Error: rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
File:                     AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft (raw, json)
Hash identifier:          /UyqkgmNUTGkHhrERBLe8nQcG/qOPuBnsxlHO6yjrA8=
Subject key identifier:   71:4B:F5:2F:45:60:21:BF:4C:7A:E8:23:A5:7F:91:BF:AF:94:2A:B1
Authority key identifier: 00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
Certificate issuer:       /CN=F3695947AF/serialNumber=006E0BE21090792D18356197510AD340EC042353
Certificate serial:       01B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
Manifest number:          01B0
Signing time:             Wed 14 Oct 2026 05:03:48 +0000
Manifest this update:     Wed 14 Oct 2026 05:03:48 +0000
Manifest next update:     Fri 16 Oct 2026 05:03:48 +0000
Files and hashes:         1: AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl (hash: e7L/ZYo80RQOwi8AX6B60NDv3ZHog0hZ8qJprpajY+M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 05:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695947AF, serialNumber=006E0BE21090792D18356197510AD340EC042353
        Validity
            Not Before: Oct 14 05:03:48 2026 GMT
            Not After : Oct 16 05:03:48 2026 GMT
        Subject: CN=6acf0d34-b4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:ec:c1:78:22:d1:5a:59:a3:fb:c8:48:3f:
                    d0:73:d8:99:d8:1a:e4:14:7c:32:5d:0b:52:92:ed:
                    85:eb:89:7d:d4:92:dd:74:57:eb:97:60:61:f7:bc:
                    2c:5f:9d:c1:97:f8:52:0b:f7:74:14:3d:5c:31:5f:
                    9e:fc:61:80:56:b9:f6:70:66:2f:39:35:cd:0a:0f:
                    48:7f:50:2e:de:33:dd:44:55:6a:4e:fc:e1:1d:1b:
                    20:04:49:1d:b2:73:89:71:f9:9b:50:8b:d7:48:51:
                    55:23:3c:24:98:ed:b2:a4:f8:32:3e:10:e4:fa:90:
                    a4:f0:e1:c3:ee:97:db:ed:d1:dd:0a:ac:fc:12:c0:
                    60:c8:4e:97:ad:03:8b:44:f5:03:5c:49:42:76:ca:
                    0e:c2:6a:54:36:52:88:c9:07:26:60:f7:df:43:6d:
                    31:b3:09:b7:0e:05:42:47:3d:aa:43:5f:95:f2:b7:
                    35:c5:e2:eb:97:ae:66:c8:20:69:87:eb:34:5f:93:
                    2e:d0:4b:d8:8b:cd:7c:e2:3b:c7:95:03:4a:d3:84:
                    2a:48:a8:fa:9f:ff:4a:16:a3:ab:3e:25:cb:00:c9:
                    08:a5:1c:29:4f:04:45:9e:bf:a3:60:97:bd:88:9c:
                    6e:35:93:43:c8:1b:ab:2e:67:7a:1f:c4:80:04:04:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:F5:2F:45:60:21:BF:4C:7A:E8:23:A5:7F:91:BF:AF:94:2A:B1
            X509v3 Authority Key Identifier:
                keyid:00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:8f:29:35:51:33:e3:94:68:cb:c5:a9:8a:c0:11:b3:77:
         a8:cb:72:f0:32:df:e9:f4:63:6a:f5:57:2c:d7:58:7e:68:ed:
         8f:5f:41:92:21:5a:8e:eb:dc:0b:9e:b3:f7:3e:28:00:74:e4:
         7b:0b:b6:04:8e:f2:71:ff:7b:2d:39:92:3b:b8:52:e4:f2:77:
         dd:18:79:ce:70:e8:74:09:7e:89:fd:9a:14:bf:52:6b:ec:80:
         09:4d:8b:f1:42:5e:53:3d:e2:fa:c4:7d:61:de:cc:89:02:d0:
         0c:58:a1:72:d8:0e:6f:df:96:7b:5e:af:02:b7:4b:2b:24:4a:
         b5:7e:66:71:fd:35:8e:dc:e6:40:ec:0b:98:91:36:d6:3f:67:
         05:f5:9a:ae:30:0d:26:98:09:22:65:25:cc:ba:cb:f2:1c:de:
         37:96:1e:90:49:57:2b:97:fa:87:73:4c:32:e6:a7:72:01:b1:
         bd:58:87:26:7e:f1:1a:b5:13:90:cb:b9:2e:e0:7f:33:a5:52:
         e7:06:dd:88:80:3d:a3:46:9d:30:4b:f7:6b:fe:ce:00:06:5b:
         2e:af:26:da:97:f0:4b:a4:40:d1:8e:84:8a:fa:8b:bb:87:c2:
         bd:fb:d1:ed:be:20:be:02:cc:6a:a0:f7:e1:a0:b7:68:77:2b:
         13:82:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:15:10 2026 by rpki-client