Error: rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
File:                     EQYAxu67aMpSEon5sYeaJnpW4_w.mft (raw, json)
Hash identifier:          T2Yh60yfWDqpYBOd0tfsW+PWsXW2ggGkwxhZmYduCgw=
Subject key identifier:   FC:73:FA:93:FF:DE:B8:9F:25:6E:31:8A:6D:A5:16:76:35:90:F0:6E
Authority key identifier: 11:06:00:C6:EE:BB:68:CA:52:12:89:F9:B1:87:9A:26:7A:56:E3:FC
Certificate issuer:       /CN=F367B9AEAF/serialNumber=110600C6EEBB68CA521289F9B1879A267A56E3FC
Certificate serial:       F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
Manifest number:          F1
Signing time:             Wed 23 Sep 2026 05:24:53 +0000
Manifest this update:     Wed 23 Sep 2026 05:24:52 +0000
Manifest next update:     Fri 25 Sep 2026 05:24:52 +0000
Files and hashes:         1: EQYAxu67aMpSEon5sYeaJnpW4_w.crl (hash: vIoT0btVN3JveCIct8XPK+I8eCzgv3Ee7HXlQFmQiNU=)
                          2: 5DAE53C8FC4311F089F0909ADAE4EC9C.roa (hash: pMAftOKK+E+y6h4RLSrb4pd1uKoP1x/UJyyr/pqc+Bk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B9AEAF, serialNumber=110600C6EEBB68CA521289F9B1879A267A56E3FC
        Validity
            Not Before: Sep 23 05:24:52 2026 GMT
            Not After : Sep 25 05:24:52 2026 GMT
        Subject: CN=6ab362a5-6e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:9f:e4:e8:15:db:6f:3c:0f:65:57:9b:46:
                    48:07:54:f0:b3:22:63:d7:0b:bb:86:dd:9c:a4:da:
                    bc:6e:97:e8:73:5e:89:52:de:05:39:be:bc:75:17:
                    c9:f7:c8:07:b2:6f:3d:8a:d0:38:d4:9f:ac:6b:9c:
                    9d:f0:07:6a:c9:e0:d7:f3:06:10:a9:a7:28:c5:7c:
                    69:d2:4c:48:9a:f4:ac:20:4d:de:1a:ae:39:99:72:
                    17:a6:24:23:0a:bd:8e:b0:1d:d8:56:e5:70:96:73:
                    ac:03:2a:cf:70:a1:4e:3b:45:8d:7a:0d:0c:d1:3f:
                    0f:3a:41:6e:31:0b:10:39:51:8d:c3:47:ad:2b:74:
                    05:78:9b:74:93:95:46:51:15:c9:e1:69:66:60:7c:
                    e8:67:4b:e8:bd:12:d4:5c:de:04:b3:30:7b:a4:3e:
                    c7:80:40:71:24:08:6c:8e:a8:b2:1b:13:d4:36:74:
                    18:da:2b:97:3a:c9:a6:f2:eb:80:aa:fe:92:ba:82:
                    86:28:0f:24:05:1a:73:6e:df:f4:74:8b:a3:90:71:
                    dd:b2:a9:76:05:e8:be:10:c7:ac:d6:8d:b6:64:c6:
                    2f:fe:17:fb:52:18:85:d4:0d:c3:fd:b6:7c:05:ac:
                    2c:d3:a2:d6:fd:c3:fd:a2:3c:ea:f3:33:bd:94:54:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:73:FA:93:FF:DE:B8:9F:25:6E:31:8A:6D:A5:16:76:35:90:F0:6E
            X509v3 Authority Key Identifier:
                keyid:11:06:00:C6:EE:BB:68:CA:52:12:89:F9:B1:87:9A:26:7A:56:E3:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7a:5d:b9:05:63:a8:f7:f9:1c:79:74:dd:39:88:c5:10:c8:
         23:dc:d3:30:0d:c9:12:3c:bf:5c:4d:2d:87:89:be:00:f3:2b:
         68:db:cb:6f:0e:df:3e:fc:b2:98:5e:82:f0:13:ba:b3:47:34:
         c5:a0:42:fd:24:2f:e2:73:eb:18:4c:5e:b1:c7:0c:b3:28:b6:
         8b:ee:fd:63:58:71:2e:0e:68:5a:18:79:93:0e:b3:78:83:65:
         9d:96:11:40:ec:d9:58:d3:b1:bb:8f:8e:56:97:c1:48:a5:67:
         2f:68:34:a2:be:52:52:5f:c2:47:d3:3b:35:d6:db:67:57:ed:
         bb:98:d7:fa:70:bb:d9:9b:ca:8e:bb:0c:2c:64:88:e2:ec:9c:
         da:01:bf:55:e3:34:a5:cc:08:b4:ab:04:07:d9:24:5d:fb:d1:
         8f:81:a9:6f:93:6e:cd:cc:96:4f:87:26:8d:98:74:cc:a8:14:
         43:e4:d4:61:78:c9:08:c0:05:a9:66:32:77:e0:d3:2a:d6:f7:
         68:08:19:93:e3:cf:63:55:32:81:30:e1:81:4b:1e:0a:a0:e2:
         c5:c6:93:da:e5:b8:5c:09:a0:b2:e3:33:03:b4:73:6c:40:5d:
         f5:c3:62:4f:37:49:ed:2c:8b:bf:5a:d2:f6:dc:35:78:17:21:
         b3:9e:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:13:26 2026 by rpki-client