Error: rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
File:                     FecT_XtiDOPJk1SgfTe6g3Eym0c.mft (raw, json)
Hash identifier:          3gZDD8vdBezPZ+qMhElYnFLMsaJZKhb5THfy8/uxWtQ=
Subject key identifier:   0F:38:5F:EB:4E:19:C5:2B:D1:EE:B7:8B:CE:9E:02:1B:68:0F:FB:81
Authority key identifier: 15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47
Certificate issuer:       /CN=F369EC27AF/serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47
Certificate serial:       0509
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
Manifest number:          0507
Signing time:             Sun 20 Sep 2026 03:23:08 +0000
Manifest this update:     Sun 20 Sep 2026 03:23:07 +0000
Manifest next update:     Tue 22 Sep 2026 03:23:07 +0000
Files and hashes:         1: FecT_XtiDOPJk1SgfTe6g3Eym0c.crl (hash: 6v1qSeut/CpY2afLv+EiZrr906Ku6cbMPFP4nt34fWY=)
                          2: E20EF7DC897C11F1AC00E2D5CE1D38B0.roa (hash: ohBLTRzbp9O9wrakw6aPhVPvIHpEhKPcAMJ8K/f6vL4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369EC27AF, serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47
        Validity
            Not Before: Sep 20 03:23:07 2026 GMT
            Not After : Sep 22 03:23:07 2026 GMT
        Subject: CN=6aaf519c-db8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:ea:83:07:14:90:e7:f3:10:61:21:97:21:
                    43:79:77:33:b5:c7:03:7e:50:64:58:18:bd:99:5f:
                    09:bd:4b:eb:76:a0:ff:e1:71:88:a1:a6:d4:98:36:
                    71:54:11:57:35:0c:dc:7b:bf:5d:cd:d5:d0:23:cc:
                    ae:46:b9:f9:a0:8f:78:73:95:c1:d3:73:ad:a4:f3:
                    15:98:b2:0a:0a:9a:0d:e5:50:33:04:d2:0a:ae:43:
                    56:d5:31:af:e8:7f:94:76:1f:c3:70:6f:92:1f:04:
                    60:a0:09:7c:63:b3:dc:ba:97:b9:fc:a0:02:17:45:
                    70:d9:99:32:1d:f3:7f:eb:fd:05:5c:54:5a:8c:ef:
                    13:0a:97:65:ae:74:c9:d1:d5:e6:65:d8:25:99:d3:
                    6e:7f:fa:3a:a4:5f:d9:d7:25:1a:e1:6e:41:d2:ad:
                    2d:d1:df:d8:fe:b5:49:97:c8:dd:b2:08:c1:3c:2a:
                    c4:af:83:86:42:70:af:e6:25:38:d8:4a:cf:22:8f:
                    3a:1a:ac:e6:af:85:bd:5e:00:d9:ea:80:9d:7b:9c:
                    62:9f:9c:47:2a:7d:c4:98:c9:51:38:88:c9:b5:c9:
                    ad:04:e6:48:95:8f:83:51:fc:84:04:70:9d:88:0e:
                    af:65:1d:b3:53:d2:15:ea:60:48:0c:b6:b2:43:3b:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:38:5F:EB:4E:19:C5:2B:D1:EE:B7:8B:CE:9E:02:1B:68:0F:FB:81
            X509v3 Authority Key Identifier:
                keyid:15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:69:45:08:ce:f0:31:2f:24:de:a0:53:85:12:4c:43:ec:
         7e:9b:12:09:5b:29:ef:2a:30:10:14:9d:98:d3:a2:7e:dc:69:
         91:3b:1c:d9:b4:e3:6a:9f:60:85:cd:04:6c:4c:bc:79:2e:b4:
         a6:a1:8e:7f:b9:b1:31:91:af:10:27:85:a4:1f:91:ce:b1:8f:
         29:76:35:df:3b:3a:70:88:ab:09:c5:f2:29:9d:91:9e:44:3b:
         df:92:a7:c0:20:cb:7e:ed:86:46:d5:00:17:58:69:d4:5f:8d:
         4f:78:01:8f:28:6f:1f:67:d7:b3:25:7f:ae:48:93:56:78:de:
         03:bf:dc:ab:20:58:55:0f:36:ff:49:bf:75:17:eb:b1:5c:96:
         9e:67:a7:84:55:f6:e6:ed:28:11:5f:2d:4f:43:60:17:0b:d4:
         37:53:3d:c2:69:16:8c:91:79:5f:5b:d4:e3:70:b9:6f:0e:89:
         3a:2e:9c:0a:44:ae:93:82:37:2c:fc:27:41:d9:bf:4d:1c:10:
         71:ef:a2:a7:71:14:78:f7:c7:80:88:14:af:c0:33:48:58:2e:
         fe:59:78:5c:52:9a:33:b6:9f:9e:e1:0a:80:90:0a:03:85:c8:
         25:0e:12:09:83:fc:60:29:29:2f:e9:84:00:2a:89:d9:92:55:
         ad:69:3b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:57:23 2026 by rpki-client