Error: rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
File:                     Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft (raw, json)
Hash identifier:          8IdToH4vVodsFndBNIC8TawtPIxii75Wk0vcn5okXZk=
Subject key identifier:   A1:23:94:80:82:F0:97:96:66:1F:7A:53:4E:6D:37:90:91:E0:89:83
Authority key identifier: 5E:9E:12:64:A2:E9:14:E5:51:FC:37:9E:EA:DC:B9:B8:00:5D:00:8A
Certificate issuer:       /CN=F3674A7AAF/serialNumber=5E9E1264A2E914E551FC379EEADCB9B8005D008A
Certificate serial:       51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
Manifest number:          50
Signing time:             Sun 20 Sep 2026 05:43:46 +0000
Manifest this update:     Sun 20 Sep 2026 05:43:46 +0000
Manifest next update:     Tue 22 Sep 2026 05:43:46 +0000
Files and hashes:         1: Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl (hash: nZK9/V+HI1qF+aj1anv3GKRyw5iStXGg8/vLU7QAWFE=)
                          2: 180C9F1A793811F19CA8B2B9CE1D38B0.roa (hash: DAs78s5LvDn7SQOIhkA/UYbBae9oa0Ki1f+XOP4srJs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 05:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674A7AAF, serialNumber=5E9E1264A2E914E551FC379EEADCB9B8005D008A
        Validity
            Not Before: Sep 20 05:43:46 2026 GMT
            Not After : Sep 22 05:43:46 2026 GMT
        Subject: CN=6aaf7292-2b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:37:3f:a1:61:2c:0b:27:c4:b8:4d:bb:c4:
                    c3:dd:ca:86:08:90:38:14:81:c8:a8:67:08:15:58:
                    a6:19:fc:47:19:35:d8:43:66:f3:42:60:86:92:63:
                    5a:7c:88:6a:bf:4c:bb:3e:b0:36:d6:53:1a:a5:fa:
                    4c:98:04:53:87:2e:59:d7:8e:2b:f2:0e:0e:ec:e9:
                    92:db:e0:69:8f:f0:2e:05:4f:58:e9:ec:a9:58:bd:
                    1b:95:f3:06:9b:22:49:9a:78:c5:f3:10:ad:f0:d5:
                    4b:19:83:a2:d5:8c:9f:e8:33:cf:de:36:72:2c:93:
                    1f:ce:37:26:08:45:d7:01:3b:a0:82:f6:d3:ea:42:
                    fb:43:cd:1f:f1:e7:e9:02:ca:f5:22:d2:fc:9a:dc:
                    b6:fc:07:7e:a3:27:d1:4d:02:56:34:86:19:1c:0d:
                    25:a3:7b:7f:0a:41:05:52:aa:7c:24:16:23:f5:b5:
                    5b:1c:be:7f:27:c6:89:33:ca:91:35:32:75:e0:3f:
                    9e:96:36:74:1b:a2:54:a6:2b:3c:8d:d9:80:9d:78:
                    bd:c4:c8:f4:13:58:9f:00:ab:b0:4d:71:48:00:ef:
                    50:69:dc:7e:83:ea:54:0e:25:3b:ea:d6:86:67:0e:
                    f1:fa:7f:9b:40:51:b6:3c:f2:03:35:d0:18:52:53:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:23:94:80:82:F0:97:96:66:1F:7A:53:4E:6D:37:90:91:E0:89:83
            X509v3 Authority Key Identifier:
                keyid:5E:9E:12:64:A2:E9:14:E5:51:FC:37:9E:EA:DC:B9:B8:00:5D:00:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5e:df:7c:14:bb:a9:de:b8:6f:2b:5b:9b:13:5b:b5:7b:2e:
         be:74:4d:40:63:d6:60:cc:fb:06:32:20:7a:74:6a:7d:59:65:
         b6:65:7c:60:4b:fd:a7:4b:cc:c9:3a:45:41:eb:7f:66:12:f2:
         10:14:8d:98:bf:29:d4:6d:17:5e:8c:1a:70:5c:43:0d:6b:f6:
         d3:5c:78:a6:14:86:93:83:4b:59:46:cf:e8:6d:76:f6:69:d7:
         59:27:5e:04:2c:83:c4:41:4a:5a:f6:ff:4e:19:78:3b:64:bb:
         d7:5e:e0:0b:55:1b:65:90:6f:b8:a0:8c:db:bf:26:f7:62:6b:
         e3:f2:e7:25:af:da:9b:d1:00:f3:20:fc:90:39:6c:c9:23:91:
         5d:b4:a8:25:6d:21:0f:57:71:8a:b2:d3:68:4e:0b:73:1e:c6:
         16:44:38:02:4b:1d:1d:a8:e7:8e:42:1a:b4:68:05:a0:57:96:
         95:c0:57:06:04:f6:b2:f7:f9:e5:72:8c:82:ff:c2:5f:20:f9:
         c2:65:c6:8d:6b:80:cd:ce:b2:31:6b:3c:8a:0d:71:c8:07:9d:
         33:ad:90:06:98:4e:32:2c:db:86:64:98:68:a8:35:d3:d9:84:
         aa:34:3d:4c:6b:90:da:b7:a7:45:a3:08:d6:d0:7e:f1:1a:7e:
         2a:83:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:40:14 2026 by rpki-client