Error: rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
File:                     FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft (raw, json)
Hash identifier:          PN5y9ezzTbuQfyg18x087UZVwIZsOk8zQcWHLOrR63o=
Subject key identifier:   63:FC:DA:79:5C:7A:D5:45:97:09:A5:1D:40:2A:2A:56:00:FF:D4:5B
Authority key identifier: 16:C3:69:2A:83:39:1D:C8:FB:92:2E:9E:0F:15:A6:85:E5:44:67:69
Certificate issuer:       /CN=F3634E30AF/serialNumber=16C3692A83391DC8FB922E9E0F15A685E5446769
Certificate serial:       106C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
Manifest number:          106C
Signing time:             Thu 24 Sep 2026 00:50:55 +0000
Manifest this update:     Thu 24 Sep 2026 00:50:54 +0000
Manifest next update:     Sat 26 Sep 2026 00:50:54 +0000
Files and hashes:         1: FsNpKoM5Hcj7ki6eDxWmheVEZ2k.crl (hash: EQuHKGsrRKtfnLvwhvbjWlNv+LpdfWXqlhNrf2CtFSs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4204 (0x106c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634E30AF, serialNumber=16C3692A83391DC8FB922E9E0F15A685E5446769
        Validity
            Not Before: Sep 24 00:50:54 2026 GMT
            Not After : Sep 26 00:50:54 2026 GMT
        Subject: CN=6ab473ee-51c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:63:20:3e:1e:29:87:ed:69:e9:99:ac:e3:d4:
                    b3:95:22:1d:ea:81:cf:a3:b9:9c:31:78:de:f4:70:
                    7d:7f:dc:37:8b:c9:7c:7b:5e:76:a2:f1:70:cd:f4:
                    c7:bd:c2:23:fa:9e:91:d1:53:0c:0c:03:33:95:fd:
                    f5:4d:7a:e4:13:2f:89:82:76:e8:ac:3f:e0:45:b2:
                    3f:f6:9b:39:ec:06:45:bc:32:d3:72:06:d0:f2:40:
                    59:40:09:77:25:2b:aa:b6:6b:ff:a5:34:61:85:6b:
                    34:c3:11:74:47:9b:c5:61:f7:7b:f9:c7:8e:bf:cd:
                    6a:ea:6d:fd:1c:1a:93:60:b3:71:c1:c6:66:f7:96:
                    16:32:6d:65:21:15:e0:93:ec:19:b5:d1:77:4c:9f:
                    21:57:00:fd:4d:99:ad:2f:f9:82:30:24:5b:2a:4e:
                    31:2a:5b:de:f4:dc:be:98:9a:47:a5:8d:6d:56:3d:
                    3e:10:c4:09:32:2c:5c:db:1a:7a:75:d6:a1:c4:30:
                    b7:c8:27:91:58:a0:c6:ef:86:e6:20:d7:c0:24:50:
                    75:9f:cf:e0:b6:38:f7:b6:3d:d2:87:f3:c7:8c:dd:
                    9c:b0:8e:79:0e:93:59:80:73:19:3d:70:2d:19:99:
                    61:01:5c:52:36:0e:ef:35:b7:23:45:3b:cc:fa:40:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FC:DA:79:5C:7A:D5:45:97:09:A5:1D:40:2A:2A:56:00:FF:D4:5B
            X509v3 Authority Key Identifier:
                keyid:16:C3:69:2A:83:39:1D:C8:FB:92:2E:9E:0F:15:A6:85:E5:44:67:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:23:0a:7f:98:7c:93:0c:b2:9d:01:8f:f6:d2:f2:45:8a:72:
         a5:0b:97:21:99:47:23:13:b9:ec:66:bd:26:55:65:f1:5c:65:
         4d:21:fc:47:9b:79:cf:a7:2f:49:e6:3a:9c:58:db:fa:14:26:
         bd:ed:54:00:4b:bb:d5:53:36:fd:30:9d:9e:d1:75:c6:dd:dd:
         e2:59:11:dc:e6:ba:c2:06:f5:cf:cc:88:02:81:23:1e:48:99:
         ca:4e:a0:2c:fc:b4:15:22:94:ad:16:fe:31:83:7e:ca:e7:3d:
         e7:18:9b:c4:ac:d1:33:75:44:00:60:54:97:fc:a5:19:3a:85:
         f1:fe:2d:7e:3f:e1:9e:76:55:2c:21:b3:4d:d4:bd:81:90:8a:
         c7:fc:11:7f:bc:2d:95:b7:bf:00:1f:a3:44:cd:e3:97:b4:ac:
         73:3a:10:26:f3:f0:83:8d:1f:92:17:1d:8a:98:e4:01:f7:df:
         c5:e1:1d:0c:aa:30:15:84:a3:aa:2d:11:fd:78:05:b2:74:7c:
         ef:36:4d:70:02:92:50:90:7f:8d:24:f0:23:8f:97:bd:0c:fc:
         f7:34:87:d4:2c:48:86:f9:47:fa:45:cd:36:cf:1a:4a:4c:a7:
         ec:05:b9:39:de:bd:7b:1e:43:71:50:42:6e:98:e5:38:21:8f:
         70:48:58:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:27:35 2026 by rpki-client