Error: rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
File:                     peeb8ti13JAu4K9nlB3mgyjCJdY.mft (raw, json)
Hash identifier:          GsFUp8J0pCny2k3hLWkdiaJsPY/cg6TPEWmeT/K2I+g=
Subject key identifier:   31:FB:44:94:9C:99:24:32:F9:85:FA:EB:7A:8F:20:CB:9E:26:A2:16
Authority key identifier: A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6
Certificate issuer:       /CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
Certificate serial:       074A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
Manifest number:          0748
Signing time:             Tue 22 Sep 2026 02:26:57 +0000
Manifest this update:     Tue 22 Sep 2026 02:26:56 +0000
Manifest next update:     Thu 24 Sep 2026 02:26:56 +0000
Files and hashes:         1: peeb8ti13JAu4K9nlB3mgyjCJdY.crl (hash: /jV/HiTe0+gzLgwNNCELrVNhQS9/N0/v/sJfVl2w2Yw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5AF, serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
        Validity
            Not Before: Sep 22 02:26:56 2026 GMT
            Not After : Sep 24 02:26:56 2026 GMT
        Subject: CN=6ab1e771-ccf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:19:53:f0:09:7b:96:21:8b:76:9f:29:c5:58:
                    56:a3:48:cc:1a:a2:ef:25:91:b5:1e:4a:a9:d3:e0:
                    8c:43:92:39:44:ad:f3:9b:2f:42:82:98:4e:b9:0e:
                    90:94:bb:b9:12:6e:a1:a5:4c:03:fd:8b:3f:26:4b:
                    de:3a:dd:f1:6d:26:9b:bd:a7:62:1f:13:58:9a:5b:
                    f6:77:39:c0:42:ab:3f:7e:c0:61:d2:aa:89:39:f7:
                    70:d4:b2:af:bf:52:4c:88:da:4f:30:20:74:32:0f:
                    db:d9:70:0f:21:16:77:a8:ec:ee:7c:c8:5e:82:48:
                    17:05:4a:41:f7:44:43:b2:e2:61:80:fe:d1:d9:1f:
                    ff:a4:dc:5e:a9:b2:37:b2:01:f4:65:6c:c7:5a:b2:
                    28:88:cf:8c:9d:81:2a:a2:04:0e:c2:6d:d3:f0:f7:
                    37:20:53:84:0c:66:89:ce:b3:df:90:d9:17:c0:fb:
                    de:39:d5:43:e4:33:d1:42:97:1d:d4:68:23:2f:d9:
                    da:61:03:69:02:16:02:19:e3:9b:99:eb:0f:b8:75:
                    49:56:5c:a8:57:45:d5:de:86:81:fa:f5:b3:bd:4a:
                    eb:14:0b:cd:01:71:2c:1b:62:fe:8d:81:a5:93:09:
                    8b:2d:83:9b:69:e8:cf:42:6b:6a:c0:8b:e8:63:e3:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FB:44:94:9C:99:24:32:F9:85:FA:EB:7A:8F:20:CB:9E:26:A2:16
            X509v3 Authority Key Identifier:
                keyid:A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:eb:11:54:be:e5:c3:e0:d0:ee:e1:33:b9:6c:68:f8:ed:b1:
         d3:26:fd:5b:04:61:15:b7:ee:5c:ad:de:ea:5e:18:67:84:76:
         4e:86:09:27:5a:36:35:11:67:05:86:0a:4e:96:1a:4d:9b:25:
         d0:ad:58:4a:10:a0:49:07:c9:1a:16:8b:03:c4:3e:2a:a6:1a:
         ca:93:b2:b0:83:42:ca:82:0f:41:c1:55:cf:bc:04:46:9d:7f:
         d1:32:1f:c9:27:cf:96:87:9d:b7:bc:22:44:66:37:cb:d7:8c:
         f3:2c:b8:32:8b:41:98:51:52:96:a3:00:9e:a8:f0:87:95:7a:
         69:e5:8e:85:08:00:eb:7d:a1:51:37:d4:b0:93:b5:8d:4e:49:
         c7:89:21:ea:5c:0c:ce:6d:22:31:35:45:10:10:56:27:d5:5c:
         fd:9e:03:b9:64:b5:b7:ff:c8:4f:bd:91:6b:01:25:ea:69:64:
         38:a8:6d:4f:2b:d8:71:ba:f9:b1:71:c5:be:29:d2:28:5f:92:
         56:55:d1:4a:eb:ff:b5:b6:70:f8:1b:a9:1a:6d:e9:a6:2f:30:
         97:bc:99:9a:05:ac:60:ed:4c:ad:52:48:af:b6:fd:1c:7b:fa:
         0c:7e:4a:37:8d:1c:63:65:11:54:f0:e0:95:71:c1:15:0c:c0:
         b7:85:5e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:58:11 2026 by rpki-client