Error: rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
File:                     EoXp9a6JDQnrah2cFSaY2CVpQXM.mft (raw, json)
Hash identifier:          vLjgNSattiqN26MY64/6nDGm6v7TFdJkWpiAVG8s4Eo=
Subject key identifier:   4E:8B:57:7A:EE:48:F2:97:67:F4:63:C4:D4:BE:1D:5B:B0:C4:02:AA
Authority key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Certificate issuer:       /CN=F36B2D09AF/serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Certificate serial:       0353
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
Manifest number:          0351
Signing time:             Sun 20 Sep 2026 04:14:14 +0000
Manifest this update:     Sun 20 Sep 2026 04:14:13 +0000
Manifest next update:     Tue 22 Sep 2026 04:14:13 +0000
Files and hashes:         1: EoXp9a6JDQnrah2cFSaY2CVpQXM.crl (hash: /c1n7qvvcpgpMZ/mndc61ga6yRJQr+FRObQlBoVNCcc=)
                          2: 81A877024B1B11EF97889885762E951A.roa (hash: Jb7FsCfPieRiHewZHkBoyTfyXOoZ5GSQBgW72tN/jmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851 (0x353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2D09AF, serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
        Validity
            Not Before: Sep 20 04:14:13 2026 GMT
            Not After : Sep 22 04:14:13 2026 GMT
        Subject: CN=6aaf5d95-86d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:16:a2:e5:36:61:95:b0:99:9d:98:2c:e2:45:
                    26:81:ea:a5:21:00:1b:12:a3:c0:92:3a:55:70:7b:
                    82:e5:50:f8:21:01:1d:f9:41:8c:26:b1:c7:7a:9e:
                    7b:06:b7:f8:95:84:a2:26:54:1f:4d:a5:93:32:0a:
                    d0:d6:10:25:67:d6:f2:17:a1:89:bf:a3:ee:1a:bc:
                    5a:cc:21:fe:da:a2:81:54:cf:91:6e:b4:c5:83:e4:
                    60:57:54:1f:c2:3d:99:55:fd:ee:f0:5a:52:13:42:
                    da:6a:fa:2d:87:e8:10:9e:6c:ef:09:02:38:2e:e8:
                    26:a8:de:af:82:5f:0d:31:97:48:c4:31:47:d1:b8:
                    6f:17:89:ce:4b:2f:41:aa:a2:6f:30:63:1a:30:40:
                    b8:97:ca:f7:bc:58:a1:ec:8a:07:99:87:1a:a8:ad:
                    b1:f6:aa:d3:ff:99:85:09:b9:e1:8f:01:83:6d:4c:
                    95:3d:5c:db:fd:54:65:b0:89:8b:e8:ae:92:0a:aa:
                    a2:e1:2e:c2:58:3d:e9:b7:18:ee:71:d6:8b:96:e9:
                    a9:83:ed:87:d4:3e:fe:ea:31:6c:d1:50:6d:53:25:
                    8d:98:49:02:72:33:4a:6a:75:94:dd:4d:18:40:23:
                    c1:41:53:c1:af:80:7a:73:f7:03:a4:74:44:74:17:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8B:57:7A:EE:48:F2:97:67:F4:63:C4:D4:BE:1D:5B:B0:C4:02:AA
            X509v3 Authority Key Identifier:
                keyid:12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a8:c8:6a:54:c2:b0:3e:e9:e9:f5:c9:d6:64:aa:5e:f9:14:
         cd:30:f9:20:27:bb:0a:18:c1:bb:54:1f:21:32:ab:91:fb:0f:
         59:ab:ce:39:47:0c:44:87:bb:22:d3:91:e0:7b:45:e2:2e:a8:
         44:14:e9:1e:2e:d2:67:32:c1:9d:bb:f3:f1:7d:74:8b:51:85:
         ac:4f:f8:fa:38:9a:d9:21:78:5c:28:f5:1d:77:7a:1e:c0:3b:
         02:a2:2f:47:cc:8e:ad:b1:76:04:67:38:7f:a2:74:74:ad:05:
         99:a5:24:10:c1:4f:98:b8:56:c9:27:65:e5:74:df:46:56:ff:
         13:db:e9:33:3c:b4:72:10:91:c6:52:30:3b:dc:05:56:01:6e:
         4a:2a:ec:ce:ae:a8:53:ba:fc:99:e5:9d:3b:d3:54:c6:bd:99:
         f0:94:83:af:0f:17:c8:3c:57:b4:d3:91:07:76:7b:54:15:90:
         45:f2:f0:f8:80:18:26:3f:43:eb:bd:db:07:1d:24:32:06:42:
         af:40:e9:01:5a:c1:d6:15:9f:b9:3f:d3:34:15:47:29:3c:5c:
         77:26:30:af:08:41:8d:c4:48:6d:6f:e2:b9:22:3b:72:fd:a1:
         f0:9c:33:11:2a:56:19:0e:de:f4:d3:49:8d:60:f7:a6:6a:f4:
         35:42:55:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:53:06 2026 by rpki-client