Error: rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
File:                     E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft (raw, json)
Hash identifier:          8ue1xYTGVY9dRfXf3wkMH0INynOHS3OqZ0hO+JZyf2g=
Subject key identifier:   0A:3C:F3:87:C0:EF:55:17:55:1E:17:A2:37:4B:86:8E:DC:C8:4E:40
Authority key identifier: 13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD
Certificate issuer:       /CN=F3663C93AF/serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
Certificate serial:       040B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
Manifest number:          0403
Signing time:             Sun 11 Oct 2026 03:57:12 +0000
Manifest this update:     Sun 11 Oct 2026 03:57:11 +0000
Manifest next update:     Tue 13 Oct 2026 03:57:11 +0000
Files and hashes:         1: E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl (hash: xHo2Q4lOP8K47vwbe3FtCNYrAc84JCQua24KZEyhiYg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663C93AF, serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
        Validity
            Not Before: Oct 11 03:57:11 2026 GMT
            Not After : Oct 13 03:57:11 2026 GMT
        Subject: CN=6acb0918-b77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:45:0f:5a:52:c8:83:ec:0a:2f:8f:93:9d:
                    45:10:c9:71:a2:43:76:7b:5d:fe:2a:35:ce:60:cc:
                    89:67:25:b3:f3:7e:64:2d:39:ae:fb:7d:b0:0f:f0:
                    18:f0:ba:01:ef:bc:00:fb:ba:f9:c8:af:03:54:4a:
                    e0:0c:a3:7f:8f:ab:46:97:24:92:33:5f:e1:3b:d2:
                    86:f1:9a:bd:af:c1:82:ff:29:18:24:af:98:a4:f0:
                    3f:ae:a6:b0:97:50:2e:16:32:71:de:1a:1e:eb:b3:
                    e3:63:2f:86:ca:0c:39:66:7d:b7:2c:2d:7d:95:35:
                    24:56:e6:89:00:74:39:71:de:89:1e:36:b8:ba:b5:
                    24:92:42:99:dc:0a:74:ae:74:0d:07:2b:5c:51:8a:
                    fb:8f:e3:67:7f:ae:5d:68:b4:5d:56:78:86:7b:7b:
                    64:99:a8:1d:6f:77:a7:b9:97:56:0e:5e:6a:d6:ae:
                    68:ae:c0:fb:50:cb:4c:e2:cf:10:0f:b1:24:01:75:
                    e5:49:32:44:ff:5e:95:c0:80:9e:61:1b:4b:8b:ae:
                    f6:14:6e:ed:4d:81:a3:f1:67:85:cc:ae:06:49:2a:
                    6f:55:28:7b:6a:d7:f3:fe:78:d5:ea:d2:03:ab:74:
                    ce:18:16:d5:6d:4e:c9:bb:a6:09:0d:3b:7a:f6:1c:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3C:F3:87:C0:EF:55:17:55:1E:17:A2:37:4B:86:8E:DC:C8:4E:40
            X509v3 Authority Key Identifier:
                keyid:13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0a:6e:ad:59:d7:c9:40:d6:1e:53:c2:9d:c8:10:03:06:e9:
         2f:3c:e5:87:cb:4d:13:a1:2c:8b:0d:41:03:86:95:9b:eb:f1:
         22:23:01:a3:6c:6b:ad:4c:6f:cf:00:09:e0:8b:dc:fa:94:57:
         5f:61:e0:d5:25:f4:7d:c4:05:fe:28:37:8d:4b:63:e0:7c:70:
         98:fc:ab:e9:0f:0b:da:e4:ac:5c:2d:1d:3d:50:d1:23:ff:2c:
         71:65:06:f2:a0:e5:07:9c:23:aa:5b:5a:ec:ae:82:25:cb:1b:
         1e:ac:a2:95:84:52:9d:60:c4:9a:a2:2b:19:22:15:fc:c1:9c:
         8c:84:f4:48:6d:3d:d3:b9:7c:6b:ad:44:61:0b:d7:39:61:6f:
         0f:1e:5b:de:ed:c6:93:81:22:8b:08:95:76:a8:40:9e:a0:20:
         3d:82:56:61:82:e0:55:3b:be:0b:ff:de:45:99:f7:52:7d:5c:
         09:63:da:ab:02:73:24:13:72:fe:93:c0:66:6f:66:ee:5e:f2:
         17:f0:b4:14:ca:55:28:bc:aa:1f:f5:1c:14:35:8b:ed:57:e4:
         5e:e0:f8:33:9e:44:e9:86:40:b1:1c:75:ba:a0:18:26:af:84:
         fb:7d:b7:b8:37:de:e9:24:c6:30:20:7e:1c:fd:dc:cf:cf:4a:
         78:9c:85:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:37:38 2026 by rpki-client