Error: rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
File:                     EQYAxu67aMpSEon5sYeaJnpW4_w.mft (raw, json)
Hash identifier:          gbaEQSBBzS4Ph/G9czwGAZ/Oaw5DVNcg1ROIwG+n7Fk=
Subject key identifier:   10:B0:C8:1D:C9:81:BF:10:04:1D:FD:BF:C9:E8:7A:79:E3:C5:AD:EF
Authority key identifier: 11:06:00:C6:EE:BB:68:CA:52:12:89:F9:B1:87:9A:26:7A:56:E3:FC
Certificate issuer:       /CN=F367B9AEAF/serialNumber=110600C6EEBB68CA521289F9B1879A267A56E3FC
Certificate serial:       F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
Manifest number:          EF
Signing time:             Mon 21 Sep 2026 05:24:51 +0000
Manifest this update:     Mon 21 Sep 2026 05:24:50 +0000
Manifest next update:     Wed 23 Sep 2026 05:24:50 +0000
Files and hashes:         1: EQYAxu67aMpSEon5sYeaJnpW4_w.crl (hash: 3IFPV7Y73TPpLAesmgs4WbyO6LL+QjRwWmB7bIocWKU=)
                          2: 5DAE53C8FC4311F089F0909ADAE4EC9C.roa (hash: pMAftOKK+E+y6h4RLSrb4pd1uKoP1x/UJyyr/pqc+Bk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B9AEAF, serialNumber=110600C6EEBB68CA521289F9B1879A267A56E3FC
        Validity
            Not Before: Sep 21 05:24:50 2026 GMT
            Not After : Sep 23 05:24:50 2026 GMT
        Subject: CN=6ab0bfa3-7c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:40:33:0a:47:a8:e8:6d:dd:e4:0e:ff:1b:
                    98:13:61:17:86:44:cb:91:5e:c8:cd:8a:55:d2:ff:
                    7b:7e:f3:ca:ee:d0:1f:cb:0d:70:09:94:59:12:8b:
                    b2:89:9e:f6:e4:f3:82:22:11:be:d2:ce:9e:3c:8f:
                    8b:2f:4f:85:e9:7d:cd:bb:ba:51:a3:ae:58:83:20:
                    c5:b9:d9:d3:27:1b:a0:34:54:b6:db:a7:4a:b5:1f:
                    b4:ff:9a:bd:49:9f:e1:b5:63:09:1a:73:c6:c6:b7:
                    11:83:ca:cf:2e:cd:65:9d:49:13:8b:7f:7f:a5:35:
                    45:19:0a:01:19:dc:3b:c3:bf:87:c1:ea:83:86:e6:
                    8e:53:43:58:44:22:4b:1d:3e:6b:31:1a:b4:91:48:
                    b3:2f:2f:9d:75:cd:80:bd:9c:1b:b9:f7:01:e4:04:
                    4b:92:48:91:93:01:0c:ec:3e:57:67:60:32:4e:86:
                    c3:a1:f2:6a:ce:cc:0b:a4:f2:9c:d3:da:9c:0e:0b:
                    c6:f2:ae:f1:cf:d2:92:70:59:4f:41:46:62:96:bf:
                    1c:fc:a3:65:9f:68:39:d8:74:85:19:1f:4e:7e:b6:
                    94:db:51:ba:80:49:7e:cb:6b:ab:47:04:0c:1a:52:
                    66:79:14:d8:2e:74:2f:37:d7:f7:6d:9d:74:da:94:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B0:C8:1D:C9:81:BF:10:04:1D:FD:BF:C9:E8:7A:79:E3:C5:AD:EF
            X509v3 Authority Key Identifier:
                keyid:11:06:00:C6:EE:BB:68:CA:52:12:89:F9:B1:87:9A:26:7A:56:E3:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:dd:c6:3b:f2:79:88:fe:56:56:ca:1c:b7:7b:2a:e1:62:
         36:ae:9e:81:92:28:01:9b:04:a3:3b:d9:08:6a:8c:a0:93:37:
         99:f7:1d:e8:61:55:2a:0d:f0:9f:fc:5e:c6:ff:12:0c:10:ef:
         f8:e2:1e:59:2b:9d:b3:17:d2:71:76:d5:d1:56:69:51:4c:ad:
         99:e9:a3:29:08:88:c4:4d:8d:cd:6f:92:eb:a0:bf:8d:04:d9:
         a8:90:d0:ff:50:b9:4a:ff:f1:06:1f:03:a6:19:7b:90:38:32:
         fa:2e:50:1f:0c:0f:7f:d7:18:e7:5f:c4:d5:ed:3a:f9:12:82:
         02:cc:52:24:68:7b:77:7e:ba:14:4a:19:8a:6c:b8:3d:77:ae:
         55:4e:70:77:e4:19:7e:0d:93:31:a4:d2:32:ee:25:53:a0:c9:
         71:dc:c6:36:c9:a5:0f:1f:ef:49:d6:4f:1c:b0:f4:73:35:c0:
         ac:4c:88:3d:e7:d1:31:95:9f:2b:b9:0d:c0:67:e7:64:e5:93:
         fe:92:3c:ed:b1:e9:64:5d:77:3b:12:70:c7:4a:07:1b:bf:1c:
         f8:d1:b8:47:51:4f:86:7e:84:94:76:53:78:02:b4:bd:5e:bc:
         d5:44:76:82:b6:f5:10:55:96:8a:fb:15:bc:d3:6c:0d:94:be:
         61:83:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:08:51 2026 by rpki-client