Error: rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
File:                     fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft (raw, json)
Hash identifier:          f/aHvKV3uCF5K/XnZZPlo9NajxBQqiM5cBkjBWL8sEA=
Subject key identifier:   18:AE:20:FB:94:60:0B:D3:84:F1:72:CD:F9:6A:D2:33:76:03:79:A0
Authority key identifier: 7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99
Certificate issuer:       /CN=F3670C40AF/serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
Certificate serial:       0AAE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
Manifest number:          0AAD
Signing time:             Tue 22 Sep 2026 01:25:50 +0000
Manifest this update:     Tue 22 Sep 2026 01:25:49 +0000
Manifest next update:     Thu 24 Sep 2026 01:25:49 +0000
Files and hashes:         1: fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl (hash: kJKnBVkoRvnNTe1kkc4u5ipJBB+Sv/4fOyFku8BVpUI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2734 (0xaae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AF, serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
        Validity
            Not Before: Sep 22 01:25:49 2026 GMT
            Not After : Sep 24 01:25:49 2026 GMT
        Subject: CN=6ab1d91e-8ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:6d:5f:12:5a:fa:b7:de:7f:ae:77:99:4b:
                    e4:a0:4e:37:74:81:54:41:83:2b:c1:0e:4e:ea:cd:
                    21:58:cb:5a:bd:c6:68:6a:4a:b6:e6:1a:fb:93:f0:
                    57:18:6f:90:ae:1a:bd:ac:fd:a2:1a:69:2f:44:81:
                    a6:3c:1e:b3:0e:53:04:fb:66:7a:df:e1:e5:48:55:
                    c7:3f:8c:d2:0c:f1:23:ed:5b:23:02:5a:a8:f3:30:
                    ec:67:ca:39:77:14:d9:cc:64:1a:91:8e:36:dc:58:
                    d1:37:27:fe:c8:74:76:d9:77:17:d2:e8:46:35:96:
                    eb:c4:ec:25:3a:0a:83:be:23:ba:25:d3:e2:95:34:
                    ea:34:03:fc:2f:f9:3e:3e:8e:ce:c0:80:2a:a9:26:
                    8e:e8:2e:c3:94:e0:85:17:e1:71:40:0d:fc:68:22:
                    90:f1:2b:d6:2a:a4:e2:c2:c5:04:83:d2:8c:d1:97:
                    41:87:3f:23:23:3d:57:1c:4a:63:ec:3f:85:b1:f0:
                    2d:51:6d:6a:70:05:5c:18:d2:a9:e9:a7:05:d2:4a:
                    ef:71:04:f6:29:6d:8f:db:2f:52:96:39:9f:eb:4c:
                    f7:1a:f5:7f:7a:73:22:cc:f6:6f:72:0f:0d:c7:4a:
                    d0:5a:2d:78:80:93:9c:68:0b:d3:e7:27:5a:5a:6e:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:20:FB:94:60:0B:D3:84:F1:72:CD:F9:6A:D2:33:76:03:79:A0
            X509v3 Authority Key Identifier:
                keyid:7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ae:fe:10:01:e5:21:8c:4e:58:e5:4c:fd:5a:c7:31:93:1e:
         00:f8:d2:c1:33:c7:81:d4:0f:3e:80:f8:4e:4f:16:93:b4:28:
         6d:87:fe:81:92:0b:d8:a0:23:0d:ea:ca:48:71:7c:e9:a4:c4:
         aa:43:b2:cc:03:ee:89:d0:95:09:18:44:01:b7:98:36:68:1d:
         b7:47:0d:0b:b2:51:6d:98:ad:ad:b6:b5:75:95:74:ee:1e:f8:
         2e:b6:d7:56:04:64:56:9a:2a:00:05:05:04:70:44:1b:47:ec:
         d4:cf:63:b3:1f:ff:91:10:74:7b:ec:fe:86:db:28:a0:cb:bf:
         2e:48:39:55:dc:c8:16:87:96:de:2a:ac:11:8e:d0:aa:3b:3e:
         9a:31:92:25:91:40:18:6c:32:3b:9b:40:59:81:51:e6:82:9f:
         71:7e:4d:c3:6b:fd:b5:0d:21:16:5c:0e:eb:cc:7c:f5:27:48:
         7a:98:7f:0d:48:22:7a:0a:53:c3:9c:86:e1:f5:29:dd:8b:2f:
         9f:ed:e3:96:76:0d:81:34:3f:92:3d:8f:e8:5f:c1:53:2d:59:
         e0:7f:ae:c5:6b:76:08:47:b6:ed:1d:0b:d2:bf:77:1e:45:df:
         d1:e3:f5:52:a4:50:4a:10:93:41:e0:33:27:ab:95:d1:9b:ca:
         39:3a:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:52:46 2026 by rpki-client