Error: rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
File:                     peeb8ti13JAu4K9nlB3mgyjCJdY.mft (raw, json)
Hash identifier:          wUApVHgQcXND2y5NUVCuawTHbYKNAHJN/eC9hUPtD3k=
Subject key identifier:   62:B9:68:DB:BA:65:AE:F5:D6:A8:BF:2A:21:E7:4F:37:84:97:59:50
Authority key identifier: A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6
Certificate issuer:       /CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
Certificate serial:       075C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
Manifest number:          075A
Signing time:             Sat 10 Oct 2026 02:26:28 +0000
Manifest this update:     Sat 10 Oct 2026 02:26:27 +0000
Manifest next update:     Mon 12 Oct 2026 02:26:27 +0000
Files and hashes:         1: peeb8ti13JAu4K9nlB3mgyjCJdY.crl (hash: fOfGBzzpGMMCGZxBbaqcMiBC2pfiHGmzkEB8F3gjm88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5AF, serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
        Validity
            Not Before: Oct 10 02:26:27 2026 GMT
            Not After : Oct 12 02:26:27 2026 GMT
        Subject: CN=6ac9a254-fa54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:49:98:d5:e1:e7:06:c0:02:4a:a7:18:9f:
                    ae:1a:9e:94:b0:cd:c3:a1:1f:6b:f7:98:38:47:7e:
                    30:36:c9:8e:46:75:80:a0:72:29:8a:db:06:90:2d:
                    a9:25:8e:f3:7a:f7:a3:4b:1b:0d:df:88:c2:1d:c7:
                    34:8f:76:d8:a8:55:c6:f7:3c:a8:c3:8c:05:da:69:
                    52:94:4c:4a:7a:17:fc:f3:b3:3d:0d:b7:5f:4e:3e:
                    a6:55:06:8f:bb:83:23:01:92:2c:c6:12:f4:e7:fe:
                    f5:78:e4:15:ad:2f:f8:f6:97:33:d7:81:be:f5:97:
                    26:1d:12:ef:d9:a1:5d:6f:59:d9:09:47:a3:92:f4:
                    8d:e1:fe:19:b9:bc:d3:87:f8:d7:cf:0a:23:6e:8a:
                    d0:38:e8:a4:bf:97:ff:ee:cf:ee:ba:53:da:f9:82:
                    ab:6d:90:64:c6:0d:3a:93:f6:ea:b9:90:69:13:a8:
                    d9:fb:d8:55:05:5f:88:95:50:3a:ae:7d:cd:f0:ef:
                    ce:8e:e1:a2:78:52:71:47:d3:af:13:dd:bc:68:18:
                    61:cd:f0:05:a2:c1:05:3d:12:86:d2:eb:2c:50:cf:
                    16:65:9c:00:35:31:88:cc:6d:25:aa:73:e3:65:5a:
                    85:e9:1e:51:cc:ed:44:46:ce:ad:da:da:29:c1:04:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B9:68:DB:BA:65:AE:F5:D6:A8:BF:2A:21:E7:4F:37:84:97:59:50
            X509v3 Authority Key Identifier:
                keyid:A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5f:9b:75:1e:ed:21:4c:01:9c:77:a4:9c:6e:6e:8e:da:64:
         ff:99:4d:1f:0d:d3:e9:fe:6b:56:2a:cc:c0:d0:d3:73:dd:86:
         fc:3d:8e:f9:23:26:be:65:85:14:ca:a8:46:83:1a:3a:4d:20:
         6b:c4:17:e5:b2:15:c1:1d:69:fd:6a:66:96:9b:b9:93:18:16:
         c1:24:f1:db:f1:3b:1c:01:11:57:35:0c:10:69:af:ba:f8:86:
         b6:82:b3:43:6a:67:f8:a7:c9:4e:39:f3:01:1b:1e:17:20:9c:
         ad:67:9a:e6:0b:0f:90:c4:c1:2e:e8:16:ed:b1:ec:b2:f0:be:
         37:56:6b:16:5d:be:f5:d0:b7:27:a4:8c:c8:9a:12:e0:2c:e9:
         5f:96:87:52:8f:6b:02:37:bd:1f:5b:5e:29:5a:e7:d2:59:cd:
         fd:70:6e:16:55:32:5b:64:b3:1e:1d:5f:6d:a8:81:1b:0f:6a:
         d6:aa:c3:b3:58:54:1e:51:2a:c1:7a:96:cc:f6:ce:d3:aa:96:
         c9:c0:22:b5:cc:02:61:48:6c:cd:f5:00:2e:56:64:fa:59:26:
         24:a8:e2:43:1f:89:5c:af:f5:ce:27:96:24:4c:41:d9:af:c1:
         07:a0:c8:27:c3:99:ff:b7:1b:65:3d:97:5e:e5:64:1a:ab:a3:
         bb:fc:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:33:51 2026 by rpki-client