Error: rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier:          cxm/4GWhL5QVs7QNwstl5uHBYb38Vo07jFwwqZg3/20=
Subject key identifier:   0F:AA:65:81:CB:15:BB:CD:EC:63:A5:AF:F0:AD:F0:2A:A0:23:36:F8
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer:       /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial:       03EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number:          03E7
Signing time:             Sun 27 Sep 2026 03:59:39 +0000
Manifest this update:     Sun 27 Sep 2026 03:59:38 +0000
Manifest next update:     Tue 29 Sep 2026 03:59:38 +0000
Files and hashes:         1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: dE4LJtoYwqq55szwooHmUAH8Jd2PYBAiycj8lbcoF7E=)
                          2: 87EA2752EF1E11F08B7866E1DAE4EC9C.roa (hash: Q4yvfJ2PRd3f4hAg3X9HjuGU4CPdrmiZC3xQ6gffVvs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004 (0x3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D4AAF, serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Validity
            Not Before: Sep 27 03:59:38 2026 GMT
            Not After : Sep 29 03:59:38 2026 GMT
        Subject: CN=6ab894ab-2fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:10:e6:15:ae:b9:f0:ab:cf:9b:55:09:f2:
                    3e:e8:0d:10:c7:b5:50:72:01:23:41:2b:7e:3a:f6:
                    40:c7:23:88:ad:0e:f0:38:d4:6b:70:f5:b7:72:35:
                    3a:dd:4e:4f:00:93:97:13:f6:f4:59:22:e1:25:46:
                    27:19:9e:32:ce:b2:d5:e4:ab:90:a7:77:27:b7:b5:
                    00:5c:8d:f1:a6:2e:b4:3f:8b:81:9d:88:1e:d7:b1:
                    36:08:ac:24:12:15:fc:08:39:bc:dc:7d:ee:d8:75:
                    c4:67:d1:95:52:82:c4:b7:a8:44:11:df:c0:15:2e:
                    ef:8c:99:f8:25:14:8a:fe:97:9b:dc:21:b3:96:38:
                    6f:81:93:52:40:09:8f:56:79:b1:28:be:7b:db:eb:
                    6c:a6:a2:15:71:45:e5:e3:55:54:dc:fb:05:44:22:
                    31:e8:9b:94:c2:a8:b4:c4:45:a6:98:b5:e1:38:24:
                    4b:56:fc:45:f6:85:a0:fa:2f:52:78:da:99:1b:55:
                    cd:fe:83:7c:31:0d:63:fd:8d:52:e5:18:63:56:20:
                    87:11:72:c5:3b:58:c6:06:75:3d:ce:bb:b3:29:89:
                    71:08:64:c1:1e:44:a9:28:16:2b:b7:0c:57:48:41:
                    f8:9c:90:52:f6:3f:65:9c:28:d1:1e:a3:98:be:aa:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AA:65:81:CB:15:BB:CD:EC:63:A5:AF:F0:AD:F0:2A:A0:23:36:F8
            X509v3 Authority Key Identifier:
                keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:01:01:d6:f5:1f:56:84:80:ff:83:0b:22:ac:ea:6a:28:
         cc:5e:d2:dc:3e:18:91:ed:e0:de:6e:4f:a7:ef:5b:ee:b5:e9:
         bf:c1:65:54:0a:c6:e9:5b:8a:b4:e2:ae:98:ab:ab:63:1a:2a:
         65:c3:5c:7c:fc:e8:58:48:ec:83:83:dc:f5:e0:de:59:45:7b:
         30:78:df:49:5d:11:ed:0d:d9:78:53:b0:b6:20:d4:aa:a4:de:
         74:ef:85:ed:1b:82:e9:27:ab:84:80:f1:01:83:5d:1f:03:33:
         64:2b:d3:93:6b:d5:e7:1d:2d:dc:a8:91:98:b5:c5:43:88:3c:
         da:c0:84:fe:13:cc:5e:09:9e:19:ab:9f:6b:47:eb:cd:b7:dd:
         75:85:60:5e:80:ce:a0:f5:40:b6:5a:45:c9:c3:17:66:e3:cb:
         1d:7c:86:36:96:3e:d4:90:10:fe:0a:a5:8a:fe:c6:37:86:3f:
         cd:e3:9f:d2:23:ce:ad:12:00:66:05:9e:f1:00:57:37:1f:2e:
         c8:38:0d:73:9a:f3:4e:83:48:4c:50:e6:fd:bc:ea:46:6b:f8:
         03:b9:1c:96:58:95:f2:3d:bb:6e:1d:c6:f3:a3:20:e3:99:a1:
         77:a0:9f:de:01:de:27:61:7a:bd:57:04:94:a4:69:03:c1:80:
         49:1b:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:31:47 2026 by rpki-client