Error: rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
File:                     x2kBfEr3fF65-LyEaI2IawFQMjo.mft (raw, json)
Hash identifier:          om/vYMaiWGRV5F2oowndeLOq2gk9hkdVOuNvBeMbClk=
Subject key identifier:   2A:0D:07:F9:60:87:2B:C2:BA:9A:50:52:46:11:BD:C8:3F:11:51:E7
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Certificate issuer:       /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial:       059D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
Manifest number:          0596
Signing time:             Mon 21 Sep 2026 03:05:44 +0000
Manifest this update:     Mon 21 Sep 2026 03:05:43 +0000
Manifest next update:     Wed 23 Sep 2026 03:05:43 +0000
Files and hashes:         1: x2kBfEr3fF65-LyEaI2IawFQMjo.crl (hash: oryp2etzDkP+dXx88iHIRknBf0/L4Tzo1SDycGGqmp0=)
                          2: 3196566E8B6311F19E3E65EBCE1D38B0.roa (hash: v7y9eUAibJifVNLUl1+W1iLBl8UIok0yyshaY1ZA/e0=)
                          3: 72225BFEA05C11EFA3BA68B5762E951A.roa (hash: ptoIi4ERlN82BasAiG/RRS1jzH5R046ZZLHto70J/kQ=)
                          4: 901FE13E898B11F1AAC9AAAFCE1D38B0.roa (hash: uWhuNuHaUJY3NQlHsMC9E6dmoj2aQb7rOfWxrMfLF8I=)
                          5: 6F61D56CD3F011EF874D80BD762E951A.roa (hash: aQ5eotveqGJrhssXyUfqPg5E0r4EtEOvK2qBBQ8Oc9Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E4C8AF, serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
        Validity
            Not Before: Sep 21 03:05:43 2026 GMT
            Not After : Sep 23 03:05:43 2026 GMT
        Subject: CN=6ab09f08-8062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:c1:fb:62:6a:0f:eb:16:49:a2:63:8f:ed:
                    bb:76:85:de:90:4e:d2:d8:c7:03:e8:8c:b8:68:a1:
                    86:5f:da:b3:19:60:fe:08:98:ed:d0:51:60:e6:37:
                    45:52:03:6f:87:b2:84:38:54:2c:73:6c:ec:1c:d5:
                    3c:28:14:88:49:43:5c:d7:e8:db:1c:cf:5a:d2:3e:
                    55:ba:62:4f:a2:33:d7:41:6c:ad:f3:9d:d8:f0:78:
                    c1:63:b8:7f:93:8c:b1:1d:46:aa:d2:74:cc:e7:79:
                    41:8e:70:21:a8:c2:45:b6:ab:32:1a:4b:ac:f4:29:
                    f9:91:6e:d9:d2:e1:e4:ce:8d:8b:89:13:83:01:6c:
                    31:2a:62:9c:b3:7a:3a:1f:ed:f1:bf:dc:ba:15:23:
                    ab:32:bb:49:97:a8:c7:95:b5:3f:19:bd:2a:6f:55:
                    b6:e1:bc:a3:e0:94:b0:5a:2f:3d:ea:cd:4d:f4:92:
                    49:83:2f:c6:7d:9e:2e:f3:57:e0:39:82:8b:52:4d:
                    d1:b3:92:57:71:49:45:dd:56:01:76:af:00:c8:4a:
                    3c:5e:52:ea:14:b5:89:55:2a:54:3c:1e:8e:da:c3:
                    ba:e6:81:04:45:6b:18:4d:40:10:69:54:32:0e:a0:
                    55:df:58:ab:82:33:15:2f:e0:a0:33:ce:d2:93:6a:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0D:07:F9:60:87:2B:C2:BA:9A:50:52:46:11:BD:C8:3F:11:51:E7
            X509v3 Authority Key Identifier:
                keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:dc:50:94:95:e6:c8:52:66:3a:12:24:58:d2:b6:14:51:c7:
         59:55:42:92:ae:61:98:f5:31:9d:a4:b8:33:7a:3b:ed:54:7c:
         f4:93:fa:f3:e5:88:87:3d:75:f4:3a:d2:7c:94:7c:22:23:64:
         f6:65:41:2f:a0:1a:4f:c7:a8:1d:38:78:8a:cb:d2:95:bf:2e:
         5e:fd:73:28:15:6f:6b:31:c1:ac:ad:7a:83:01:0f:a7:2b:fd:
         9b:65:c0:52:a3:90:2d:29:1d:82:03:aa:89:62:58:c2:4f:5f:
         ee:a0:e5:8d:59:5f:a7:b6:52:d3:d0:8c:35:5c:88:81:c2:6c:
         b5:9d:05:79:9d:84:c0:d7:5f:8d:62:53:9c:a1:d3:db:f7:66:
         f7:cd:62:fd:e5:aa:a3:07:dc:01:69:50:6a:45:a7:40:42:9f:
         0b:4e:91:8e:79:e3:27:19:be:d6:68:c2:46:86:72:1d:d1:4c:
         ed:e7:ef:07:98:ca:c3:9f:ae:17:1b:08:1d:f2:c7:34:b6:52:
         5d:21:a5:cc:3e:1d:7c:b6:a8:cc:32:c7:6d:f0:59:5f:8e:fe:
         e3:3e:f4:3c:72:16:8d:66:95:1a:2b:c3:66:bd:b8:08:27:0b:
         87:f6:14:df:dd:0e:d7:df:8f:18:52:e2:7f:e8:fe:fc:b4:e0:
         5c:dd:7a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:13:39 2026 by rpki-client