Error: rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.mft
File:                     tLDS_w9FOrJmI0C4hhTHguv96mQ.mft (raw, json)
Hash identifier:          NX134op76fcD/M8X7d6X0/mfKaq2V4TKcPGIHuwwAzo=
Subject key identifier:   55:7C:80:5A:C2:99:FE:B5:5F:4D:23:A1:F5:F4:1A:0A:0F:27:33:5A
Authority key identifier: B4:B0:D2:FF:0F:45:3A:B2:66:23:40:B8:86:14:C7:82:EB:FD:EA:64
Certificate issuer:       /CN=F3687730AF/serialNumber=B4B0D2FF0F453AB2662340B88614C782EBFDEA64
Certificate serial:       10
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tLDS_w9FOrJmI0C4hhTHguv96mQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.mft
Manifest number:          0F
Signing time:             Wed 23 Sep 2026 05:54:54 +0000
Manifest this update:     Wed 23 Sep 2026 05:54:53 +0000
Manifest next update:     Fri 25 Sep 2026 05:54:53 +0000
Files and hashes:         1: tLDS_w9FOrJmI0C4hhTHguv96mQ.crl (hash: 3FLXdtCHPlJzjiTNjOFDEmZiG+/fHU9sjD1izej0MbQ=)
                          2: 891DDCE0AD0511F18171381CCF1D38B0.roa (hash: C1X/EUSHAmw+QF5YbACcWhSY4k90Z+xRWT63ipsG6eg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tLDS_w9FOrJmI0C4hhTHguv96mQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687730AF, serialNumber=B4B0D2FF0F453AB2662340B88614C782EBFDEA64
        Validity
            Not Before: Sep 23 05:54:53 2026 GMT
            Not After : Sep 25 05:54:53 2026 GMT
        Subject: CN=6ab369ae-4d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:05:e5:b0:bb:21:55:1c:b0:f2:c0:18:30:
                    a6:2b:18:4c:29:9d:f8:0c:8c:fd:2f:be:ed:6e:2b:
                    51:ef:ae:f1:06:76:03:00:13:be:60:9a:2d:dc:8f:
                    bf:a0:26:00:58:b7:08:64:d1:cc:c2:d4:af:eb:01:
                    92:74:11:6d:b7:26:f4:bb:d9:49:8f:92:be:e4:43:
                    5f:f3:d1:65:26:39:0f:04:92:46:d8:1d:b6:d7:f6:
                    a3:dc:45:9b:d9:21:2f:d8:af:75:09:f4:83:18:4e:
                    56:da:f4:89:68:e9:d1:fd:b1:1c:fb:4f:64:d8:81:
                    6e:34:77:fe:c0:f3:6c:2c:4f:0f:c1:5c:07:40:2e:
                    3c:3a:21:0d:64:68:a6:a7:16:d8:6f:fe:b3:a9:c6:
                    66:22:e6:1e:20:5f:5f:08:59:26:a9:37:cc:9f:af:
                    b5:4d:0e:3a:b4:e2:99:80:31:d2:2e:49:a5:ff:ef:
                    a5:a4:dc:0a:2f:c6:82:d3:83:e6:c6:b6:6c:9b:07:
                    75:26:2b:eb:9a:da:ec:4c:f9:b8:ff:1b:c6:63:ec:
                    55:b2:32:af:f0:ae:43:80:11:e1:17:bb:c8:88:67:
                    38:52:17:7f:3a:e4:1e:0a:52:39:da:5a:f5:a9:aa:
                    7d:25:4d:b9:55:8c:f8:ee:07:c9:97:7f:41:dd:9a:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7C:80:5A:C2:99:FE:B5:5F:4D:23:A1:F5:F4:1A:0A:0F:27:33:5A
            X509v3 Authority Key Identifier:
                keyid:B4:B0:D2:FF:0F:45:3A:B2:66:23:40:B8:86:14:C7:82:EB:FD:EA:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tLDS_w9FOrJmI0C4hhTHguv96mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ae:49:b2:7a:42:cc:c2:1d:8b:3f:7f:b9:0b:d1:4d:bd:b3:
         1a:91:9b:d7:9f:4b:7c:30:fd:9f:68:14:f3:fe:ce:91:a2:50:
         2c:72:ee:d8:7d:83:39:95:36:82:82:c6:d9:46:90:1f:10:95:
         71:48:30:40:b3:12:5c:39:66:7c:cf:3f:cb:65:0b:50:a8:02:
         73:13:5b:5c:e0:2d:6d:43:3e:10:ac:a1:6a:69:94:bd:46:6c:
         50:d9:cb:75:2b:0a:f8:16:fb:97:4d:d7:27:f5:3d:66:1d:96:
         d0:04:5b:4c:c3:4f:43:d7:93:77:f5:d0:60:d6:29:94:ea:53:
         04:f7:d2:75:84:48:8b:9f:c2:c9:67:ed:f4:b6:00:64:5c:f5:
         3b:6a:c1:45:5a:e3:09:89:6e:e8:1e:cc:38:83:67:54:01:c8:
         b6:c8:8b:8a:6b:72:bf:9e:9f:4f:8e:a7:7a:0e:2f:ec:b2:50:
         1d:d9:04:fc:e6:0b:0f:19:eb:2d:fc:ab:3c:43:ca:b8:43:27:
         ec:19:77:6d:a9:d0:43:71:2a:e7:c7:95:f2:50:32:96:f2:c3:
         1c:47:70:e4:13:ab:d7:37:e0:ac:77:99:5b:49:b8:6b:00:e2:
         3b:14:9c:3a:be:cd:21:ce:5b:b8:ee:a6:aa:7c:82:d0:13:cf:
         de:20:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:48:31 2026 by rpki-client