Error: rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
File:                     E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft (raw, json)
Hash identifier:          sQYcHAF9RmUbzYE8idkoPfNMSn16o4LchczJHiha/dM=
Subject key identifier:   59:F1:81:B6:F4:53:99:69:00:AC:82:1D:9D:14:F9:5A:A3:55:5B:83
Authority key identifier: 13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD
Certificate issuer:       /CN=F3663C93AF/serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
Certificate serial:       040C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
Manifest number:          0404
Signing time:             Mon 12 Oct 2026 03:56:08 +0000
Manifest this update:     Mon 12 Oct 2026 03:56:07 +0000
Manifest next update:     Wed 14 Oct 2026 03:56:07 +0000
Files and hashes:         1: E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl (hash: MFqWyCM5eXCVOD+OfR0IY0TkGyBTD9YAUQdLKDLRQTA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 03:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663C93AF, serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
        Validity
            Not Before: Oct 12 03:56:07 2026 GMT
            Not After : Oct 14 03:56:07 2026 GMT
        Subject: CN=6acc5a57-9728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:32:26:b4:41:19:3b:a2:d1:17:6e:5a:ce:3b:
                    1b:c4:61:c3:ec:21:a4:94:be:ed:e8:1a:5b:f4:ab:
                    89:fe:2e:da:5a:a0:b5:2d:b6:71:23:77:3d:fd:c4:
                    42:4a:e4:73:29:59:08:15:47:3f:96:14:fd:f4:57:
                    3d:2b:9f:ae:ce:fd:cf:d7:94:6c:00:ff:e0:fd:b5:
                    f3:f7:3c:34:0f:6b:13:a1:c4:0f:fa:1e:cf:b9:60:
                    48:02:5d:04:dd:e5:fe:16:51:56:71:b2:b4:bc:17:
                    cf:bf:67:ec:27:62:7d:cf:c3:d7:5d:f6:9d:38:04:
                    46:c6:75:7b:01:44:12:e3:e3:e3:43:6c:f9:c9:12:
                    b9:20:38:7f:d2:89:9c:19:b1:ab:0d:1b:3c:4d:d1:
                    69:18:a3:00:13:4c:d1:81:0f:e3:76:04:72:e9:6d:
                    45:4e:eb:03:af:82:9a:9d:b7:b6:0e:b9:99:5e:69:
                    07:27:05:30:7a:97:63:dc:a6:19:62:ec:13:35:d2:
                    13:34:76:26:d5:0b:2c:b6:77:3a:fb:c7:6d:99:af:
                    34:1f:d9:8f:0b:c5:a2:b3:55:b2:a8:52:20:c6:5d:
                    47:9a:e3:d4:39:d0:3b:0d:b0:0a:fb:a9:be:e8:97:
                    26:c3:73:1b:dc:b1:f4:20:7f:68:47:54:7a:d0:74:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F1:81:B6:F4:53:99:69:00:AC:82:1D:9D:14:F9:5A:A3:55:5B:83
            X509v3 Authority Key Identifier:
                keyid:13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:2e:79:4b:58:7b:65:9b:9c:1c:12:80:44:f2:12:70:96:
         89:02:d7:d8:86:ac:30:36:aa:9a:4c:69:3f:05:28:6c:9f:4e:
         6e:97:8c:d0:e5:e7:8d:80:1b:5e:c3:45:38:c6:56:90:d1:e7:
         af:bf:79:b3:64:3c:f2:d0:60:29:51:c5:ba:42:35:65:f4:6e:
         97:1e:85:9b:ca:04:e4:c3:a6:e4:4e:91:bb:c7:21:7f:34:9c:
         52:64:45:9b:2b:07:2c:0d:66:1b:5d:e5:dc:7c:39:1b:7e:c2:
         af:a6:aa:19:4e:81:67:40:1c:9a:2c:14:bf:ba:a1:9a:8c:00:
         25:74:d6:65:0a:a8:c8:20:be:1a:fc:14:dc:1e:ce:6c:d9:42:
         e5:fa:a0:6b:2d:c7:ea:f4:96:02:33:e6:f3:99:30:4f:9d:60:
         93:11:b4:9b:82:f9:d9:34:2f:0e:41:c1:5b:32:5f:40:ef:8b:
         e6:ce:d5:fe:76:2a:b6:67:bf:d1:61:37:0b:b5:59:68:b6:14:
         6f:d2:9c:5e:ef:35:ac:8a:7b:33:13:44:a5:39:c3:3e:a9:9e:
         f0:0f:eb:a5:53:13:da:0c:bb:90:97:bb:dd:9a:20:e7:8c:18:
         6d:e6:ee:8d:1a:ce:53:eb:fa:94:0e:71:a8:62:b9:6c:9f:da:
         94:2e:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:25:17 2026 by rpki-client