Error: rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
File:                     EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft (raw, json)
Hash identifier:          m+ior2KhHLUN+O/wcCjE3DHr7VPDGeQ/bhQBZMHqv3w=
Subject key identifier:   F8:D8:96:F6:E2:11:FF:88:51:6B:45:5A:DB:A9:47:FC:2C:D5:8E:44
Authority key identifier: 11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC
Certificate issuer:       /CN=F3696A10AF/serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
Certificate serial:       013C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
Manifest number:          013C
Signing time:             Fri 25 Sep 2026 05:15:08 +0000
Manifest this update:     Fri 25 Sep 2026 05:15:07 +0000
Manifest next update:     Sun 27 Sep 2026 05:15:07 +0000
Files and hashes:         1: EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl (hash: b0pCKSFcnSDcAsUNOLurkuDz/kATqXYdAIUbqVQUxm0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696A10AF, serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
        Validity
            Not Before: Sep 25 05:15:07 2026 GMT
            Not After : Sep 27 05:15:07 2026 GMT
        Subject: CN=6ab6035c-750f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:bc:a1:34:0f:72:16:27:fa:3c:1d:a7:21:
                    b9:66:9d:93:ca:08:76:7a:25:fa:0e:da:42:ed:13:
                    d1:db:86:f4:ab:6c:f1:74:e5:97:e3:90:9e:7f:bb:
                    4a:16:42:12:a4:d9:e9:7d:24:03:17:b4:01:e2:95:
                    0f:c8:70:9b:c3:f7:05:a5:18:d9:ce:c5:f0:a8:d0:
                    12:88:02:4f:19:a3:80:ca:9d:c8:a5:f7:d1:1c:36:
                    ee:8c:b2:4b:c2:2d:fb:cf:c8:23:89:5f:37:7a:ab:
                    5c:32:ef:98:8a:82:fa:71:58:d9:51:fa:9d:05:ce:
                    81:9a:af:b6:5d:ba:a3:29:f2:01:a1:6e:e3:b6:1b:
                    79:75:4d:a7:07:e7:a0:e5:4c:a4:aa:89:63:e9:3f:
                    5c:85:5a:db:60:b0:05:e1:31:49:dd:71:d1:73:ca:
                    99:f0:56:01:6f:19:d6:b7:f8:f3:29:4f:58:8a:31:
                    eb:74:9b:cb:30:9f:72:bc:f8:a0:d6:37:9d:98:fb:
                    04:cb:e2:66:2b:74:57:bd:1b:26:9a:cf:89:aa:07:
                    ce:55:eb:f7:9e:dd:8b:83:d9:07:f3:4f:cd:83:64:
                    2b:e7:d8:da:cc:37:e1:d7:9f:95:24:05:7f:28:96:
                    76:e7:6a:2b:bf:09:c8:84:bc:22:3e:b9:d2:58:c2:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D8:96:F6:E2:11:FF:88:51:6B:45:5A:DB:A9:47:FC:2C:D5:8E:44
            X509v3 Authority Key Identifier:
                keyid:11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:fe:b7:06:68:52:d5:01:5d:a8:ec:5c:72:04:45:41:a7:
         dd:00:0a:88:27:c5:6e:53:eb:6b:85:92:42:b1:aa:d3:c0:72:
         2a:aa:8c:84:80:d5:d7:93:46:6a:d0:ef:47:e5:f9:60:3b:d0:
         13:a7:04:99:e2:f3:5b:3f:16:87:2e:49:1b:f7:e1:de:cb:fd:
         3e:98:71:e0:95:31:80:2a:b7:d3:e7:d7:52:ff:e4:5a:f0:93:
         5f:39:f5:29:1d:e6:86:a1:f8:e1:b4:b1:f7:17:89:de:9f:28:
         5d:62:f9:55:8d:d2:9c:78:29:cd:27:50:0f:6c:fc:3b:31:f2:
         19:35:7d:50:fe:79:ed:9b:85:a5:9c:b5:5b:f0:b7:a8:e0:ba:
         a0:8d:af:f6:18:b6:4f:1f:81:0e:6e:e3:03:02:f7:0f:84:ca:
         ff:77:ff:52:7a:9d:f4:ff:56:dd:ca:84:bf:f1:cc:a4:7c:4f:
         5d:2f:9a:0b:9f:1d:1f:4c:6d:dc:47:92:cc:b7:f4:9b:f6:27:
         fa:6b:1f:88:ce:fb:09:e1:06:85:ad:0b:4a:83:47:b8:93:98:
         98:85:06:76:07:af:7a:ed:5a:07:0a:e8:f6:dd:bf:87:84:37:
         51:fa:5f:d6:9c:49:81:0d:0c:07:8e:46:34:a3:23:d3:8e:6c:
         8d:66:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:25:49 2026 by rpki-client