Error: rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
File:                     EQYAxu67aMpSEon5sYeaJnpW4_w.mft (raw, json)
Hash identifier:          we0btJrAS0Lm/hhCr5SFmqlPwdPUehMnsM15BEuAgvo=
Subject key identifier:   FB:76:9E:B1:AF:6B:33:05:AC:97:AF:66:73:47:C1:8A:F5:7F:50:03
Authority key identifier: 11:06:00:C6:EE:BB:68:CA:52:12:89:F9:B1:87:9A:26:7A:56:E3:FC
Certificate issuer:       /CN=F367B9AEAF/serialNumber=110600C6EEBB68CA521289F9B1879A267A56E3FC
Certificate serial:       F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
Manifest number:          F0
Signing time:             Tue 22 Sep 2026 05:24:38 +0000
Manifest this update:     Tue 22 Sep 2026 05:24:37 +0000
Manifest next update:     Thu 24 Sep 2026 05:24:37 +0000
Files and hashes:         1: EQYAxu67aMpSEon5sYeaJnpW4_w.crl (hash: S/6OrU7rJ2FsAkUVFUqgGw69kiaFzO6GaOHYw+RZ1MY=)
                          2: 5DAE53C8FC4311F089F0909ADAE4EC9C.roa (hash: pMAftOKK+E+y6h4RLSrb4pd1uKoP1x/UJyyr/pqc+Bk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B9AEAF, serialNumber=110600C6EEBB68CA521289F9B1879A267A56E3FC
        Validity
            Not Before: Sep 22 05:24:37 2026 GMT
            Not After : Sep 24 05:24:37 2026 GMT
        Subject: CN=6ab21116-d57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:cd:ed:bd:be:18:0b:14:77:bf:23:f0:4e:
                    9c:1b:06:4f:04:7b:2b:2c:e3:07:b6:e0:df:47:10:
                    32:ca:f3:ad:23:13:c4:27:41:96:68:6b:9b:01:cd:
                    6e:5a:ef:29:e4:46:a7:b5:ae:e4:a0:94:46:e0:0d:
                    cb:a4:1e:5d:85:0c:ce:73:e9:7e:79:fa:f5:06:a1:
                    a5:27:57:d1:d2:66:9d:50:d8:66:80:45:f8:38:70:
                    b3:83:55:f9:8b:58:49:6c:fe:89:4c:c3:db:62:34:
                    97:22:a1:c4:bb:38:a3:b0:4e:49:ff:ec:4f:7e:df:
                    d4:17:89:ed:03:50:4c:9b:cf:7d:99:01:42:0b:fb:
                    4d:06:d0:4b:5e:34:af:63:ec:03:60:0a:b0:7d:53:
                    07:21:92:37:3f:ec:81:5c:35:2b:91:53:f4:47:f0:
                    4f:0b:f6:13:84:8d:04:b0:ed:e9:0d:b4:c3:46:33:
                    b0:88:b3:d1:92:41:41:85:c3:ad:d3:c7:85:9a:ac:
                    49:17:26:ff:3f:70:cc:6c:44:a3:b7:a9:c9:e9:e5:
                    64:a2:21:f9:90:f2:c0:4d:8b:84:3d:7a:fe:cb:df:
                    15:c2:37:7a:08:be:69:25:89:7d:e8:c5:42:90:61:
                    f7:74:3f:7d:b9:b9:5d:d9:01:51:7c:11:27:e7:34:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:76:9E:B1:AF:6B:33:05:AC:97:AF:66:73:47:C1:8A:F5:7F:50:03
            X509v3 Authority Key Identifier:
                keyid:11:06:00:C6:EE:BB:68:CA:52:12:89:F9:B1:87:9A:26:7A:56:E3:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3e:f2:dd:68:d2:3b:28:84:7d:cf:49:c6:c6:01:e6:cc:2d:
         80:b6:2b:4c:a3:67:be:63:2f:f6:0c:71:17:a6:85:97:05:33:
         78:c6:c9:27:8b:eb:e4:2f:89:d7:b5:0a:25:0c:40:a3:06:6a:
         b4:27:6b:cd:95:d7:b8:43:6f:d7:1c:9c:d4:42:e9:8b:e9:90:
         37:53:66:95:7c:6e:1d:6e:74:f1:30:d4:c7:c7:ec:cf:01:48:
         d0:7f:c6:5f:7a:61:c8:b0:6e:39:bc:3c:73:90:92:24:b7:5e:
         a9:74:1c:29:d2:0e:3f:fa:ab:71:84:fb:c4:22:e5:67:73:b1:
         51:40:f5:d9:3f:fb:97:8e:c6:84:12:66:55:ae:94:14:f7:44:
         5a:6c:c3:84:92:be:5f:22:ea:27:dc:f7:60:4a:c4:90:b7:a7:
         1a:1f:b8:e2:a7:ee:bd:41:0b:ad:e6:23:15:17:96:39:31:ef:
         39:5d:7e:41:e6:b5:38:f1:5c:37:d3:e7:eb:bb:85:ac:39:19:
         41:8b:99:5a:0b:38:bf:dd:54:3f:12:18:0d:65:78:a8:d3:95:
         49:9e:cc:5d:8f:e3:9c:13:e7:2f:af:6b:90:2e:ea:1f:98:30:
         01:9a:ed:0e:98:da:63:74:9f:13:5c:67:17:c2:54:e0:e0:09:
         54:55:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:55:29 2026 by rpki-client