Error: rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
File:                     53ShMCOPlyuu0yi9QDj8r4LXhLc.mft (raw, json)
Hash identifier:          z30p+3bu7lru7rIU/Ft8WXqQu14HGP6If+e/DaMN6LE=
Subject key identifier:   05:9D:F2:BE:DA:7B:34:80:8B:5B:54:8A:CE:63:56:29:56:74:1C:20
Authority key identifier: E7:74:A1:30:23:8F:97:2B:AE:D3:28:BD:40:38:FC:AF:82:D7:84:B7
Certificate issuer:       /CN=F364ECB6AF/serialNumber=E774A130238F972BAED328BD4038FCAF82D784B7
Certificate serial:       0642
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
Manifest number:          0640
Signing time:             Sat 10 Oct 2026 02:50:12 +0000
Manifest this update:     Sat 10 Oct 2026 02:50:11 +0000
Manifest next update:     Mon 12 Oct 2026 02:50:11 +0000
Files and hashes:         1: 53ShMCOPlyuu0yi9QDj8r4LXhLc.crl (hash: 0j24soGwWw4nl6x52zJvEKiKztxofMePvirotXrkBM0=)
                          2: 8A3DCB9072AE11F0B83B26D8DAE4EC9C.roa (hash: h7BfLem+lt8sj9UINDClAa5pp82tMDXEYcWtLgpqyKw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364ECB6AF, serialNumber=E774A130238F972BAED328BD4038FCAF82D784B7
        Validity
            Not Before: Oct 10 02:50:11 2026 GMT
            Not After : Oct 12 02:50:11 2026 GMT
        Subject: CN=6ac9a7e4-6677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:6f:2c:44:e7:82:4b:f3:af:97:f2:6e:10:
                    31:06:37:c0:c1:92:b7:ba:06:64:44:1b:0d:18:aa:
                    a2:29:f9:fa:10:c0:21:53:9f:1e:f8:af:11:63:b1:
                    35:0b:03:05:ff:e2:f7:34:ca:31:92:91:6e:e4:d1:
                    70:00:ae:47:a5:96:17:3a:9e:48:05:49:62:bd:09:
                    15:2d:96:0c:36:b3:75:c0:29:f7:6b:bb:31:36:c4:
                    06:ae:80:36:f3:8f:55:57:05:50:d2:52:ac:82:7b:
                    70:a5:30:17:aa:a9:45:d8:4a:97:7b:f2:50:c0:09:
                    ec:3e:f3:49:dd:7f:23:ef:33:f2:d5:82:7c:c9:a9:
                    a1:fb:fa:c8:d6:86:aa:1f:99:90:a7:b2:97:c1:24:
                    e8:42:29:54:ce:93:b8:ad:61:62:79:6c:0f:ee:69:
                    05:0d:ef:f0:67:37:63:3c:e9:ba:29:4f:76:67:2a:
                    91:54:ba:b1:fa:c7:40:24:4e:04:a5:6e:92:83:3e:
                    df:c6:62:f9:ef:91:01:98:f6:27:b5:de:c3:aa:5e:
                    14:4b:47:90:4e:b8:32:15:20:61:17:42:19:d1:8c:
                    6d:bf:56:6d:be:5c:33:b8:1d:b7:5f:de:ba:39:93:
                    6d:60:7b:9e:0b:15:61:fe:b6:0e:96:13:20:b2:86:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9D:F2:BE:DA:7B:34:80:8B:5B:54:8A:CE:63:56:29:56:74:1C:20
            X509v3 Authority Key Identifier:
                keyid:E7:74:A1:30:23:8F:97:2B:AE:D3:28:BD:40:38:FC:AF:82:D7:84:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b1:4e:e7:84:4e:32:c2:f0:80:a8:a1:43:49:22:32:d3:17:
         b2:a7:85:68:31:71:ba:bb:f7:33:63:29:9d:7f:30:6c:b3:36:
         38:db:17:ed:8b:fb:f8:57:b1:8a:46:ee:be:a9:6b:27:f0:0c:
         88:fc:ca:e9:a4:49:29:40:4f:f8:5c:c3:2c:a4:e5:3d:40:90:
         42:65:b9:8b:f7:ba:82:3f:36:a0:1c:cd:f7:26:d4:c4:00:0e:
         1d:dc:1f:bc:2c:3d:2d:28:d3:92:d1:5e:42:a5:37:08:f6:77:
         36:37:15:b0:eb:e1:13:85:ec:a6:c8:a7:00:f0:ef:95:4e:a2:
         46:8a:5e:60:f9:37:5e:e4:ea:ad:39:58:8b:83:85:ca:08:5d:
         2e:42:e0:1d:32:56:69:89:3f:7c:b0:22:20:df:44:be:50:06:
         a6:cc:8d:2f:39:c9:51:3f:c6:30:5d:25:49:7d:f1:6c:dc:06:
         0e:bd:29:8e:ad:f1:36:9e:15:f2:f2:29:e5:50:b6:b0:ad:6a:
         55:73:c5:72:3b:39:ea:98:eb:d1:4a:1c:b4:7a:95:49:83:60:
         c1:bb:3b:99:25:c2:43:aa:25:08:ce:9d:8d:8c:93:17:ed:34:
         21:62:49:df:87:4c:dd:06:53:a6:7a:e0:69:d7:03:70:ff:37:
         15:5a:e4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:20:31 2026 by rpki-client