Error: rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
File:                     eJra0zjCDXJE3Hvm0PRKklP8jxM.mft (raw, json)
Hash identifier:          dq9YDofRWV+ahXA2xhGhqO2STgh1JxvspYRBtknLly4=
Subject key identifier:   E1:AD:57:4A:FD:CA:75:99:23:DF:69:69:9F:4B:39:D3:64:A9:22:47
Authority key identifier: 78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
Certificate issuer:       /CN=F36EE687AF/serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
Certificate serial:       0245
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
Manifest number:          0243
Signing time:             Mon 28 Sep 2026 04:50:54 +0000
Manifest this update:     Mon 28 Sep 2026 04:50:53 +0000
Manifest next update:     Wed 30 Sep 2026 04:50:53 +0000
Files and hashes:         1: eJra0zjCDXJE3Hvm0PRKklP8jxM.crl (hash: 8j9+OwpQE0ljStOmQn0lUAcuL6C1CKhUqUx/+3wIYUI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE687AF, serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
        Validity
            Not Before: Sep 28 04:50:53 2026 GMT
            Not After : Sep 30 04:50:53 2026 GMT
        Subject: CN=6ab9f22e-53b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1d:78:cf:39:5d:7f:e5:1e:ae:38:aa:8d:e4:
                    00:b0:e9:5c:db:c3:ee:0d:02:68:99:c2:16:18:42:
                    0c:56:d8:3f:f8:5c:db:4e:0e:e1:b7:51:51:c3:0f:
                    0e:01:0e:fa:d8:da:63:a2:d8:06:ef:94:5b:e6:5e:
                    ad:95:81:77:b0:ce:77:3c:26:a2:30:82:5e:2c:34:
                    2b:76:9e:ba:dc:df:00:1c:c9:d3:96:47:12:9a:54:
                    75:e4:df:63:ff:b4:78:a7:6f:4c:bc:3d:84:b7:eb:
                    f8:1e:a5:4a:bc:ba:07:87:ca:63:14:db:9d:e4:16:
                    13:05:d9:7d:4d:da:c0:80:93:68:63:62:eb:cf:a0:
                    b2:c7:b2:47:09:e1:72:ff:42:4f:46:b6:c8:8c:c9:
                    03:64:1f:1e:a2:37:d6:16:ca:fb:ce:47:8c:1c:99:
                    c2:36:f1:ee:db:2d:f2:6d:b2:4e:f5:28:86:65:f9:
                    b5:43:b2:78:32:1f:92:5b:ac:21:00:9d:6f:3b:34:
                    26:0a:3d:83:bc:3d:9b:e8:c0:9f:60:04:9a:92:b8:
                    8b:eb:30:0f:60:03:a8:a9:05:7c:fd:f7:0e:6b:48:
                    c1:09:a7:b9:7e:f6:c6:a0:82:28:e8:49:a7:7a:6b:
                    cc:59:83:a7:6e:16:fb:2b:fd:ec:b7:27:97:a2:21:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AD:57:4A:FD:CA:75:99:23:DF:69:69:9F:4B:39:D3:64:A9:22:47
            X509v3 Authority Key Identifier:
                keyid:78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:9e:1e:fd:ac:97:bc:45:02:12:24:85:a0:42:ed:e1:04:
         c0:cc:70:20:7f:3d:3e:e0:e4:b2:60:b4:68:9f:8e:81:46:30:
         74:1f:f8:77:7b:1c:17:3b:a9:ac:c7:02:23:60:7f:54:c8:90:
         4c:d8:1e:4f:bb:a5:c7:dd:0b:12:d7:96:91:12:46:f1:95:a4:
         db:4b:69:82:fc:33:07:1d:c0:23:20:a4:5c:a5:f7:f3:33:48:
         ff:15:e4:9e:23:e6:05:de:4f:30:8f:2e:05:d2:b7:d9:76:3e:
         16:21:4a:2c:17:35:19:2d:5b:9d:b5:ab:0d:01:a6:06:b8:8b:
         ec:4d:43:1e:e2:bd:4c:e6:bd:2d:8e:5f:7a:17:ca:89:9c:d8:
         2a:eb:82:1e:ec:0c:65:eb:ce:39:77:9a:af:5d:bf:34:ae:cb:
         c0:6e:67:9d:f8:1a:37:42:e4:6c:89:70:ed:d9:de:a6:c9:76:
         ae:dd:1b:c3:77:18:d3:50:b2:47:9f:00:1e:ab:62:23:a4:1b:
         45:f6:64:3f:5c:69:2f:e2:ca:6a:94:b3:20:5d:d2:11:48:eb:
         41:48:5a:3b:6d:94:36:2a:dc:63:91:62:02:ec:97:2d:eb:50:
         5f:06:0a:9f:ea:d1:0b:53:38:d5:c6:42:23:23:c6:51:90:17:
         db:33:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:36:13 2026 by rpki-client