Error: rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
File:                     Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft (raw, json)
Hash identifier:          v8R2DnyCljP3S1h7E3I5EcUip4goCjX+n8elFTHQn58=
Subject key identifier:   E9:E4:CD:C0:B7:28:B6:A7:F7:72:A1:02:BF:28:E9:1E:3C:C9:58:E5
Authority key identifier: 3F:2D:44:F5:03:5B:D7:69:16:93:56:71:26:3D:1F:1F:E2:2D:3F:D1
Certificate issuer:       /CN=F368CC63AF/serialNumber=3F2D44F5035BD76916935671263D1F1FE22D3FD1
Certificate serial:       02A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
Manifest number:          029F
Signing time:             Sat 19 Sep 2026 08:57:13 +0000
Manifest this update:     Sat 19 Sep 2026 08:57:12 +0000
Manifest next update:     Mon 21 Sep 2026 08:57:12 +0000
Files and hashes:         1: Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl (hash: Pqr/Ci3dlpGs/GNlQdFWPqOxfZRftUsYoQilQYCi4sA=)
                          2: A860D670B24D11EF9178D468762E951A.roa (hash: CZNA+65qRaZByZrXC7MwxwGK34lyEikm+CF4MxQgD/4=)
                          3: D2C2ED58B0DF11F1948204F4CE1D38B0.roa (hash: ig3pWebNzhkAbdJaVxTD4hUpPw7FGa5mzho4uOWXcnI=)
                          4: 07378F8C22A911F1A9CE04E7DAE4EC9C.roa (hash: MwtDui3KOTCCH/WJVUEi4Tdd2fiyqG9nvfQXGB5WOzM=)
                          5: CE647098B24D11EFBF39E46A762E951A.roa (hash: Tr+Uq3brNImHW7wN7GMiqLrOGB3PYGFFy8E/vBXE1gM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CC63AF, serialNumber=3F2D44F5035BD76916935671263D1F1FE22D3FD1
        Validity
            Not Before: Sep 19 08:57:12 2026 GMT
            Not After : Sep 21 08:57:12 2026 GMT
        Subject: CN=6aae4e69-0c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:88:5f:ba:ec:06:36:76:00:20:b6:38:34:
                    1e:14:b6:6e:42:7b:10:88:08:1f:4c:a9:1f:05:71:
                    a5:6b:1f:06:05:f3:d1:6c:e3:7e:f3:5c:cc:ca:b8:
                    7e:c1:7f:82:1e:75:72:6e:2d:23:43:2a:48:70:86:
                    01:8c:98:0d:4f:a9:56:15:dd:aa:15:d4:19:10:3b:
                    16:69:f2:3b:90:92:10:94:c0:db:df:41:ae:eb:82:
                    61:34:1a:4e:d8:54:d8:16:57:d7:fa:6e:f2:e0:f4:
                    ae:fb:66:09:16:27:55:e2:2d:87:02:5a:c1:e0:3e:
                    25:b9:8c:9e:c6:0d:74:61:c6:b2:f6:6e:98:5c:7b:
                    59:ae:7d:81:67:c9:c3:e2:b1:00:d6:4c:d3:65:0a:
                    9d:a6:1a:bf:b5:82:64:f8:f8:b3:77:35:0c:40:dd:
                    15:00:5e:e9:83:4d:93:44:09:2f:ea:6f:ff:41:ef:
                    0c:c5:57:6c:53:e8:8e:71:58:46:d0:6f:53:81:0d:
                    ce:91:e8:c9:2b:a5:92:b1:7d:ba:4c:17:c3:e2:84:
                    d1:b1:c5:51:2f:7e:ad:8a:b4:72:68:b1:4e:8e:66:
                    f6:64:bf:0a:73:af:e7:2c:ff:d5:db:0d:18:07:12:
                    75:7b:05:7b:a1:93:ba:43:2f:0c:ff:45:02:40:cd:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E4:CD:C0:B7:28:B6:A7:F7:72:A1:02:BF:28:E9:1E:3C:C9:58:E5
            X509v3 Authority Key Identifier:
                keyid:3F:2D:44:F5:03:5B:D7:69:16:93:56:71:26:3D:1F:1F:E2:2D:3F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:1d:cf:c7:9f:0f:f7:ce:8e:a4:70:86:26:e5:0f:f5:07:eb:
         a2:fa:1b:49:4d:cd:fd:20:6e:9f:ec:a2:bf:c5:67:8c:68:a4:
         76:3a:be:31:c9:11:65:22:ff:85:1b:93:c9:4e:b3:5b:88:b4:
         7c:3d:1b:f1:58:82:85:8f:0c:39:cb:94:23:a0:9a:f0:56:8b:
         67:a2:cd:96:9a:6f:d8:37:7f:e7:53:bc:bc:ee:98:7e:3b:2f:
         f2:32:8d:2b:8d:b6:bc:8f:51:14:82:62:25:b4:1d:7c:1c:a9:
         49:b9:5a:42:86:47:26:07:8c:32:e0:fd:fe:ba:01:66:af:f7:
         1a:c4:2c:1f:b6:a1:f6:c6:98:9f:04:23:fc:70:0f:39:80:2d:
         d6:c6:9f:a9:8d:36:7f:d9:a8:67:3a:4e:34:04:20:fc:a4:ea:
         a1:f2:2d:0b:82:5c:da:d8:70:2d:1e:f1:98:1a:d0:71:9e:51:
         77:6f:be:17:c2:37:69:c1:fb:ad:fb:07:50:74:1b:e8:30:8d:
         ba:61:f7:e8:80:c9:3e:9f:2d:9c:cc:ad:8a:f6:0c:9a:d4:52:
         02:cb:db:a2:5f:3a:fd:d6:5a:6a:9d:e1:e7:83:81:d3:ad:98:
         a7:5c:69:85:d4:3b:f6:ed:32:38:88:a3:3a:60:7e:b8:9f:01:
         f7:0a:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:41:53 2026 by rpki-client