Error: rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/R8rjwXUaUKt84WsdWSKuuSYU-vo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/R8rjwXUaUKt84WsdWSKuuSYU-vo.mft
File:                     R8rjwXUaUKt84WsdWSKuuSYU-vo.mft (raw, json)
Hash identifier:          VNqlXdw4v9v14fkoHlF63gLhnvaBxhpv+S1RLOIOl4g=
Subject key identifier:   CB:98:52:B4:66:AC:1E:17:C7:B4:B9:F9:23:CB:16:68:32:10:ED:6B
Authority key identifier: 47:CA:E3:C1:75:1A:50:AB:7C:E1:6B:1D:59:22:AE:B9:26:14:FA:FA
Certificate issuer:       /CN=F368FA6AAF/serialNumber=47CAE3C1751A50AB7CE16B1D5922AEB92614FAFA
Certificate serial:       04C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/R8rjwXUaUKt84WsdWSKuuSYU-vo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/R8rjwXUaUKt84WsdWSKuuSYU-vo.mft
Manifest number:          04BF
Signing time:             Tue 27 Oct 2026 03:36:31 +0000
Manifest this update:     Tue 27 Oct 2026 03:36:30 +0000
Manifest next update:     Thu 29 Oct 2026 03:36:30 +0000
Files and hashes:         1: R8rjwXUaUKt84WsdWSKuuSYU-vo.crl (hash: gj1uHjFcn1ZNlEYyJnKJKOj6hRRnPivpNp0iOZePln8=)
                          2: 15729B0A690A11EF98BCB26E762E951A.roa (hash: zmwJVdl5qHRMvkRhugxRriwEy2HQyTI+4DenvO+je1o=)
                          3: 275D99F2EF7211EF8774227E762E951A.roa (hash: M455I8LJZLqnMd1UAu/MDdnNO61RG2WV3cSUTHKWXDM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/R8rjwXUaUKt84WsdWSKuuSYU-vo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/R8rjwXUaUKt84WsdWSKuuSYU-vo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/R8rjwXUaUKt84WsdWSKuuSYU-vo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368FA6AAF, serialNumber=47CAE3C1751A50AB7CE16B1D5922AEB92614FAFA
        Validity
            Not Before: Oct 27 03:36:30 2026 GMT
            Not After : Oct 29 03:36:30 2026 GMT
        Subject: CN=6ae01c3f-b83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:5c:9e:08:bd:53:02:1a:30:9c:85:2b:20:
                    51:ca:0a:08:cb:64:35:f5:d6:f7:3d:5c:eb:35:48:
                    9b:f7:0f:a5:c6:d9:49:c6:41:7c:87:35:95:1e:f2:
                    db:38:d0:83:f6:e4:f3:5f:32:ab:f3:19:60:55:45:
                    38:83:d8:65:f9:d6:1a:b1:5e:b5:37:f1:a9:ee:f8:
                    5d:bc:e5:ab:01:4c:54:23:b6:a1:f6:97:91:29:47:
                    0b:b6:fe:90:3a:60:ba:fa:be:15:82:5e:1e:48:1f:
                    5e:ae:94:8f:ba:13:ae:cb:6a:87:af:c1:77:5b:80:
                    ff:d3:b1:60:3c:a4:fe:c0:f9:5f:0f:99:39:f3:cb:
                    b7:3a:ff:35:ee:b9:7f:e9:45:70:ea:59:85:da:0c:
                    59:99:9b:78:12:31:98:2c:11:f5:9a:8c:de:94:a5:
                    6a:f0:d6:5f:62:eb:a5:27:5c:77:b4:9c:85:06:1b:
                    39:f5:85:f4:76:94:1a:1a:56:27:1e:2e:78:ff:64:
                    0e:74:0e:cc:d2:f9:85:88:0f:7d:21:fa:e0:ef:78:
                    cd:80:dc:25:a0:1a:fd:37:c2:da:96:14:b0:a9:77:
                    88:3b:81:75:e7:d0:e9:e9:eb:af:62:66:3a:a1:cd:
                    81:2a:53:27:0d:3d:f5:07:04:47:7d:e4:e8:25:1f:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:98:52:B4:66:AC:1E:17:C7:B4:B9:F9:23:CB:16:68:32:10:ED:6B
            X509v3 Authority Key Identifier:
                keyid:47:CA:E3:C1:75:1A:50:AB:7C:E1:6B:1D:59:22:AE:B9:26:14:FA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/R8rjwXUaUKt84WsdWSKuuSYU-vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R8rjwXUaUKt84WsdWSKuuSYU-vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/R8rjwXUaUKt84WsdWSKuuSYU-vo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b1:30:72:c7:77:71:7a:41:2d:07:e1:ce:8a:c6:3a:61:e1:
         d3:13:67:42:14:d5:e0:3d:81:bb:9e:b3:5f:b6:59:5f:69:ba:
         b0:4e:0b:34:47:75:04:0e:ef:d5:2f:7d:5d:56:b9:91:b7:18:
         b7:51:1d:5d:9a:98:07:a4:69:2d:9b:69:ac:a1:2d:86:37:7f:
         bb:72:67:c2:be:01:73:2d:86:29:5d:6b:b5:89:e0:47:d1:0a:
         c7:4e:9c:43:d1:2d:2c:49:0b:6f:25:b3:b8:74:6e:8f:83:3d:
         0c:a7:b9:d9:0c:b1:80:90:38:9d:3a:fa:83:6a:c6:0c:ad:fd:
         36:71:6c:ab:2a:08:95:d2:b5:69:ca:a5:05:9b:56:cf:c2:8d:
         bb:3d:c5:f7:ca:6b:df:b2:01:d2:60:17:7f:19:57:1e:08:04:
         23:85:10:de:d3:21:a3:1a:66:44:4b:d4:0c:cc:a3:a8:fa:a1:
         47:31:9e:3a:ba:8a:b1:5a:29:53:f9:11:25:92:c6:b7:23:a4:
         71:d7:75:86:22:2c:d2:0e:80:79:68:19:19:e5:6c:b2:89:62:
         0b:37:84:af:88:5e:56:06:55:5a:d9:e5:85:11:3a:cc:c7:08:
         c5:47:94:bb:86:87:fa:86:02:fa:1a:45:42:dc:4a:61:cd:c3:
         4e:8a:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:34:10 2026 by rpki-client