Error: rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
File:                     LN9YDjdnVbH4xogIQhJt1j3XTuc.mft (raw, json)
Hash identifier:          TkAgE6vHz/PcgJuYjx7EczPUJom40azK9JF9iYvBO8E=
Subject key identifier:   D4:60:9D:FF:0B:F0:D4:61:26:2B:45:96:2C:66:EF:6C:61:28:5D:F2
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       0969
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
Manifest number:          0957
Signing time:             Sun 15 Nov 2026 01:52:37 +0000
Manifest this update:     Sun 15 Nov 2026 01:52:37 +0000
Manifest next update:     Tue 17 Nov 2026 01:52:37 +0000
Files and hashes:         1: LN9YDjdnVbH4xogIQhJt1j3XTuc.crl (hash: FL0mhkCVZeBkvbdYHJ+EW83RwbBrQxqwGpUujL/yv5E=)
                          2: 273CF154890F11EEAE5F7C364AD9E6FC.roa (hash: 6Zyoo60Pz+GnvK6rZB7VRukfQvQPSJF7/Al01Yw7AE8=)
                          3: C01FDA868C9911F18503E1DCCE1D38B0.roa (hash: kQtLsW7D9ICZ09fDE52xx9CZ7qcYPPsGFlQk50LU9yY=)
                          4: 05C23B208C9911F18B7848D8CE1D38B0.roa (hash: UBe/FinZwlLfNd1I4Bm1Xqdo/RNekj20lzTVHaiEBsk=)
                          5: 718E7D0C86B111F19930B2BDCE1D38B0.roa (hash: nBpUPuhm+PdhHS8iH4gpkrl2A2IJbJ1GitlJ8/Nq+0o=)
                          6: EF27689C86A611F18F5DC2FDCE1D38B0.roa (hash: hoi8TgbPp6u8/kTs9rFoka8RNFl9NxDAJ/DZIKG0zYc=)
                          7: 9799CAE68C9811F1BA0F14D6CE1D38B0.roa (hash: TCzfsB8L6naHhIMK6FDSVqSB8/tnKisssUeS0Sja/pM=)
                          8: 66B4A4A48C9911F1BCD0C4DACE1D38B0.roa (hash: 1ybCzxMXlxjH4FAEOI1Qgd0351KDCVr4YxHCk74ZKG4=)
                          9: B65B4AFA86B111F1B35420BECE1D38B0.roa (hash: kmExG71hjRrSnQLc9Za9djJ4yDfiRKmuCxsWcutkbII=)
                          10: 2E8F703A8C9A11F19CA16FDFCE1D38B0.roa (hash: 0LNHFPvTTVmKRurY7oAMszXzqgYdND56d0u2tu3Tva4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2409 (0x969)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Nov 15 01:52:37 2026 GMT
            Not After : Nov 17 01:52:37 2026 GMT
        Subject: CN=6af91065-497e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:ab:55:49:d1:6f:df:3b:e1:7d:ec:9e:32:
                    10:5b:2e:f2:ba:69:d2:a3:2c:6d:db:62:3d:4e:ed:
                    8d:69:cd:44:75:8b:ef:3a:22:0d:c8:f1:28:7b:ac:
                    bc:f7:ff:32:81:a8:53:ae:15:01:34:1c:a9:17:0d:
                    8d:3f:a5:10:3c:58:4d:76:0c:b0:13:84:28:54:23:
                    c8:fa:85:63:3c:ca:d3:d2:8f:8c:e6:68:a2:0f:33:
                    f5:43:a5:01:da:3b:4e:80:07:fd:9b:fb:eb:91:e6:
                    39:28:d1:f3:41:5d:6d:f3:29:ef:01:fe:18:a1:22:
                    e2:62:5e:ce:52:96:cc:e0:2c:2a:40:85:3c:55:49:
                    e5:d0:fe:fb:6b:76:d5:d6:aa:f8:11:1b:91:28:fb:
                    ca:6a:fd:34:7d:11:47:ea:70:20:66:75:6b:f4:5f:
                    58:c2:cc:cd:72:7d:87:2d:37:4b:72:ed:a4:ed:5c:
                    75:90:7a:b3:69:84:18:9f:55:73:42:42:89:c4:3b:
                    69:db:e5:08:1e:d0:b3:3f:f0:fc:5e:88:8b:36:97:
                    81:e6:0b:b2:39:45:b7:f2:3c:97:c9:b3:b7:54:0c:
                    b8:2a:f1:eb:02:d3:bc:19:44:a0:3d:1d:cd:06:1c:
                    a8:16:fc:40:bc:d4:31:87:8d:4c:69:e0:6e:e8:bd:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:60:9D:FF:0B:F0:D4:61:26:2B:45:96:2C:66:EF:6C:61:28:5D:F2
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:61:0d:03:4c:36:a1:67:4a:99:a2:06:db:9e:db:06:58:26:
         fa:52:86:b3:36:77:63:e8:da:62:70:84:09:47:ac:fe:df:e4:
         18:ac:b3:24:aa:f9:f0:df:78:8f:5d:b5:dd:0c:67:0c:95:17:
         d6:d5:df:31:12:e0:44:b0:7f:42:39:f6:80:3e:e3:d1:25:ba:
         b7:f6:e2:43:37:ba:5f:4c:26:b7:9c:8b:82:fd:bc:aa:ca:79:
         f5:60:16:00:10:0f:4f:32:a3:8b:29:3e:2c:7b:e1:f7:5f:cd:
         02:79:ac:10:e9:a3:fc:f0:40:d7:f2:fe:af:e9:92:54:9b:51:
         46:e8:37:4c:ae:28:c0:8c:3e:2f:94:5c:1f:7b:61:20:e4:0d:
         8c:22:cc:14:b5:f1:5b:14:17:0f:70:88:da:a8:35:4c:b8:1c:
         11:c4:fe:13:74:d0:01:20:88:a7:56:fe:e8:2d:ad:fc:f9:82:
         f9:b6:94:0c:b7:f6:38:b3:62:39:5b:a4:0b:e0:7b:4b:2d:ce:
         db:ad:4f:bf:79:f1:77:e0:ce:f2:35:61:5f:e3:b9:56:58:75:
         18:1c:23:c7:1e:f0:7d:fe:70:c5:5b:5f:47:14:21:9f:f0:59:
         ce:33:ac:bb:be:74:29:3f:96:1c:d9:66:dc:7f:e7:2b:09:cd:
         39:12:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:33:40 2026 by rpki-client