Error: rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
File:                     FecT_XtiDOPJk1SgfTe6g3Eym0c.mft (raw, json)
Hash identifier:          /mmpSD0t2KVKxrz3YBYyX4Fw8nZ2/G1pnaIFPo4sGfk=
Subject key identifier:   7B:C1:29:20:36:6B:41:58:E3:5C:04:2F:BE:FC:6D:42:FE:F5:C2:88
Authority key identifier: 15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47
Certificate issuer:       /CN=F369EC27AF/serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47
Certificate serial:       050C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
Manifest number:          050A
Signing time:             Wed 23 Sep 2026 03:23:51 +0000
Manifest this update:     Wed 23 Sep 2026 03:23:50 +0000
Manifest next update:     Fri 25 Sep 2026 03:23:50 +0000
Files and hashes:         1: FecT_XtiDOPJk1SgfTe6g3Eym0c.crl (hash: IMbC4bdvsteyoNLvXrkpiQDfZhMNRYQ9EOK/ygd+88c=)
                          2: E20EF7DC897C11F1AC00E2D5CE1D38B0.roa (hash: ohBLTRzbp9O9wrakw6aPhVPvIHpEhKPcAMJ8K/f6vL4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 03:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369EC27AF, serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47
        Validity
            Not Before: Sep 23 03:23:50 2026 GMT
            Not After : Sep 25 03:23:50 2026 GMT
        Subject: CN=6ab34647-82ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7c:fb:d1:c5:61:7a:d9:14:9c:4d:a9:ad:45:
                    99:3c:bf:65:f3:5a:b0:0e:d1:8e:05:eb:06:57:28:
                    71:61:bf:e1:07:1c:95:0b:8d:57:ed:34:d8:a6:9e:
                    1f:ac:c3:72:13:27:62:6d:b7:cd:31:17:dc:d8:72:
                    47:9a:78:3f:69:f6:88:5c:49:7a:bf:45:d0:e6:0e:
                    79:8f:8e:56:19:4f:75:6b:f4:80:ca:07:31:a0:73:
                    79:29:27:ea:51:b6:47:50:68:1b:10:34:e5:17:5f:
                    f9:cd:7e:d8:f4:e0:a1:9b:cf:fb:e6:10:5d:03:44:
                    ef:ba:87:f5:78:6a:04:ce:ec:eb:8b:b7:77:bd:17:
                    4c:b0:b5:b7:46:f9:89:44:8d:71:24:26:fc:0c:f1:
                    9a:84:2d:fc:f9:9c:91:1b:38:ad:56:c3:19:a9:42:
                    05:b7:30:74:5c:73:4b:a3:2c:a4:00:23:70:4f:c6:
                    3b:b3:a2:3f:5f:0c:57:49:bc:ea:f3:f9:f8:47:55:
                    d3:4e:f9:d8:1d:ff:d7:ad:9a:3f:f6:d5:56:20:80:
                    b0:46:30:08:57:53:15:06:d0:e9:22:d7:2d:d1:69:
                    93:84:0b:df:47:30:c3:23:41:02:41:8c:1c:59:9c:
                    b7:ed:96:5c:01:fa:db:5e:23:2b:bd:72:be:0a:e0:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C1:29:20:36:6B:41:58:E3:5C:04:2F:BE:FC:6D:42:FE:F5:C2:88
            X509v3 Authority Key Identifier:
                keyid:15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1d:8c:16:f5:9d:b9:71:f1:aa:21:0f:49:f4:b1:9b:3e:9d:
         29:4e:ef:54:95:21:48:39:a1:48:64:6a:c6:ba:5f:b2:b6:2a:
         40:ea:0a:47:a4:09:4a:f2:bc:13:3e:2f:95:15:a1:4a:7d:06:
         10:4d:55:e8:4a:75:aa:fd:6e:9d:78:ff:06:86:20:ee:24:4c:
         c3:3e:33:cf:c8:ee:d8:cd:26:a4:d9:0c:66:03:6f:54:7e:d9:
         5a:8d:8d:b9:ba:ed:12:62:01:c8:b8:7c:df:2c:1d:d1:3d:46:
         d2:0f:32:cb:63:3c:a2:c0:9b:d4:a5:73:d5:a0:a4:b9:a7:b7:
         15:5c:c6:fe:05:42:68:1d:a7:45:15:9c:86:31:07:d8:a2:42:
         82:eb:21:5a:a7:b4:3c:62:f8:46:a6:b7:da:8b:a2:b2:fc:10:
         87:21:2d:76:c8:fd:ee:0e:76:cd:ce:93:35:22:93:50:ca:f1:
         07:8f:72:5c:9f:ef:38:2e:c2:21:a1:44:fc:15:b0:bd:6d:94:
         f1:df:45:2c:9b:2a:29:21:41:f3:87:13:e1:83:27:b2:ae:ef:
         7b:af:c0:df:ab:66:83:96:af:95:95:10:19:3f:42:e2:8b:b8:
         2b:bd:1c:2c:a3:85:07:98:41:98:dd:36:f7:52:d0:61:6a:4b:
         8a:fc:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:44:06 2026 by rpki-client