 Sep 2026 02:32:16 +0000
Manifest this update:     Mon 21 Sep 2026 02:32:15 +0000
Manifest next update:     Wed 23 Sep 2026 02:32:15 +0000
Files and hashes:         1: FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl (hash: A7zoyvhziIxpx55g/TNwnYc7I9SC9TTdn7UNZ4ytHuU=)
                          2: DE32767C26A111F18A03048CDAE4EC9C.roa (hash: cFgU0rkBiooP5t2op0uOagxyM9Y5m1ekTnNkc5voo+0=)
                          3: A7F6C2FC26A111F196E5B58BDAE4EC9C.roa (hash: frbYM1Tte3sRuJ9vX0o75c1wT8t0v+HRSy03Ck77qzc=)
                          4: B0FF8E2C1D2A11F1A3E757D7DAE4EC9C.roa (hash: cwfqkhpaYyYTN1h+3fD599ZRYz2Y5rul4U0ip6/EHOQ=)
                          5: F7CDB4281D2A11F1904580D9DAE4EC9C.roa (hash: XzMEwwkNS5xxWk1ir2zt5zwbDTlcZzrwuFW8GYrB1JY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660137AF, serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
        Validity
            Not Before: Sep 21 02:32:15 2026 GMT
            Not After : Sep 23 02:32:15 2026 GMT
        Subject: CN=6ab09730-19aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:ba:63:96:a2:a0:04:6d:f2:83:83:8c:17:
                    e4:9a:49:a1:9d:f0:45:de:6c:bc:c6:09:63:c2:83:
                    ac:1f:a9:ef:d3:72:17:f2:8d:a0:e5:99:4d:11:bb:
                    2c:75:1c:e7:af:39:01:d2:f4:d2:1c:dc:4b:f7:7e:
                    3a:46:6c:b3:09:08:59:16:ca:5c:4b:ad:71:fa:2f:
                    4e:9c:b2:cf:ab:2c:fb:6a:80:65:a6:bb:30:b8:bd:
                    45:1b:2b:2f:a7:56:04:2d:0d:8e:ef:4b:bb:78:f3:
                    a2:c9:2a:a1:78:76:cb:88:1a:ce:06:df:3a:01:7a:
                    fd:69:c3:87:36:b4:8e:a9:92:d3:b8:66:85:56:11:
                    52:f2:37:66:30:6e:f6:d7:f3:33:65:13:98:ce:77:
                    6d:2a:16:92:a5:5a:60:34:c2:75:b7:fe:38:7b:31:
                    5b:a8:d3:d0:8d:4f:d4:05:0d:90:6a:fc:87:6d:fc:
                    4c:c9:c8:a9:d5:bc:9d:6a:35:40:05:3c:0d:f6:c9:
                    91:52:4c:95:f9:ef:2f:0f:7f:17:ec:f6:c6:7c:09:
                    92:f0:35:50:01:d3:d9:c2:13:95:c4:e4:3c:fd:e0:
                    98:b9:ba:2f:8a:2a:e8:09:61:6c:f7:5a:02:1e:fa:
                    83:04:a2:62:51:04:5e:b9:c0:15:5d:59:6b:63:d1:
                    3b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6C:BC:81:8A:01:32:D9:D8:61:A4:F2:DF:3D:DE:ED:EB:30:18:8B
            X509v3 Authority Key Identifier:
                keyid:14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:92:f0:40:d5:f3:61:36:62:73:38:b6:a2:14:b2:97:60:d2:
         c1:5b:fc:8b:d2:f0:99:0b:de:06:a5:72:3f:9b:32:4c:c3:57:
         06:6e:bd:5c:19:3e:d0:c4:5e:31:b8:37:11:87:e9:02:d1:b5:
         09:70:f4:0a:9e:96:f4:75:2f:63:76:56:90:50:a1:06:7a:58:
         5e:a8:90:6f:15:c2:40:b8:c6:da:ab:11:cc:35:c2:ec:e5:54:
         2b:42:e6:e7:52:99:19:49:6d:e6:b5:4b:68:f4:e1:93:0a:db:
         e9:e2:10:64:e7:d9:32:7a:48:13:8e:d1:cd:4f:28:ab:24:1f:
         6e:16:74:2c:e7:85:18:1b:6f:ff:27:7a:0f:b4:05:ff:40:68:
         17:1f:b7:af:64:85:9e:d8:60:34:e4:66:8f:a8:91:69:c9:d4:
         37:6c:5b:23:d1:02:34:8a:ae:80:0d:2d:29:58:61:73:63:9d:
         2e:22:b3:dc:a2:64:e0:2f:ef:1a:7c:e9:23:32:14:25:6c:f8:
         3e:57:30:08:45:ac:4c:af:fa:ea:a9:3e:71:67:95:25:ac:c9:
         0c:36:52:d9:35:62:36:92:94:59:8e:58:11:8d:47:a7:31:5e:
         14:59:4f:a0:c0:5d:bd:17:ac:ff:fe:ea:af:fd:08:89:6c:91:
         47:a3:b9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:05:17 2026 by rpki-client