Error: rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
File:                     WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft (raw, json)
Hash identifier:          vJuwK1MZEXkps1Faqc1xvwBtKpcTxE9TR6V2u+XB9p4=
Subject key identifier:   D4:47:A5:18:26:B8:95:88:1D:1B:0D:97:18:97:E4:18:CB:66:27:BF
Authority key identifier: 5A:1A:40:99:27:8F:18:FF:41:96:4D:55:77:B0:4B:3D:5E:43:7C:FB
Certificate issuer:       /CN=F369013CAF/serialNumber=5A1A4099278F18FF41964D5577B04B3D5E437CFB
Certificate serial:       0A5B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
Manifest number:          0A5A
Signing time:             Tue 22 Sep 2026 01:33:59 +0000
Manifest this update:     Tue 22 Sep 2026 01:33:58 +0000
Manifest next update:     Thu 24 Sep 2026 01:33:58 +0000
Files and hashes:         1: WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl (hash: oi+8Ox9DhS+pUiN+JsANp2+zT0kVxf1XX0QRSvMOTso=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651 (0xa5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369013CAF, serialNumber=5A1A4099278F18FF41964D5577B04B3D5E437CFB
        Validity
            Not Before: Sep 22 01:33:58 2026 GMT
            Not After : Sep 24 01:33:58 2026 GMT
        Subject: CN=6ab1db07-f219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:d2:dc:02:fb:c5:03:5a:fa:b4:a9:c4:9a:
                    bb:35:65:62:bf:9f:eb:06:15:88:45:7e:3f:dd:38:
                    b3:f8:bb:1e:af:ae:3d:55:49:1f:25:d0:8e:85:5a:
                    db:c5:87:f5:54:88:14:08:11:ba:4f:c0:d0:72:7b:
                    e6:60:a3:95:75:59:a4:7f:ab:4f:23:5e:32:a5:f1:
                    b9:e5:a8:d2:0f:44:57:ba:26:dc:20:69:8b:b9:95:
                    ed:da:81:3f:58:6b:48:45:6c:12:00:c1:f1:64:6c:
                    fc:f5:ee:31:a9:f9:6a:a0:67:0e:3d:f3:85:b5:ab:
                    96:61:67:b8:ad:b5:69:12:91:2d:f5:9e:f3:c5:33:
                    a3:14:13:25:d0:97:4b:48:bf:9b:33:5c:04:c7:79:
                    e1:06:a8:74:a5:a5:2d:38:9c:d6:b5:92:44:c2:8c:
                    d0:c9:0c:8f:20:b6:ca:f0:24:18:12:8e:a2:6d:cb:
                    7d:ec:5c:05:ea:88:00:68:69:75:eb:c6:f7:92:bf:
                    7c:9e:84:03:1c:08:8e:ba:d0:64:55:ad:6f:d4:60:
                    8d:98:f1:b8:be:85:22:5b:a7:af:5b:af:cf:a2:75:
                    82:0b:a7:7f:9c:e9:c4:28:53:57:6d:85:28:da:c0:
                    be:ba:5d:e4:ce:23:38:a1:02:21:1a:2d:30:48:88:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:47:A5:18:26:B8:95:88:1D:1B:0D:97:18:97:E4:18:CB:66:27:BF
            X509v3 Authority Key Identifier:
                keyid:5A:1A:40:99:27:8F:18:FF:41:96:4D:55:77:B0:4B:3D:5E:43:7C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:0a:27:32:15:c1:30:a6:59:9c:3d:40:e6:bf:ff:0b:e0:
         d3:d8:9f:61:eb:56:96:0a:ec:76:7d:b5:68:05:50:15:1f:7b:
         29:2b:0a:2e:92:94:91:66:c6:fa:28:3e:8b:bb:f3:b3:26:c0:
         ab:ba:8c:f6:b0:97:8b:8e:37:6b:5e:57:9c:18:3e:01:d2:33:
         07:b2:4d:a2:3c:7b:1c:79:0d:1b:92:ab:04:80:a0:1e:fa:06:
         69:82:a8:13:cc:e1:ea:05:ae:1b:7f:7c:1c:33:bf:c2:2a:91:
         a5:80:8b:07:f1:5c:6f:03:64:12:b6:89:d7:ed:03:0b:a2:7b:
         ed:f1:d5:73:22:09:6c:7c:c6:b0:ff:0a:bd:2d:25:ad:10:31:
         35:40:71:6d:8c:83:ab:64:ba:5b:ab:ad:dd:63:51:d7:b3:c0:
         dd:87:0f:c1:03:62:b9:e3:de:e8:1b:e0:19:af:26:3a:ea:9a:
         aa:65:8a:11:b1:fc:ca:36:c9:ea:6f:ba:65:48:33:18:6f:96:
         9a:91:36:5f:89:50:7f:99:ab:10:31:45:fd:76:68:d9:24:31:
         76:a7:a9:42:d5:3b:c3:21:35:be:20:eb:80:da:81:8c:dd:26:
         b8:e6:19:e2:1c:3f:f1:8c:fa:22:59:3f:ee:f4:74:0c:75:ce:
         0a:c2:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:54:52 2026 by rpki-client