Error: rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
File:                     Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft (raw, json)
Hash identifier:          8Oh9wk+L7R8RaK2su50PcyUz4SCTWAlSgoJEDARenuc=
Subject key identifier:   50:C0:04:E3:EC:23:3A:CF:B9:A3:9B:3A:37:78:74:93:7C:51:0A:2A
Authority key identifier: 5E:9E:12:64:A2:E9:14:E5:51:FC:37:9E:EA:DC:B9:B8:00:5D:00:8A
Certificate issuer:       /CN=F3674A7AAF/serialNumber=5E9E1264A2E914E551FC379EEADCB9B8005D008A
Certificate serial:       54
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
Manifest number:          53
Signing time:             Wed 23 Sep 2026 05:44:28 +0000
Manifest this update:     Wed 23 Sep 2026 05:44:27 +0000
Manifest next update:     Fri 25 Sep 2026 05:44:27 +0000
Files and hashes:         1: Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl (hash: udTQoMQCf7nnYlb/Iav/fFPMUtnm2I6z6kk/Y4udx90=)
                          2: 180C9F1A793811F19CA8B2B9CE1D38B0.roa (hash: DAs78s5LvDn7SQOIhkA/UYbBae9oa0Ki1f+XOP4srJs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674A7AAF, serialNumber=5E9E1264A2E914E551FC379EEADCB9B8005D008A
        Validity
            Not Before: Sep 23 05:44:27 2026 GMT
            Not After : Sep 25 05:44:27 2026 GMT
        Subject: CN=6ab3673b-dd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:81:db:6c:db:22:02:da:81:9b:67:11:40:
                    04:ea:02:d9:8c:8e:78:dc:75:e8:1d:a3:04:5c:43:
                    94:ce:f2:a6:76:b4:a9:86:c1:b4:f8:c5:75:11:75:
                    5e:db:e9:4d:d5:8f:ba:1c:91:10:d7:89:16:82:81:
                    dd:22:de:2d:62:48:b6:08:30:0c:8d:1e:41:71:da:
                    31:19:12:1e:7b:68:b9:5e:36:b4:08:06:11:94:b7:
                    b3:8d:ca:86:ec:d3:6b:91:eb:58:cc:bd:fd:ea:45:
                    ba:0d:c4:ed:7d:eb:91:f2:c0:ea:ba:81:89:8b:56:
                    5b:d0:28:ef:2b:6b:1d:e7:62:8d:ab:66:50:c0:1a:
                    23:de:a5:04:81:b2:7f:f4:67:c4:bf:9a:d1:0b:58:
                    67:e6:c9:87:36:61:4c:7a:bb:09:5b:37:c0:b0:59:
                    ee:76:7e:de:54:08:e1:97:00:8e:1b:e4:c4:3b:5e:
                    94:17:31:ab:ff:a2:11:6b:05:d0:f5:be:63:61:6b:
                    3a:7d:e8:6f:28:7a:cc:e6:ff:81:4f:48:2c:8b:46:
                    4b:a8:ab:6d:73:e3:8f:74:7a:2c:ae:00:dc:41:d9:
                    7e:c9:40:dd:72:55:10:32:80:b3:61:2b:73:f3:e4:
                    2d:7e:4b:3f:df:e2:af:ca:55:44:75:95:cb:4f:d4:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C0:04:E3:EC:23:3A:CF:B9:A3:9B:3A:37:78:74:93:7C:51:0A:2A
            X509v3 Authority Key Identifier:
                keyid:5E:9E:12:64:A2:E9:14:E5:51:FC:37:9E:EA:DC:B9:B8:00:5D:00:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ce:f4:af:27:02:07:f8:ab:91:d1:9d:e6:fc:03:4c:78:3b:
         40:b3:54:46:4c:e4:e7:06:38:a0:b2:6b:7a:aa:ca:a8:db:c8:
         37:91:df:ea:d4:70:6b:fa:21:f0:51:9e:15:2f:d9:6f:fc:a8:
         a6:47:87:81:3f:fc:34:53:b3:2e:ac:13:fa:d8:1b:52:f9:bd:
         ce:04:c2:e3:0b:44:37:56:7d:2b:73:e8:93:3a:64:87:f3:f8:
         4b:aa:0c:23:ee:df:ae:82:f3:14:ef:4a:9a:60:f1:8e:25:b5:
         46:0d:f3:f4:a4:f0:1a:24:ce:6b:8f:1f:a7:30:f9:9e:da:44:
         37:ed:1f:e3:70:15:f6:7a:3b:c2:c2:58:88:8a:cf:25:8c:82:
         79:cb:f6:ea:e6:d3:34:28:04:59:70:66:bd:79:9b:07:32:71:
         51:d6:03:b3:4a:73:f9:96:e4:e1:a3:31:eb:e7:fc:75:45:90:
         47:ed:c2:77:0a:9e:16:2d:17:df:58:3f:32:73:55:e6:7e:46:
         9b:98:6d:ae:50:2b:42:09:ef:0b:b1:b9:f4:da:6a:e9:d2:b9:
         42:c2:fe:be:88:e9:5b:c1:cd:1c:50:f6:0d:fe:9a:75:45:13:
         3b:28:7e:23:4e:02:b2:7b:9e:16:72:a8:bd:b1:46:97:20:22:
         d2:da:09:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:30:17 2026 by rpki-client