Error: rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
File:                     WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft (raw, json)
Hash identifier:          VZLEmLtNVgcDSkp8eu7xpS8I+6dUw/DXtq52gLMERAU=
Subject key identifier:   58:AD:AE:24:55:6D:A9:90:CA:8C:78:7D:9B:07:BD:99:0C:19:C8:88
Authority key identifier: 5A:1A:40:99:27:8F:18:FF:41:96:4D:55:77:B0:4B:3D:5E:43:7C:FB
Certificate issuer:       /CN=F369013CAF/serialNumber=5A1A4099278F18FF41964D5577B04B3D5E437CFB
Certificate serial:       0A62
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
Manifest number:          0A61
Signing time:             Tue 29 Sep 2026 01:33:18 +0000
Manifest this update:     Tue 29 Sep 2026 01:33:17 +0000
Manifest next update:     Thu 01 Oct 2026 01:33:17 +0000
Files and hashes:         1: WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl (hash: ptsfWIfr7u3rccYOfUR1wSDT6eH1hBppdkobogPjfJo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2658 (0xa62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369013CAF, serialNumber=5A1A4099278F18FF41964D5577B04B3D5E437CFB
        Validity
            Not Before: Sep 29 01:33:17 2026 GMT
            Not After : Oct  1 01:33:17 2026 GMT
        Subject: CN=6abb155e-21e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:1c:7e:69:a6:b5:3d:b5:6c:ce:3e:d6:7f:
                    98:aa:0e:5d:02:04:a0:ff:04:c1:1f:de:26:1b:b2:
                    59:75:db:36:21:3c:58:47:b3:f6:d6:54:6f:3d:81:
                    12:98:79:da:8f:8e:3e:25:16:68:37:85:5f:31:25:
                    bc:76:61:d0:25:7a:ae:c9:68:90:2e:51:dc:04:95:
                    de:26:1c:82:03:b6:f9:af:32:b6:78:b3:4f:6d:a0:
                    a4:04:fd:b4:b5:24:5c:1c:b9:f2:71:96:b8:a5:1a:
                    0d:52:00:e0:3f:f8:4e:85:8c:ac:cd:39:91:f8:60:
                    34:86:36:d7:de:73:eb:03:5f:4e:e8:d4:22:29:22:
                    38:5e:20:15:cb:c7:ff:bd:e9:a1:68:94:fb:f8:a9:
                    89:db:ca:d2:da:f5:d6:32:c8:b2:85:aa:c6:f9:bd:
                    ba:bb:df:4e:21:8e:2d:b6:79:84:1d:64:cf:47:21:
                    88:fe:81:d8:a7:d7:4f:53:62:de:8c:55:65:80:72:
                    c3:23:84:e4:96:9a:8b:e6:b5:13:e3:0d:f5:89:28:
                    1a:bc:1e:66:d7:79:49:87:4f:7f:8d:25:e4:82:2d:
                    8e:46:a3:80:13:4b:84:ab:17:57:f4:4a:2f:3f:b0:
                    cb:d2:d7:8b:3f:c4:58:3f:44:ad:82:5d:4a:46:79:
                    f6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AD:AE:24:55:6D:A9:90:CA:8C:78:7D:9B:07:BD:99:0C:19:C8:88
            X509v3 Authority Key Identifier:
                keyid:5A:1A:40:99:27:8F:18:FF:41:96:4D:55:77:B0:4B:3D:5E:43:7C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b3:db:47:c9:34:06:61:7c:e8:a0:b0:7e:fa:56:ee:7c:e6:
         ee:ae:c0:55:14:13:7d:a7:96:e6:df:d5:96:ba:de:df:17:62:
         69:a4:39:eb:f6:a3:e5:0a:52:f7:bb:cc:64:bc:a4:bd:2f:6a:
         1e:a8:d9:86:b4:e1:2e:e0:b9:fb:10:b0:1b:b2:30:ce:ee:56:
         49:2c:04:29:19:02:8f:fe:65:22:8b:94:25:74:bc:2c:ea:06:
         da:bc:4e:f3:c7:7b:44:d3:05:7b:74:4c:0e:d2:f9:44:90:a1:
         e0:71:0f:ae:dc:3f:b5:3d:c6:80:48:04:7c:37:ab:04:eb:56:
         14:c1:d6:48:05:b4:23:43:7d:97:45:37:52:f6:ab:e6:82:70:
         88:97:0d:42:7d:39:b2:32:b1:ea:7e:46:3f:85:ed:41:a1:60:
         82:32:5f:8b:22:5a:8f:2a:2e:44:33:72:d9:81:b7:20:c0:98:
         3d:6a:93:7c:eb:b1:0c:8c:90:bf:cd:09:a3:7a:87:17:02:c9:
         33:14:8a:1c:20:9d:a4:38:6c:35:2a:4e:ac:92:f0:f7:c9:82:
         09:8c:0f:3a:48:1c:8b:69:87:74:d4:76:24:ea:31:a0:fc:fa:
         c5:59:d3:29:25:f2:3f:e9:4e:17:10:18:2f:b8:cb:00:7c:9a:
         d6:c8:36:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:32:18 2026 by rpki-client