Error: rpki.afrinic.net/repository/member_repository/F366F3D8/81935ACE542511F181DD8B0DCF1D38B0/EKD8gqOoQCWgEGtkwC6N9-gaJTQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366F3D8/81935ACE542511F181DD8B0DCF1D38B0/EKD8gqOoQCWgEGtkwC6N9-gaJTQ.mft
File:                     EKD8gqOoQCWgEGtkwC6N9-gaJTQ.mft (raw, json)
Hash identifier:          lXq0qVt1Yx2TJVwCmZxyBf1BCcpd9pVuZyItziAD5ho=
Subject key identifier:   71:1F:90:38:2B:3F:E6:BB:FB:2F:FC:FE:38:B5:33:DC:53:D3:DF:10
Authority key identifier: 10:A0:FC:82:A3:A8:40:25:A0:10:6B:64:C0:2E:8D:F7:E8:1A:25:34
Certificate issuer:       /CN=F366F3D8AF/serialNumber=10A0FC82A3A84025A0106B64C02E8DF7E81A2534
Certificate serial:       83
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EKD8gqOoQCWgEGtkwC6N9-gaJTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F3D8/81935ACE542511F181DD8B0DCF1D38B0/EKD8gqOoQCWgEGtkwC6N9-gaJTQ.mft
Manifest number:          82
Signing time:             Fri 25 Sep 2026 05:38:46 +0000
Manifest this update:     Fri 25 Sep 2026 05:38:45 +0000
Manifest next update:     Sun 27 Sep 2026 05:38:45 +0000
Files and hashes:         1: EKD8gqOoQCWgEGtkwC6N9-gaJTQ.crl (hash: 37OhtogMMAKSnl4YFLeT2VafRQx4QK/dD/ippVrsN0Y=)
                          2: 61DF2B6C542611F1A73BCF11CF1D38B0.roa (hash: PswgLu6UTQf3VhBFNJJhAa+wXPas7s5Eei+jQ1A4+iA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F3D8/81935ACE542511F181DD8B0DCF1D38B0/EKD8gqOoQCWgEGtkwC6N9-gaJTQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F3D8/81935ACE542511F181DD8B0DCF1D38B0/EKD8gqOoQCWgEGtkwC6N9-gaJTQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EKD8gqOoQCWgEGtkwC6N9-gaJTQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F3D8AF, serialNumber=10A0FC82A3A84025A0106B64C02E8DF7E81A2534
        Validity
            Not Before: Sep 25 05:38:45 2026 GMT
            Not After : Sep 27 05:38:45 2026 GMT
        Subject: CN=6ab608e6-2fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:ba:5d:eb:70:7f:c6:00:e9:6b:5f:9a:3d:
                    69:53:76:40:3a:ad:d4:7b:0c:76:97:13:70:c7:c0:
                    e8:7d:76:a2:38:24:48:24:fb:91:7e:97:b8:fe:32:
                    08:b0:fe:8f:2e:b6:b4:85:3d:6f:59:1d:8e:7a:48:
                    f5:24:3b:8d:4d:36:c2:87:da:ed:60:ef:89:53:9f:
                    be:aa:43:95:4e:5b:b5:04:d9:d0:a7:94:d3:be:64:
                    a2:b9:11:5d:e3:7c:24:d4:b1:4a:6b:f4:d3:a4:54:
                    f6:ac:9c:75:c0:ae:9c:20:f2:6b:55:42:fe:5c:ad:
                    72:c7:70:9f:1d:9a:09:1b:29:84:16:93:aa:0d:7d:
                    49:91:2c:fb:91:d0:62:36:21:27:2b:d6:ff:7d:1d:
                    67:60:f9:cb:60:01:8c:d9:f5:30:a0:21:93:88:0d:
                    85:7b:89:10:5e:1b:88:75:f6:a5:1b:bf:d2:b9:69:
                    3c:ee:bf:a5:be:55:5a:98:3e:84:10:dc:d0:1f:1a:
                    ef:bb:b4:54:49:f9:6b:f7:47:64:b4:d4:2c:ca:88:
                    0f:2d:4f:4a:36:f3:06:4d:77:dd:42:61:75:55:f5:
                    1e:41:77:fb:70:0a:77:ce:43:c6:14:b8:e4:e8:22:
                    63:78:9f:06:e1:80:0d:8f:d5:af:33:05:8b:ed:64:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1F:90:38:2B:3F:E6:BB:FB:2F:FC:FE:38:B5:33:DC:53:D3:DF:10
            X509v3 Authority Key Identifier:
                keyid:10:A0:FC:82:A3:A8:40:25:A0:10:6B:64:C0:2E:8D:F7:E8:1A:25:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F3D8/81935ACE542511F181DD8B0DCF1D38B0/EKD8gqOoQCWgEGtkwC6N9-gaJTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EKD8gqOoQCWgEGtkwC6N9-gaJTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F3D8/81935ACE542511F181DD8B0DCF1D38B0/EKD8gqOoQCWgEGtkwC6N9-gaJTQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6a:93:90:a3:c8:26:0d:b4:fa:1d:08:e2:23:0e:d7:57:f0:
         22:b5:38:23:e1:d3:b0:65:a9:00:f2:9f:ee:16:b1:de:05:70:
         a3:a5:b2:2f:8d:32:18:81:9a:8a:b1:29:f1:4d:e6:5d:0a:5d:
         f3:37:78:7e:b8:3e:c0:95:04:70:7d:be:e9:0d:22:6b:0d:b2:
         5a:e4:e7:5d:01:61:17:b4:6c:41:20:f5:ed:3f:82:fb:89:fd:
         f9:bc:be:e0:6e:90:bd:3c:17:24:d5:66:71:9b:a8:2a:42:f9:
         d9:6a:7d:a4:ab:c5:36:a8:0d:d3:88:a4:75:36:28:bd:bd:a3:
         07:59:69:5d:38:d6:2f:7a:9f:cd:aa:f0:46:55:c4:db:28:cc:
         c3:2d:c6:8c:3f:fb:9a:70:8c:5a:4b:41:63:22:c7:a9:ae:b4:
         c6:61:0b:5b:c0:de:9a:52:ba:b7:d3:31:72:b9:35:bb:08:ad:
         29:3b:be:4b:c0:f3:56:90:2b:c5:58:28:f4:81:7e:17:91:2f:
         00:e4:4b:4d:8b:4b:bf:04:48:ef:fa:0f:4d:ce:5d:35:ea:07:
         8c:e8:50:67:48:60:46:23:7d:76:a4:70:1d:8c:ae:05:1f:1f:
         11:ec:ec:d9:5d:9d:a1:d3:c4:b8:22:7e:b6:30:c1:1d:5a:2f:
         1a:6e:65:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:21:11 2026 by rpki-client