Error: rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
File:                     a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft (raw, json)
Hash identifier:          JossxlKtH/KCtlCOyWqCnvBFBQkjjCqb+9KHenDslT4=
Subject key identifier:   ED:36:20:FE:A7:D9:03:05:03:CA:6D:14:E9:4A:19:56:D9:AA:62:65
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Certificate issuer:       /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial:       090B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
Manifest number:          0905
Signing time:             Wed 21 Oct 2026 01:54:00 +0000
Manifest this update:     Wed 21 Oct 2026 01:53:59 +0000
Manifest next update:     Fri 23 Oct 2026 01:53:59 +0000
Files and hashes:         1: a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl (hash: erjUtseVvYLnaZsIS5t22bpWGyxO6aSfTBujmIdtRp4=)
                          2: E24D05EEE25311EA92AD155EF8AEA228.roa (hash: NhNBSTEDSsS8nv1gPk35pYlSA/j54gCUeglNVOfp5Jk=)
                          3: 8B23E96CE25411EAABDED95EF8AEA228.roa (hash: G1N7VCX3quzWOxjZ6v2ZRD1s53UOL4I3nt3IbyrQuyg=)
                          4: 10D082ECE25411EAB7E7505EF8AEA228.roa (hash: HCeS+ur8bLRwVYC7j4CEZcmf2zW7Wq0HlwhQZaJebjk=)
                          5: 8DA134B6E25311EA83A9A55DF8AEA228.roa (hash: FZLhMJ//MfWJptrE3zcXjMsUeDRso3qHvO1+H5qU2Z0=)
                          6: B193AAD8E25411EAACEFFA5EF8AEA228.roa (hash: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=)
                          7: 57CB6630E25411EA8C85A55EF8AEA228.roa (hash: zokPSNjx8r4IpsyxRDDLa5MvDTlpaKfogK8lEwUhKrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Oct 2026 01:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2315 (0x90b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697F9BAF, serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
        Validity
            Not Before: Oct 21 01:53:59 2026 GMT
            Not After : Oct 23 01:53:59 2026 GMT
        Subject: CN=6ad81b37-7250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:2b:4c:b4:d5:a3:79:cc:11:30:a8:63:69:
                    37:44:3c:ce:b0:ca:94:c9:9b:b8:35:40:09:e1:e4:
                    bb:cf:1a:bc:d8:45:c1:a4:3d:53:40:58:ce:a0:96:
                    6d:ab:83:0a:32:d4:07:df:b6:aa:7e:06:da:2f:00:
                    41:48:71:2e:bc:8b:3f:11:be:6a:93:65:9d:17:66:
                    a7:d4:76:4b:e0:89:d3:34:9a:e5:ce:77:7a:a4:d9:
                    de:42:07:83:bb:00:72:cf:c1:76:50:6a:02:3e:db:
                    21:1b:54:07:5f:38:5b:b9:6d:9f:4c:32:1e:e3:39:
                    e5:34:5d:af:4c:0c:6d:2c:4a:40:a7:79:76:59:cf:
                    56:0c:5c:b6:6c:2b:2f:6b:9d:f4:31:de:ba:18:90:
                    34:d7:26:f2:85:bd:a6:ca:6f:c8:e2:13:63:ed:96:
                    65:17:10:7f:85:12:e1:96:ec:47:31:ac:3f:ff:d1:
                    65:5c:bd:ff:2b:e8:16:00:23:80:12:70:44:fd:e5:
                    5f:27:38:07:39:ab:df:e3:4f:31:e6:f9:35:3d:8c:
                    ce:87:41:ef:9f:ad:3b:ca:5c:01:18:23:64:a6:00:
                    09:62:f4:a9:a8:99:2f:63:85:df:80:61:14:24:c5:
                    cc:ee:c3:e9:2d:19:a5:4c:f9:a2:fb:ac:49:6d:30:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:36:20:FE:A7:D9:03:05:03:CA:6D:14:E9:4A:19:56:D9:AA:62:65
            X509v3 Authority Key Identifier:
                keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:46:17:a2:d2:cd:f1:b3:84:9b:a3:ed:f8:4f:83:f7:0e:46:
         5b:b4:60:b3:9d:a6:d3:76:00:0b:63:6c:60:88:42:87:af:be:
         5f:37:f7:97:e1:ba:bd:b1:a5:a1:a2:3a:18:92:8d:dd:b6:1e:
         e3:66:3c:32:4f:ab:dc:63:d3:25:59:49:6d:90:5d:31:0e:b9:
         49:dc:b7:e8:40:f5:c1:64:95:91:c3:02:18:cc:ee:a7:ac:4c:
         a1:da:10:66:e9:8c:18:b6:8e:e2:1f:6a:92:27:ce:dd:8c:10:
         8f:ce:74:ed:63:86:10:c3:e3:75:8e:b0:45:29:3d:e0:dd:3b:
         74:21:3e:21:81:6b:c2:e0:8f:91:f7:23:d9:b3:2d:c9:75:46:
         7a:f1:5d:f2:3f:b8:6c:99:c2:94:5e:77:5e:7b:de:27:3f:a1:
         e6:f0:f6:36:e1:a7:9b:1c:c6:3a:9f:eb:e9:a5:05:88:8d:9b:
         2c:ca:c5:c5:4d:b0:0c:85:6b:fa:32:d8:33:b5:8c:30:40:50:
         a6:b8:5d:ad:89:f0:a4:3f:76:60:2e:7c:56:6f:93:c2:8f:53:
         94:03:6b:44:34:0c:0e:2b:ae:a9:f3:eb:0c:76:1f:42:dc:e3:
         92:a0:2f:bc:ef:e6:83:5a:0f:ae:c3:d3:aa:dd:47:1f:33:e4:
         09:cb:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:19:56 2026 by rpki-client