Error: rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
File:                     _pOvT0KHl7wjB3xuK6XkNRfU4vs.mft (raw, json)
Hash identifier:          feTHoxul54x2WvJZNu6sAFPtx2pXI0rvfKszLgcm55s=
Subject key identifier:   43:6A:0F:CC:7C:4F:1C:83:9C:34:CB:13:03:95:98:0F:76:D1:0D:A4
Authority key identifier: FE:93:AF:4F:42:87:97:BC:23:07:7C:6E:2B:A5:E4:35:17:D4:E2:FB
Certificate issuer:       /CN=F3678B2CAF/serialNumber=FE93AF4F428797BC23077C6E2BA5E43517D4E2FB
Certificate serial:       E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_pOvT0KHl7wjB3xuK6XkNRfU4vs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
Manifest number:          DF
Signing time:             Tue 22 Sep 2026 05:27:00 +0000
Manifest this update:     Tue 22 Sep 2026 05:27:00 +0000
Manifest next update:     Thu 24 Sep 2026 05:27:00 +0000
Files and hashes:         1: _pOvT0KHl7wjB3xuK6XkNRfU4vs.crl (hash: NE6zJBSAsT+8D19HEUqUFrpm6NqIBIDsefKXSHTU4L0=)
                          2: FE138FA208C511F1827C647CDAE4EC9C.roa (hash: VfBb7QRNJ+0kJ0a9czJU7oLPc0BoZ7T1d1tl93Q0e1I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_pOvT0KHl7wjB3xuK6XkNRfU4vs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678B2CAF, serialNumber=FE93AF4F428797BC23077C6E2BA5E43517D4E2FB
        Validity
            Not Before: Sep 22 05:27:00 2026 GMT
            Not After : Sep 24 05:27:00 2026 GMT
        Subject: CN=6ab211a4-4de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:5f:28:c0:29:5b:09:40:ac:37:e2:b8:d1:
                    23:ba:39:21:af:25:68:48:45:08:ab:3a:4b:a8:95:
                    2d:e5:bf:b1:db:1b:5e:0f:5e:81:59:1a:1a:2d:30:
                    52:2b:08:91:90:55:b4:d9:84:35:7d:a9:67:4e:3d:
                    73:6d:41:0c:6c:1f:eb:6d:a9:63:26:c6:0e:d7:ea:
                    e0:df:db:72:82:38:77:e6:b9:b0:0d:c0:97:43:dd:
                    50:a5:73:a1:c3:b5:04:a0:5e:30:15:1d:39:4c:3a:
                    c3:8d:7c:19:52:48:0c:87:7e:3c:25:a9:7f:5c:4c:
                    9e:32:f7:a1:37:01:6e:84:7b:bf:d5:ed:01:2f:26:
                    cf:a6:37:93:14:7f:31:17:c1:24:46:74:43:50:c8:
                    34:7b:0c:28:8f:73:df:09:1b:b2:1a:6d:9c:ea:1a:
                    76:1f:87:19:22:91:0d:c3:8a:79:df:c0:e6:dc:1d:
                    5b:d7:fa:44:30:79:16:d4:11:cd:43:f2:6f:58:20:
                    7f:31:e1:ae:a7:9b:58:ec:a5:b0:9e:72:ae:13:ff:
                    2f:e4:28:8f:20:f5:d2:21:3e:b0:68:02:3a:a2:a2:
                    10:42:f2:b1:6d:42:6b:a3:a4:69:76:02:5e:c9:79:
                    bc:55:fe:1d:d0:b6:62:cc:c5:56:0a:72:47:f1:e3:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6A:0F:CC:7C:4F:1C:83:9C:34:CB:13:03:95:98:0F:76:D1:0D:A4
            X509v3 Authority Key Identifier:
                keyid:FE:93:AF:4F:42:87:97:BC:23:07:7C:6E:2B:A5:E4:35:17:D4:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_pOvT0KHl7wjB3xuK6XkNRfU4vs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:bf:6b:b7:4d:22:a4:40:58:44:7f:c1:61:5a:9b:0d:08:
         7d:3a:ac:10:dd:70:89:2e:e3:44:d2:e4:86:0d:4f:b0:59:12:
         83:7d:0a:48:0c:51:5f:3e:77:18:d6:b8:92:af:f9:3f:8d:d1:
         67:43:36:65:2a:b5:4c:4d:2b:fa:f3:cf:f6:50:b3:20:c8:b6:
         c5:64:bf:fc:1c:d4:f8:ea:74:67:5b:d3:03:e9:05:5a:79:da:
         ee:67:1e:d4:6d:fe:78:18:f6:41:f9:17:36:25:5e:48:2b:f1:
         ac:f7:59:09:f5:35:82:31:be:72:a3:a7:d2:96:7d:a1:a6:dc:
         1f:7c:42:b3:61:9a:f9:ff:9a:f8:9b:91:05:da:46:e9:62:73:
         c4:73:d1:2c:ef:89:f7:25:72:b8:73:8e:23:a5:0a:35:4a:1d:
         5a:60:aa:78:42:c8:74:d5:b4:eb:39:c8:89:fd:35:c6:ac:cb:
         1d:12:17:64:a3:68:1d:d8:74:64:dc:ef:03:84:b7:42:57:03:
         65:54:8a:db:6c:35:90:52:b8:61:30:d9:48:8a:47:f9:a0:93:
         50:92:7d:72:c3:29:b9:90:ec:91:9e:35:20:50:66:87:83:4e:
         9d:a4:a1:00:4f:51:10:30:c6:27:96:0e:f7:b2:37:87:71:ba:
         30:1b:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:30:02 2026 by rpki-client