Error: rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
File:                     79LD3jroxM6ee5PJ99RbqS6xTow.mft (raw, json)
Hash identifier:          8eviQrFBEhZaYd34H9olcHjr45+1vVGNs6Dez28RWIc=
Subject key identifier:   4C:D7:80:5B:4B:5A:6F:D9:E4:A8:1B:49:FC:1F:09:BF:A9:AF:FD:EF
Authority key identifier: EF:D2:C3:DE:3A:E8:C4:CE:9E:7B:93:C9:F7:D4:5B:A9:2E:B1:4E:8C
Certificate issuer:       /CN=F3676EF0AF/serialNumber=EFD2C3DE3AE8C4CE9E7B93C9F7D45BA92EB14E8C
Certificate serial:       02FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
Manifest number:          02FB
Signing time:             Mon 21 Sep 2026 04:27:03 +0000
Manifest this update:     Mon 21 Sep 2026 04:27:02 +0000
Manifest next update:     Wed 23 Sep 2026 04:27:02 +0000
Files and hashes:         1: 79LD3jroxM6ee5PJ99RbqS6xTow.crl (hash: YkePXlvos8mpXL4AgFDGLxM4XNL7Tf13lrol4t5/LvM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
                          rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AF, serialNumber=EFD2C3DE3AE8C4CE9E7B93C9F7D45BA92EB14E8C
        Validity
            Not Before: Sep 21 04:27:02 2026 GMT
            Not After : Sep 23 04:27:02 2026 GMT
        Subject: CN=6ab0b217-e3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:31:56:a8:58:c3:e4:bd:83:7d:0b:e0:0d:
                    5a:95:27:91:bf:a4:2f:9b:77:5d:77:27:d5:62:63:
                    43:f0:34:c3:d1:d8:e1:69:7d:64:2d:63:c5:8b:76:
                    0b:f6:75:db:0b:8c:a1:18:18:1e:c5:1e:85:c9:0c:
                    7a:ca:62:f5:c4:80:02:c7:89:45:6b:d2:a9:a8:61:
                    ed:f4:ba:cb:4a:b2:5d:77:73:33:06:e4:84:b1:9d:
                    7b:76:da:19:a8:5e:89:8d:4b:41:4e:36:9a:ca:56:
                    9b:89:75:0f:54:b2:ab:11:1b:d1:c0:4a:2f:26:3a:
                    0c:69:ae:04:13:24:5e:6c:6c:7a:33:0e:16:d7:a5:
                    a2:ec:a8:b4:55:c4:b9:8f:e5:df:43:1d:43:67:66:
                    af:6b:53:6d:d5:44:a3:c1:c3:32:aa:88:f5:86:84:
                    f0:7a:61:84:ac:82:22:73:40:e9:1f:7f:01:ca:b4:
                    e8:0c:22:6f:63:cc:35:57:90:b0:f2:d8:a3:89:d3:
                    83:a7:a3:63:e4:56:bf:e0:02:a1:0c:8f:cb:f8:f1:
                    90:3b:ce:9e:db:89:56:72:d5:ee:18:34:62:1c:c3:
                    02:95:c2:f1:f0:a5:7f:68:a7:cc:74:34:54:00:6d:
                    b7:e7:98:cc:61:7d:14:55:f7:82:0b:a1:8e:d7:f1:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D7:80:5B:4B:5A:6F:D9:E4:A8:1B:49:FC:1F:09:BF:A9:AF:FD:EF
            X509v3 Authority Key Identifier:
                keyid:EF:D2:C3:DE:3A:E8:C4:CE:9E:7B:93:C9:F7:D4:5B:A9:2E:B1:4E:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d8:76:94:41:b6:3d:c0:54:f0:44:b9:5d:59:26:d0:09:08:
         22:ed:f6:5e:f2:9d:12:1e:a8:b0:0d:5b:a6:9a:20:f0:3b:68:
         8e:f2:0a:5a:fd:81:08:f6:c7:9b:ca:8c:55:87:56:cf:7d:42:
         cc:bf:85:f4:f6:c7:46:8a:97:20:ed:ce:c5:9e:52:96:e2:69:
         9b:e4:26:9b:4f:7f:73:78:78:0c:e7:bb:77:8a:04:72:3d:ad:
         e3:b9:d7:21:a3:06:92:06:0f:3f:04:a2:07:b7:f4:0b:e6:82:
         b7:c3:90:fe:46:b3:5b:d8:8c:b4:fb:c4:2e:80:16:9a:89:19:
         ad:7d:76:0a:03:23:e9:54:68:c7:30:e1:95:5e:b6:fd:d9:8c:
         22:d8:85:c1:31:af:11:cb:b3:de:23:65:e1:d1:6d:3b:35:46:
         db:9d:d9:65:e7:65:d4:3a:2d:bd:6b:e5:35:b9:3a:5b:21:e6:
         c7:3d:b5:4c:d4:49:ea:6b:55:63:5d:2c:9b:28:84:fe:f7:00:
         57:c4:0c:e5:fb:e9:20:a6:e2:9d:a9:3c:e4:dd:14:87:35:f3:
         64:f6:bd:20:72:68:14:16:a3:05:42:b0:a2:02:a6:30:9f:83:
         e9:93:b7:6a:3c:c7:8e:88:ec:cb:67:85:e5:86:e0:b9:fe:c0:
         78:50:38:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:33:43 2026 by rpki-client