Error: rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
File:                     fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft (raw, json)
Hash identifier:          SnKTwYQZczVTEwLrDCrH086mPWgd2CqvZI6tRgp2RS0=
Subject key identifier:   CE:74:A8:E5:20:7A:B4:5C:30:80:5E:C2:94:BB:C5:EE:F9:8A:B2:E8
Authority key identifier: 7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99
Certificate issuer:       /CN=F3670C40AF/serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
Certificate serial:       0AE3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
Manifest number:          0AE2
Signing time:             Sat 14 Nov 2026 01:24:49 +0000
Manifest this update:     Sat 14 Nov 2026 01:24:49 +0000
Manifest next update:     Mon 16 Nov 2026 01:24:48 +0000
Files and hashes:         1: fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl (hash: FDWqkgHVnlwjry+W8sR51Xxv+vooh2JhM3ncHRwaNew=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787 (0xae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AF, serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
        Validity
            Not Before: Nov 14 01:24:49 2026 GMT
            Not After : Nov 16 01:24:48 2026 GMT
        Subject: CN=6af7b861-3594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:a1:d4:43:8a:34:63:c0:35:53:df:38:16:
                    f7:81:6e:7a:4a:d2:e3:df:99:4c:c6:7e:96:f8:ab:
                    0d:cd:4b:92:16:ce:b0:9a:c3:78:91:ae:3f:22:49:
                    1e:e4:33:1f:c3:11:f8:56:f7:bb:82:65:4a:4c:b4:
                    13:aa:e1:b1:b9:3f:81:97:2e:8d:7f:c3:20:b7:65:
                    78:d8:ae:95:2f:4d:58:8b:af:23:21:16:96:4e:3c:
                    15:30:5e:e7:50:14:e8:53:f9:9c:8c:d7:a3:56:f7:
                    1e:a0:f9:4c:f4:fe:ef:91:f7:4e:5a:29:28:a2:f1:
                    8d:52:3e:9f:3f:33:6d:b7:07:9e:ff:85:a1:bf:1b:
                    cc:0d:95:dc:74:81:79:9c:c4:60:6f:57:88:07:32:
                    b5:0b:6c:e3:25:92:49:21:16:21:49:4f:65:f0:0f:
                    b9:65:a8:1b:52:84:87:14:6c:22:10:36:ca:c4:3f:
                    dd:24:92:14:9c:d3:ad:b4:72:5f:a3:e2:cd:74:e8:
                    3c:f7:9e:ec:e8:de:ae:f0:a2:9d:69:81:0d:c0:27:
                    fd:c2:54:97:ce:1e:5f:c0:cd:dd:00:44:29:76:ce:
                    8f:5e:47:22:96:38:65:fd:4a:4d:49:72:c4:8a:ae:
                    9d:d2:e1:10:f5:11:c5:c6:67:7c:43:c0:38:6f:b3:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:74:A8:E5:20:7A:B4:5C:30:80:5E:C2:94:BB:C5:EE:F9:8A:B2:E8
            X509v3 Authority Key Identifier:
                keyid:7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ec:82:c8:87:a0:14:31:cf:3b:72:81:0e:8b:dc:82:c5:f0:
         94:6a:9d:c9:00:cb:90:2c:12:c1:03:d4:07:d3:b9:a7:93:c7:
         e8:d8:d6:a3:fa:d3:95:5b:f7:b6:50:94:ee:78:6b:66:80:38:
         a8:7d:4d:a9:35:c0:d0:f7:e1:f2:41:b5:c8:10:80:07:be:de:
         ad:09:a4:17:a7:55:ef:fe:bd:ca:ee:a6:3e:f3:79:6f:5c:30:
         42:3b:d4:b5:b4:38:94:a8:95:ad:66:85:71:14:6f:29:64:24:
         0d:5a:a3:2a:bb:22:58:e9:0b:9d:f2:37:47:04:f1:cb:2a:5f:
         16:34:a1:8e:91:f0:15:d0:7c:45:f0:e3:4d:17:04:52:fc:29:
         b3:83:75:7d:a8:6a:66:ea:15:ff:69:de:eb:ed:dc:d9:61:43:
         29:28:36:21:c3:74:06:4f:8c:59:b2:21:8f:64:fb:3d:70:12:
         ca:c6:6d:dd:7d:ee:bf:f2:d7:6a:fa:ae:37:36:7d:8c:54:fb:
         a1:5a:46:44:6e:4f:23:37:78:da:53:b1:59:f4:04:d4:7c:c8:
         02:b4:f9:9a:33:7d:22:11:23:74:a9:38:26:5d:b3:44:66:49:
         bd:6b:9c:93:70:be:cf:93:f6:c0:d7:fc:50:77:df:59:87:9e:
         7a:17:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:52:18 2026 by rpki-client