Error: rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
File:                     LN9YDjdnVbH4xogIQhJt1j3XTuc.mft (raw, json)
Hash identifier:          NWdPf4inSAaFm4FFaccLpRJngoxtyu6lEIowaVNaMYc=
Subject key identifier:   69:D7:1F:EB:E3:BA:86:6B:46:CF:56:86:50:88:A0:6C:34:28:91:18
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       0942
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
Manifest number:          0930
Signing time:             Wed 07 Oct 2026 01:52:52 +0000
Manifest this update:     Wed 07 Oct 2026 01:52:51 +0000
Manifest next update:     Fri 09 Oct 2026 01:52:51 +0000
Files and hashes:         1: LN9YDjdnVbH4xogIQhJt1j3XTuc.crl (hash: 2RNqyuZbylxKHFfoL7y+W36Z1i837pp6uuNAyecVO9U=)
                          2: 273CF154890F11EEAE5F7C364AD9E6FC.roa (hash: 6Zyoo60Pz+GnvK6rZB7VRukfQvQPSJF7/Al01Yw7AE8=)
                          3: C01FDA868C9911F18503E1DCCE1D38B0.roa (hash: kQtLsW7D9ICZ09fDE52xx9CZ7qcYPPsGFlQk50LU9yY=)
                          4: 05C23B208C9911F18B7848D8CE1D38B0.roa (hash: UBe/FinZwlLfNd1I4Bm1Xqdo/RNekj20lzTVHaiEBsk=)
                          5: 718E7D0C86B111F19930B2BDCE1D38B0.roa (hash: nBpUPuhm+PdhHS8iH4gpkrl2A2IJbJ1GitlJ8/Nq+0o=)
                          6: EF27689C86A611F18F5DC2FDCE1D38B0.roa (hash: hoi8TgbPp6u8/kTs9rFoka8RNFl9NxDAJ/DZIKG0zYc=)
                          7: 9799CAE68C9811F1BA0F14D6CE1D38B0.roa (hash: TCzfsB8L6naHhIMK6FDSVqSB8/tnKisssUeS0Sja/pM=)
                          8: 66B4A4A48C9911F1BCD0C4DACE1D38B0.roa (hash: 1ybCzxMXlxjH4FAEOI1Qgd0351KDCVr4YxHCk74ZKG4=)
                          9: B65B4AFA86B111F1B35420BECE1D38B0.roa (hash: kmExG71hjRrSnQLc9Za9djJ4yDfiRKmuCxsWcutkbII=)
                          10: 2E8F703A8C9A11F19CA16FDFCE1D38B0.roa (hash: 0LNHFPvTTVmKRurY7oAMszXzqgYdND56d0u2tu3Tva4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 00:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2370 (0x942)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Oct  7 01:52:51 2026 GMT
            Not After : Oct  9 01:52:51 2026 GMT
        Subject: CN=6ac5a5f4-ea18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:84:c2:d0:0a:68:7b:58:c1:33:55:3b:39:
                    64:d2:18:8e:3c:a4:6e:52:6e:42:22:ed:9b:ca:e4:
                    28:76:c7:ce:e8:ba:b2:de:ef:db:5e:e3:ee:88:d3:
                    ee:6a:7d:6e:9e:51:3f:d0:22:f8:8b:fd:53:c8:6b:
                    6f:22:9b:4a:69:0b:ee:99:c3:ff:56:2b:c7:cc:1f:
                    cf:58:94:13:31:96:9d:41:14:8f:78:de:78:94:e5:
                    70:dd:84:84:65:26:48:ce:f8:e0:8f:4c:f5:67:01:
                    b7:41:ec:b6:fc:d7:41:41:7e:bd:43:91:90:cf:11:
                    b0:40:f0:bf:db:f0:c9:7d:21:84:7b:29:34:5b:86:
                    ea:ac:d7:6d:ba:7f:ed:19:51:2d:fa:df:0d:98:86:
                    81:82:a4:9a:1b:56:68:e5:a8:8d:60:65:2e:41:f4:
                    12:9a:3c:6e:16:c4:a0:fb:f9:80:bf:f5:8e:35:b3:
                    9d:53:fc:4d:96:34:4a:d0:63:f4:71:1e:d6:b6:41:
                    a0:17:c2:60:d8:18:a8:f5:6b:47:91:2b:11:e5:ca:
                    52:d1:23:7b:43:36:52:ab:38:eb:3c:fc:a9:9b:a1:
                    3b:15:d2:ad:53:9f:6c:a6:bc:13:0a:47:aa:1e:1f:
                    df:c6:f7:7b:f7:0e:23:e8:a0:a5:0d:6c:bb:9d:b2:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D7:1F:EB:E3:BA:86:6B:46:CF:56:86:50:88:A0:6C:34:28:91:18
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:13:0c:04:a5:a5:bb:9c:33:ab:36:eb:05:64:06:07:ed:cb:
         bb:a7:cf:40:e1:df:18:56:01:c1:80:83:b2:b2:32:59:d1:04:
         50:7d:d5:79:b5:14:29:79:af:0c:8b:eb:76:d7:52:c6:4f:aa:
         e6:0c:71:c6:46:6d:0e:69:07:af:b4:ab:ba:b5:88:d9:4b:c5:
         b1:bd:24:88:44:97:33:b4:0d:90:bc:68:1d:a9:84:18:cb:02:
         c8:d1:4d:10:73:fe:eb:bb:54:d2:68:03:b8:72:d8:4f:56:d4:
         2a:a6:10:97:6d:7a:41:77:65:1c:36:19:a9:15:ad:d7:46:1d:
         0a:91:a7:d6:de:09:de:7e:ae:ba:09:f1:a9:6c:5b:12:2b:2e:
         05:0b:48:3a:72:c9:af:17:ac:d6:1b:f0:63:e8:a4:5a:09:8e:
         da:9d:6a:f2:9b:10:b2:ec:e5:90:ee:9e:d8:dc:0b:e7:fe:a4:
         c9:ca:d8:9f:c6:2f:45:58:30:58:be:04:2e:aa:3e:f6:d2:f7:
         c3:aa:d0:75:c2:84:d7:03:cf:47:97:de:a5:6e:77:46:dc:1e:
         ea:86:1f:00:b6:7c:b5:6f:bb:b0:79:a3:a7:f7:21:a2:40:87:
         ad:fb:6f:a4:9e:2c:13:e7:24:97:e6:aa:19:7e:58:2e:ca:d1:
         3b:9d:2c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:59:47 2026 by rpki-client