Error: rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
File:                     a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft (raw, json)
Hash identifier:          Rfx1A+rfjfxTBSYFdXSLKxOgBIurVCEdATbJMz+fO1A=
Subject key identifier:   51:BC:A7:C2:7B:9E:99:9E:47:9B:55:91:42:2B:DD:60:C8:E1:71:A0
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Certificate issuer:       /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial:       08F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
Manifest number:          08EA
Signing time:             Thu 24 Sep 2026 01:54:22 +0000
Manifest this update:     Thu 24 Sep 2026 01:54:21 +0000
Manifest next update:     Sat 26 Sep 2026 01:54:21 +0000
Files and hashes:         1: a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl (hash: xp0b5ptToW5X4p5Tw/w2/+2EuZJK22WtfgayJe3Mac0=)
                          2: E24D05EEE25311EA92AD155EF8AEA228.roa (hash: NhNBSTEDSsS8nv1gPk35pYlSA/j54gCUeglNVOfp5Jk=)
                          3: 8B23E96CE25411EAABDED95EF8AEA228.roa (hash: G1N7VCX3quzWOxjZ6v2ZRD1s53UOL4I3nt3IbyrQuyg=)
                          4: 10D082ECE25411EAB7E7505EF8AEA228.roa (hash: HCeS+ur8bLRwVYC7j4CEZcmf2zW7Wq0HlwhQZaJebjk=)
                          5: 8DA134B6E25311EA83A9A55DF8AEA228.roa (hash: FZLhMJ//MfWJptrE3zcXjMsUeDRso3qHvO1+H5qU2Z0=)
                          6: B193AAD8E25411EAACEFFA5EF8AEA228.roa (hash: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=)
                          7: 57CB6630E25411EA8C85A55EF8AEA228.roa (hash: zokPSNjx8r4IpsyxRDDLa5MvDTlpaKfogK8lEwUhKrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288 (0x8f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697F9BAF, serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
        Validity
            Not Before: Sep 24 01:54:21 2026 GMT
            Not After : Sep 26 01:54:21 2026 GMT
        Subject: CN=6ab482ce-9409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:87:2a:40:32:fe:61:ee:17:89:38:7a:5e:
                    99:76:53:a0:7d:2c:97:7f:45:71:a6:4b:61:ab:88:
                    97:a2:5f:6f:2c:64:03:e6:22:93:d4:cc:6a:e1:40:
                    fe:13:40:e2:10:7a:4c:b5:04:28:32:b4:df:22:ed:
                    b9:b2:06:c6:3d:1a:80:17:e2:10:e9:d4:14:27:ad:
                    34:46:a4:aa:d4:d0:0a:ea:d6:df:9b:66:25:47:f7:
                    62:1f:64:3e:9f:12:7c:72:0a:21:16:dd:52:41:52:
                    da:53:f9:44:d5:1a:f9:ba:22:78:31:de:af:f2:3f:
                    7a:22:2a:b4:84:22:80:51:ad:ce:61:4d:f6:c6:e0:
                    b1:8d:83:e4:79:d0:22:c0:80:f7:03:c8:67:8b:b1:
                    d4:1e:cb:bf:40:d6:52:1f:47:ba:79:b9:70:01:4c:
                    9a:1f:3e:48:d2:31:b2:5a:8d:a8:69:67:0f:71:50:
                    1e:25:62:b7:17:d1:80:88:90:c6:d0:d9:ad:49:02:
                    91:4d:24:7b:52:0e:93:1b:2e:a9:c1:f8:5a:7c:5a:
                    26:43:09:76:0b:d1:59:90:ae:86:58:4e:29:77:46:
                    ba:8b:2e:92:39:99:39:33:bd:0f:db:03:f7:c5:64:
                    02:24:41:f0:ce:f5:40:6e:7b:14:4a:cb:7c:b9:04:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BC:A7:C2:7B:9E:99:9E:47:9B:55:91:42:2B:DD:60:C8:E1:71:A0
            X509v3 Authority Key Identifier:
                keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:5d:68:81:13:c9:20:0e:a7:c4:66:38:c5:75:ae:8d:18:
         0d:66:cb:10:e4:b2:3e:f9:9b:11:aa:70:09:9e:bf:28:f3:34:
         b0:df:9c:1a:2d:3f:12:24:54:42:f9:c4:dc:c8:e0:9d:60:65:
         c5:22:9b:cf:08:e5:4a:70:2f:42:b1:27:a8:24:d9:a4:87:7b:
         0f:bb:89:84:e8:26:c9:50:95:54:f8:26:8c:a2:09:b8:fc:c5:
         ea:6a:23:43:e3:1f:84:a2:d4:d5:30:b4:28:48:fa:89:93:35:
         ec:df:e8:94:2b:ea:c9:a3:ae:c6:cb:9e:1d:7e:25:66:fd:bc:
         c7:44:48:aa:c9:af:0d:19:5a:dd:71:50:12:c0:a4:ee:32:73:
         d8:65:e3:14:11:ba:d0:d0:81:50:aa:6f:13:31:1f:e0:2c:2c:
         95:ce:ef:2c:c4:73:2f:98:b6:81:cc:75:a5:f2:93:20:c0:ec:
         82:dd:90:23:6b:7b:27:21:82:c4:1b:fc:d7:7f:a9:76:c4:9b:
         6f:31:e4:ad:27:0f:26:59:d3:99:b7:c9:fd:dc:ba:9a:37:d8:
         c0:5d:36:ac:6f:e5:36:ed:3a:6b:a8:41:6f:55:6c:9a:b0:56:
         11:f9:99:c5:88:ad:95:a6:2e:d0:e0:06:09:c0:96:8f:1b:0b:
         41:26:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:46:16 2026 by rpki-client