Error: rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
File:                     OGKY2dDrccqQ9IahYTSvE2HSccg.mft (raw, json)
Hash identifier:          DOAPUKGcZt6sofdcN32kgAeW3UbU9VGhonGQvT8+KM8=
Subject key identifier:   92:6F:B2:BA:27:B3:59:CC:FE:F1:32:F5:0D:2C:D9:77:CD:92:33:7D
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Certificate issuer:       /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial:       084C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
Manifest number:          083C
Signing time:             Wed 23 Sep 2026 02:02:18 +0000
Manifest this update:     Wed 23 Sep 2026 02:02:17 +0000
Manifest next update:     Fri 25 Sep 2026 02:02:17 +0000
Files and hashes:         1: OGKY2dDrccqQ9IahYTSvE2HSccg.crl (hash: QLWRqi/VmTAfU3lZS3WDmuKaoGOyQT3MyWRuNZxehkA=)
                          2: 93497D1A4C2611EFB22D3094762E951A.roa (hash: VZHe+souUw5aWOV71j+5Y+w4oxLPzuiUD+rog51iDBY=)
                          3: 6774FF984C2611EFAB787290762E951A.roa (hash: 0dIOFSVxQkLwHxAoSEdUvKLHLyqgqQBcdK0Lf04L/TI=)
                          4: FDEB70D44C2511EF8146B08F762E951A.roa (hash: YfjMYIsbDX25SzCOYvPBuiMEogU2K4oEpLmtCkvxr6M=)
                          5: 24334B044C2611EFB6131890762E951A.roa (hash: /PBSUrG2kmaQYOQ7rAIFdSZtAvLFjg1IMKGRzA5SlyU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366D2C6AF, serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
        Validity
            Not Before: Sep 23 02:02:17 2026 GMT
            Not After : Sep 25 02:02:17 2026 GMT
        Subject: CN=6ab3332a-f9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:99:bc:87:dc:be:70:46:50:a8:e7:47:d3:18:
                    10:b1:5c:e8:21:2a:e2:40:42:80:0c:f0:5b:b4:29:
                    c9:cb:2b:a3:57:8f:46:6e:7d:e2:b9:cc:7d:cc:ec:
                    ff:59:43:30:8f:ef:75:be:25:31:c3:a3:e3:8e:54:
                    5d:01:f7:9b:05:a3:a8:e4:33:1a:62:8e:bf:08:f9:
                    86:16:46:35:36:e9:62:de:e8:17:db:48:c4:5a:ae:
                    e4:ff:66:9f:3a:41:a7:9a:47:6e:09:ac:a6:be:ef:
                    49:bd:e4:bb:9e:d3:da:1b:dc:77:45:46:39:79:af:
                    20:0f:e9:94:a4:a6:5b:8b:8f:16:ec:21:a8:a3:33:
                    06:d6:31:87:1f:b5:de:ef:35:9c:a2:78:c2:b5:05:
                    06:98:f5:86:78:53:6c:d9:95:e4:e9:48:cb:6b:9b:
                    6e:ce:81:e8:fd:c3:21:6d:db:9c:e6:a8:6b:00:37:
                    90:0f:e9:bb:25:3c:83:62:d3:b5:62:10:78:e7:01:
                    7d:67:e8:ec:e6:38:ea:3b:a4:47:5d:c0:27:f1:ca:
                    4e:7f:4e:34:fc:0e:08:67:e8:c8:6c:62:3c:63:2c:
                    7c:23:25:67:90:63:59:1d:5f:94:fb:71:8b:58:df:
                    69:37:f1:53:04:b2:f5:5a:ec:0a:8f:93:70:c7:78:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6F:B2:BA:27:B3:59:CC:FE:F1:32:F5:0D:2C:D9:77:CD:92:33:7D
            X509v3 Authority Key Identifier:
                keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:40:07:df:05:43:9a:83:c1:7a:ad:09:f2:1d:85:db:7d:bb:
         09:59:b3:79:11:ca:df:ea:f7:f1:04:70:f1:8e:ed:d9:22:00:
         37:f4:58:bb:6f:77:67:bb:ad:13:d0:3e:39:52:38:c3:1f:29:
         f4:70:82:c1:9c:7a:5d:27:e6:cc:82:81:fc:6d:26:93:5e:a2:
         41:a5:d2:92:6a:10:36:1d:87:a0:a3:52:2b:40:03:7c:06:16:
         e8:f0:0c:21:b0:b3:72:87:53:79:1f:b4:95:5b:bc:27:70:0d:
         81:2c:c1:10:7c:91:1a:ff:53:78:5f:51:70:5c:f1:7a:2a:cc:
         44:db:79:46:50:8f:95:78:ce:d7:12:29:d7:36:38:c5:00:ee:
         a1:96:ec:91:92:e3:a2:10:fb:3b:f2:f1:c1:87:3a:d2:97:2e:
         6b:c5:bb:e0:84:cf:e0:6c:4e:a7:f2:55:37:e7:38:5d:82:c5:
         dc:17:f4:e6:d1:58:f1:76:ce:90:fe:23:f4:9e:e0:c8:bb:49:
         ab:87:5d:20:4c:43:8f:22:10:d0:dc:40:7b:98:52:95:74:26:
         f3:5f:5f:b7:f9:a7:ee:e7:36:5e:d2:20:a2:84:6c:9f:0c:e8:
         60:2f:b2:e4:d8:ee:47:3e:56:2e:ce:10:29:b8:c2:4a:d8:77:
         bc:3a:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:02:37 2026 by rpki-client