Error: rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft
File:                     d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft (raw, json)
Hash identifier:          wbTVIR8FY2ys9TiFb6BnHyiVDnEeBBiL4P3wpanAAfk=
Subject key identifier:   02:71:F3:F1:B1:EF:BC:AB:2A:DF:B8:15:D3:24:A8:04:0E:8A:D7:8E
Authority key identifier: 77:41:2D:7C:C1:05:3C:E1:9D:37:9C:CC:60:07:B9:25:A1:E7:4C:A1
Certificate issuer:       /CN=F367FC8BAF/serialNumber=77412D7CC1053CE19D379CCC6007B925A1E74CA1
Certificate serial:       04EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft
Manifest number:          04EB
Signing time:             Thu 29 Oct 2026 03:30:10 +0000
Manifest this update:     Thu 29 Oct 2026 03:30:10 +0000
Manifest next update:     Sat 31 Oct 2026 03:30:10 +0000
Files and hashes:         1: d0EtfMEFPOGdN5zMYAe5JaHnTKE.crl (hash: aGrNteE21ox0/VcqKx86WkeLfqTarCSNjU6f7r4P7jQ=)
                          2: 5441A5BA3E8F11EFB89E8F87762E951A.roa (hash: 4xIis8gARgaPEKIucmwJRXfmQHw2+Pjv/MDW5gWNjgE=)
                          3: D163C3CA3E8F11EF8DD4EA8B762E951A.roa (hash: Lkyx7ebIaCWwNF9O0UmMDuhIt39SWodpuHBtJiZV85g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 03:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262 (0x4ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC8BAF, serialNumber=77412D7CC1053CE19D379CCC6007B925A1E74CA1
        Validity
            Not Before: Oct 29 03:30:10 2026 GMT
            Not After : Oct 31 03:30:10 2026 GMT
        Subject: CN=6ae2bdc2-edcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:31:bb:76:cc:b1:ca:15:56:38:6c:d8:72:
                    c8:ee:c2:13:aa:a6:66:9f:7b:f6:c1:18:b5:36:50:
                    be:da:0b:ab:07:05:07:c2:e5:19:8c:f0:e1:6a:58:
                    92:d2:56:05:93:d6:98:e5:16:5a:fd:67:8f:9d:c2:
                    0e:08:8f:3b:86:97:2f:99:6a:b9:6d:77:6a:8d:2a:
                    3e:af:14:c8:31:40:07:e3:04:ef:42:6a:51:6e:0f:
                    a2:53:90:f5:5f:fc:fb:23:3c:44:10:da:ab:61:bb:
                    9d:fe:a0:44:b1:93:3d:82:e1:21:a1:c1:7d:05:46:
                    40:21:4c:4b:26:37:56:89:ae:de:6c:13:07:0c:5e:
                    f5:f7:e3:c0:08:b4:ee:58:e9:19:7f:1f:d7:bb:bb:
                    fe:11:a0:c7:0a:86:56:0b:73:01:a0:a7:8c:eb:c3:
                    48:10:4f:4b:2f:bb:a9:19:ca:a1:89:be:f7:fd:c6:
                    53:13:bc:f4:ce:76:22:c7:64:d4:52:3f:c8:c5:ea:
                    7b:55:92:db:8a:15:89:18:ba:1c:4c:1d:e9:90:83:
                    13:9e:63:0a:84:59:79:1b:8e:46:77:02:4c:b0:16:
                    ad:f5:be:66:62:9c:6c:21:e5:76:79:f2:db:9a:60:
                    27:f2:91:21:46:1a:cc:9a:a6:00:e5:c8:86:82:d7:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:71:F3:F1:B1:EF:BC:AB:2A:DF:B8:15:D3:24:A8:04:0E:8A:D7:8E
            X509v3 Authority Key Identifier:
                keyid:77:41:2D:7C:C1:05:3C:E1:9D:37:9C:CC:60:07:B9:25:A1:E7:4C:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:a6:dc:ad:18:f3:b5:09:61:19:ae:98:c1:05:72:71:5c:
         24:09:56:ee:94:5f:58:14:90:17:83:d9:c3:33:47:71:26:f5:
         5f:1d:4b:9f:ef:94:af:5e:ee:75:46:04:ed:0d:1f:71:9b:99:
         2d:1b:43:57:8c:7b:ed:34:a6:83:a5:52:a3:83:c5:b8:26:c2:
         6d:38:c9:99:9a:4b:4c:bc:4d:e1:bd:d4:83:00:85:42:57:9c:
         05:59:67:88:16:2f:6f:fc:58:99:93:46:b4:d2:33:c8:94:f2:
         4e:e6:2c:88:cd:24:f2:09:b3:42:da:5e:f1:28:07:71:47:63:
         b5:9c:99:11:c7:8e:d6:8b:0b:f9:b3:f7:18:44:9d:dc:03:ae:
         e3:ae:35:89:fe:8f:1b:24:c0:da:70:09:7a:97:be:74:7b:4f:
         f6:70:14:c4:df:26:6b:96:30:88:9e:53:97:42:67:40:9e:35:
         1b:da:a4:c9:c5:f5:eb:1d:45:54:11:07:b5:89:30:2b:7f:4b:
         12:b3:4c:f4:40:25:c3:34:4c:e5:da:14:db:40:d2:11:4b:7a:
         ea:5f:2e:61:2b:41:13:9d:11:95:e0:15:62:c0:60:71:71:18:
         c7:1e:cb:a6:75:88:3b:03:8a:7e:6b:1b:eb:ce:cf:99:30:84:
         38:d1:ac:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:05 2026 by rpki-client