Error: rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
File:                     x9L8K1pBgYUDSEdgnQScHin7chQ.mft (raw, json)
Hash identifier:          OZjcIW5MsYo5oo+MGymrTZTUJ0p3uadkbKThO3ah64w=
Subject key identifier:   FB:EC:0D:D0:B7:B8:37:32:B6:DF:62:0F:80:A0:4E:56:E6:6C:3F:8B
Authority key identifier: C7:D2:FC:2B:5A:41:81:85:03:48:47:60:9D:04:9C:1E:29:FB:72:14
Certificate issuer:       /CN=F3699206AF/serialNumber=C7D2FC2B5A418185034847609D049C1E29FB7214
Certificate serial:       1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
Manifest number:          1A
Signing time:             Sun 20 Sep 2026 05:51:21 +0000
Manifest this update:     Sun 20 Sep 2026 05:51:20 +0000
Manifest next update:     Tue 22 Sep 2026 05:51:20 +0000
Files and hashes:         1: x9L8K1pBgYUDSEdgnQScHin7chQ.crl (hash: 13zwkVC4MNGTNhJBp13TT06w++SORQREtFXZ4gqfGMk=)
                          2: E47E81D4A1D411F1B89ACFE1CE1D38B0.roa (hash: spGCEq03/xL3BDX1c6E8r0y4NhuuAf+laXwTQmjxv40=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699206AF, serialNumber=C7D2FC2B5A418185034847609D049C1E29FB7214
        Validity
            Not Before: Sep 20 05:51:20 2026 GMT
            Not After : Sep 22 05:51:20 2026 GMT
        Subject: CN=6aaf7459-758b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:01:b2:43:c0:22:f7:f2:6d:16:13:bf:fa:
                    ff:2a:db:41:db:ab:32:29:81:88:32:6d:51:1b:a7:
                    c0:d1:b5:35:0b:4e:d1:93:b3:01:64:38:7c:74:bc:
                    ad:96:f5:b0:06:73:df:4a:15:84:fc:59:2c:0d:c6:
                    19:a6:b4:38:33:e8:fa:6d:91:02:5c:3f:17:1d:de:
                    0d:5f:02:93:ac:a2:f9:4c:48:78:02:c0:7c:73:f0:
                    01:21:ac:d1:86:9c:73:eb:6e:21:b4:94:7c:d8:36:
                    ad:45:bf:ca:a5:60:a6:6c:b9:d0:e9:76:3c:61:de:
                    bd:a6:72:81:53:c7:c0:f4:5a:40:13:8d:49:52:af:
                    61:95:19:74:70:17:a7:0e:8d:9f:e2:76:8b:d7:84:
                    95:bf:88:be:9a:a2:72:37:85:14:09:08:0f:d4:d2:
                    2a:fc:ab:6a:08:5f:eb:7d:90:c9:2e:c2:7f:9f:44:
                    8d:68:e4:0e:80:eb:ae:b5:d2:54:17:0f:1e:db:a7:
                    32:c3:f4:45:fa:88:49:15:26:f5:6e:ea:32:26:d0:
                    3b:b3:40:9e:10:30:3b:ac:68:9b:6f:ea:71:bb:c8:
                    2d:56:2c:67:3c:a2:ae:15:ff:57:dc:eb:05:3d:cc:
                    69:f8:e1:2e:4e:2c:c1:33:6f:56:5b:44:b4:40:26:
                    d0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:0D:D0:B7:B8:37:32:B6:DF:62:0F:80:A0:4E:56:E6:6C:3F:8B
            X509v3 Authority Key Identifier:
                keyid:C7:D2:FC:2B:5A:41:81:85:03:48:47:60:9D:04:9C:1E:29:FB:72:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:b9:54:22:38:4f:46:b1:d9:f6:97:b3:7b:66:d2:e8:02:
         8b:b9:09:fd:c9:8d:fc:6d:6b:cf:92:7d:1b:92:0b:89:ca:e7:
         05:25:ed:70:66:2d:23:5f:26:b2:00:c5:00:83:c6:cd:38:f9:
         d3:b5:cc:c5:57:51:66:66:5d:e2:63:37:a0:9f:03:7f:e3:d1:
         d1:89:83:5a:74:4c:68:7f:7a:a3:0e:f2:b5:45:59:9b:34:c1:
         67:cb:8f:6c:48:a8:9e:11:03:e7:de:0e:32:14:4d:27:f8:1f:
         98:28:31:ab:46:2d:48:40:5d:a7:2f:ce:dd:2f:e5:dc:1d:da:
         a4:53:93:43:fc:61:e1:17:0f:cb:ea:7d:7a:89:a5:09:56:eb:
         5e:42:e4:21:f0:fb:c8:e6:26:e3:93:8a:d0:16:45:ed:73:75:
         d3:45:69:b9:96:73:f5:0c:81:3a:ae:9e:15:45:e9:52:03:20:
         74:4f:5d:05:6a:14:d8:0d:6c:37:f4:f0:74:a3:44:ca:8b:6d:
         5d:44:f6:ba:a6:f9:51:89:80:9a:fe:e4:2b:b1:89:25:99:28:
         fa:21:22:f0:24:00:eb:10:0d:ac:b1:d2:8a:78:e0:68:cb:7c:
         73:92:f7:ee:bf:e5:bc:e1:f7:5b:17:23:19:6f:ea:aa:70:47:
         28:2f:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:26:20 2026 by rpki-client