Error: rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
File:                     LN9YDjdnVbH4xogIQhJt1j3XTuc.mft (raw, json)
Hash identifier:          TLE9BJgL+Hmwx3IFrNVm4LKMoutkQv/GHKs6kb/dwUk=
Subject key identifier:   59:A5:00:F3:44:95:2E:5F:CD:C6:95:2F:43:98:46:CD:4A:DE:B0:FB
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       0943
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
Manifest number:          0931
Signing time:             Thu 08 Oct 2026 01:52:36 +0000
Manifest this update:     Thu 08 Oct 2026 01:52:35 +0000
Manifest next update:     Sat 10 Oct 2026 01:52:35 +0000
Files and hashes:         1: LN9YDjdnVbH4xogIQhJt1j3XTuc.crl (hash: 3iqVVyZhcR0kMVonuKjZ+f2L1Bn6/5gOAdEttArR7ms=)
                          2: 273CF154890F11EEAE5F7C364AD9E6FC.roa (hash: 6Zyoo60Pz+GnvK6rZB7VRukfQvQPSJF7/Al01Yw7AE8=)
                          3: C01FDA868C9911F18503E1DCCE1D38B0.roa (hash: kQtLsW7D9ICZ09fDE52xx9CZ7qcYPPsGFlQk50LU9yY=)
                          4: 05C23B208C9911F18B7848D8CE1D38B0.roa (hash: UBe/FinZwlLfNd1I4Bm1Xqdo/RNekj20lzTVHaiEBsk=)
                          5: 718E7D0C86B111F19930B2BDCE1D38B0.roa (hash: nBpUPuhm+PdhHS8iH4gpkrl2A2IJbJ1GitlJ8/Nq+0o=)
                          6: EF27689C86A611F18F5DC2FDCE1D38B0.roa (hash: hoi8TgbPp6u8/kTs9rFoka8RNFl9NxDAJ/DZIKG0zYc=)
                          7: 9799CAE68C9811F1BA0F14D6CE1D38B0.roa (hash: TCzfsB8L6naHhIMK6FDSVqSB8/tnKisssUeS0Sja/pM=)
                          8: 66B4A4A48C9911F1BCD0C4DACE1D38B0.roa (hash: 1ybCzxMXlxjH4FAEOI1Qgd0351KDCVr4YxHCk74ZKG4=)
                          9: B65B4AFA86B111F1B35420BECE1D38B0.roa (hash: kmExG71hjRrSnQLc9Za9djJ4yDfiRKmuCxsWcutkbII=)
                          10: 2E8F703A8C9A11F19CA16FDFCE1D38B0.roa (hash: 0LNHFPvTTVmKRurY7oAMszXzqgYdND56d0u2tu3Tva4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371 (0x943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Oct  8 01:52:35 2026 GMT
            Not After : Oct 10 01:52:35 2026 GMT
        Subject: CN=6ac6f764-8e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b3:aa:f5:0d:32:51:05:f2:04:dc:08:e4:0c:
                    a6:8d:8e:1b:81:35:9f:58:71:07:6f:b5:d0:4d:b8:
                    f0:2c:1f:b3:d5:81:c5:48:08:e5:b1:44:70:27:50:
                    b6:d7:f3:e4:fc:25:71:58:20:40:f3:67:f8:4d:c2:
                    e5:a9:81:31:cc:a4:d8:93:52:f2:34:bc:58:3f:50:
                    3c:f4:e1:be:de:c4:fb:48:4a:55:96:d5:6e:e5:5f:
                    e3:77:7b:c9:99:36:46:7b:ef:01:b6:52:3e:38:d2:
                    4f:2a:20:d9:aa:29:52:4c:b6:55:b7:4b:2b:28:73:
                    2f:e3:8b:74:9d:e0:ed:59:e4:17:f3:3b:ad:35:93:
                    1b:d5:1e:9c:95:24:d1:71:e5:4e:2e:2c:33:49:ce:
                    60:6d:11:74:1d:37:93:73:d0:98:50:38:1f:02:d9:
                    1b:96:56:26:fa:2d:74:59:09:17:bd:a5:62:75:78:
                    06:5a:86:22:fe:3d:21:78:14:49:c3:1e:f2:c8:74:
                    b0:c7:aa:b6:f4:60:0c:65:a6:ce:9d:45:6f:7e:a6:
                    00:e4:a8:0e:59:54:37:98:cd:5e:a7:ad:e8:b1:34:
                    a4:88:bd:b8:68:8f:e6:e4:d7:c1:dc:7d:0f:cf:58:
                    50:f0:4e:4a:b7:ff:ae:10:2e:fe:95:67:ef:df:0b:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A5:00:F3:44:95:2E:5F:CD:C6:95:2F:43:98:46:CD:4A:DE:B0:FB
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:85:db:72:74:2b:14:cc:70:8d:b8:bf:ee:b8:56:81:bf:a9:
         d2:2e:c3:26:76:ba:03:a8:ed:ab:d5:4d:db:4f:17:da:65:76:
         e5:eb:41:9f:3e:34:c3:99:54:8a:ac:3e:f1:73:51:5b:8b:dc:
         3a:41:ed:16:2e:60:1e:dd:87:72:61:55:d7:67:a8:a5:46:fc:
         11:1b:c8:de:29:15:6d:b9:10:62:a7:24:17:11:fd:da:a7:57:
         2f:42:a1:49:58:c4:c4:c2:30:01:17:41:9d:99:3c:26:6a:67:
         a5:2c:7c:52:2c:aa:f7:d2:50:5d:19:0e:d0:11:36:a6:42:e9:
         f5:60:37:b1:87:fd:43:06:ff:b9:24:72:cb:ee:e8:5a:a3:7f:
         ef:aa:68:b0:64:0f:e1:87:a2:4d:4a:36:67:cc:7d:3a:88:f2:
         ef:0e:48:07:25:7f:9a:6a:53:54:8c:1f:f1:8a:4b:6b:2f:8c:
         12:ac:c1:0a:ab:47:d0:ce:08:dd:5b:e4:53:02:ab:55:8d:c8:
         61:d2:03:82:b8:36:b9:03:bf:14:8a:77:ca:cf:4c:36:f7:4f:
         37:47:e6:ff:55:0a:9f:b4:01:43:f1:48:8e:90:69:a1:39:ce:
         16:49:e0:f6:70:0f:e6:4d:d7:b2:25:65:22:42:5a:8c:0a:8d:
         ed:d0:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:59:27 2026 by rpki-client