Error: rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
File:                     FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft (raw, json)
Hash identifier:          DRixooXip/XqIfrjg0tACEhB1ifsOIBKAs9tiBFKmi8=
Subject key identifier:   DE:C5:03:36:4E:7E:1C:78:63:88:A1:CF:BB:99:03:B9:CC:8E:33:17
Authority key identifier: 14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4
Certificate issuer:       /CN=F3660137AF/serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
Certificate serial:       0729
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
Manifest number:          0724
Signing time:             Sun 25 Oct 2026 02:32:45 +0000
Manifest this update:     Sun 25 Oct 2026 02:32:44 +0000
Manifest next update:     Tue 27 Oct 2026 02:32:44 +0000
Files and hashes:         1: FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl (hash: q/vsN+gPd8gxRSHFSiWBU1EEpY/rLvwVN4lzVf/0/Tg=)
                          2: DE32767C26A111F18A03048CDAE4EC9C.roa (hash: cFgU0rkBiooP5t2op0uOagxyM9Y5m1ekTnNkc5voo+0=)
                          3: A7F6C2FC26A111F196E5B58BDAE4EC9C.roa (hash: frbYM1Tte3sRuJ9vX0o75c1wT8t0v+HRSy03Ck77qzc=)
                          4: B0FF8E2C1D2A11F1A3E757D7DAE4EC9C.roa (hash: cwfqkhpaYyYTN1h+3fD599ZRYz2Y5rul4U0ip6/EHOQ=)
                          5: F7CDB4281D2A11F1904580D9DAE4EC9C.roa (hash: XzMEwwkNS5xxWk1ir2zt5zwbDTlcZzrwuFW8GYrB1JY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660137AF, serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
        Validity
            Not Before: Oct 25 02:32:44 2026 GMT
            Not After : Oct 27 02:32:44 2026 GMT
        Subject: CN=6add6a4d-34c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:90:af:2a:75:13:22:41:81:6a:e4:c2:c3:
                    85:e5:0c:34:1b:ad:7f:01:d2:12:f9:dc:17:22:b5:
                    44:00:d9:92:79:a1:0c:ba:ed:4a:31:fd:de:a0:96:
                    b9:30:cf:3e:72:96:bd:73:93:74:ab:6b:de:1e:05:
                    ae:a0:0b:84:5e:86:d2:ed:32:b9:83:ba:97:cc:b5:
                    c5:96:9e:d5:f5:40:6a:12:2e:fa:3a:5c:1c:a4:ac:
                    8e:8b:2f:25:a4:e6:a6:7c:c4:26:a0:ea:2b:3e:1e:
                    6a:69:3e:7a:f7:f7:a7:72:5c:9c:3e:58:8b:9d:08:
                    6f:d9:8c:4b:0e:19:9f:f4:5d:0c:16:93:74:7d:b3:
                    d8:49:02:8b:13:41:de:cf:ac:17:df:07:5c:ec:41:
                    ab:d4:47:25:ca:4d:8c:90:5d:e1:f2:28:c5:4a:de:
                    b6:84:18:0d:53:0e:6d:34:d4:f2:48:c2:77:1a:30:
                    6f:48:f8:d1:66:b1:75:b8:8a:59:ef:6a:6a:0f:be:
                    d8:58:9b:fa:e0:25:13:ff:0d:5c:98:98:02:e0:41:
                    ad:db:1b:f0:6f:4b:bb:85:1a:6d:d3:62:75:02:02:
                    34:89:19:20:c9:d4:c5:b4:a6:26:21:c6:e6:6f:53:
                    2b:7a:5c:1c:d6:f8:2e:3f:95:de:bd:8f:7d:c2:da:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C5:03:36:4E:7E:1C:78:63:88:A1:CF:BB:99:03:B9:CC:8E:33:17
            X509v3 Authority Key Identifier:
                keyid:14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:f1:c4:86:9f:d7:19:b8:7d:dc:fe:e6:d6:31:7a:4c:d5:
         08:93:c2:f4:9f:3b:63:2b:80:4d:0f:80:0d:58:00:d7:9f:f7:
         4e:e4:5b:a7:82:08:ea:3e:3d:a2:b1:13:b5:7e:fa:f0:3a:54:
         38:19:1c:00:7e:16:2a:1c:f6:7c:eb:b2:c4:75:9d:f1:fe:d7:
         d1:0b:75:80:e2:32:85:5e:45:fa:ed:8a:a5:d4:11:10:73:be:
         fa:3b:61:06:1e:0f:95:26:f8:cd:3c:80:f2:b2:19:c6:7f:04:
         d8:22:5d:7e:4a:92:5f:23:2d:41:e5:19:9c:56:f0:47:de:19:
         aa:f1:c1:75:c2:9e:83:d7:f8:18:7e:60:ed:45:e6:05:ba:71:
         6a:68:96:52:a7:10:b4:2e:62:25:9c:f8:72:c4:61:4c:c9:3c:
         34:e8:d7:54:a5:27:bf:d8:cc:c5:92:c3:5a:2e:d5:e5:0e:c1:
         b2:ab:b7:40:86:74:31:3e:d9:de:03:f5:01:fd:72:ef:20:b0:
         fa:43:29:6a:27:75:82:c3:67:c0:82:bb:26:19:7e:a5:68:77:
         de:ed:30:a6:00:cb:8d:cf:59:7b:45:3c:5e:22:d4:86:30:b5:
         d6:c7:41:7d:dc:a2:c4:36:1f:43:f3:70:a7:f3:7a:66:91:0a:
         f8:9c:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:50:17 2026 by rpki-client