Error: rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
File:                     8oCesrM_mm8nojXfSsFD0ZKvTiA.mft (raw, json)
Hash identifier:          ycvWlT8IsIOMYET7EZ2JXmPTa6gilEIbGUC9ihcR2bA=
Subject key identifier:   0A:91:9F:97:BB:2B:71:3C:11:BC:00:D4:C4:7C:EC:56:BB:3C:7E:5F
Authority key identifier: F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
Certificate issuer:       /CN=F362D462AF/serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
Certificate serial:       017E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
Manifest number:          0179
Signing time:             Sat 14 Nov 2026 05:13:34 +0000
Manifest this update:     Sat 14 Nov 2026 05:13:33 +0000
Manifest next update:     Mon 16 Nov 2026 05:13:33 +0000
Files and hashes:         1: 8oCesrM_mm8nojXfSsFD0ZKvTiA.crl (hash: aC/TxEztJraxmoNanEgJGiPyOG9B0dLTrlJQ0rYEM5s=)
                          2: B2C8AACAC52F11F0998AD295DAE4EC9C.roa (hash: M1WCEGgxvoFjPYMq+CtmmycDaqSwGszFTRcc1Y1aToY=)
                          3: 45DD78D8C52E11F08D363A8DDAE4EC9C.roa (hash: yfdoYAwEYWo4igb+kX7l8vEmL7IfitH9Vwqq7einS1w=)
                          4: DE3F4FCEC52F11F0BE75EE95DAE4EC9C.roa (hash: ZoPAKhD86vIDvu9auYJyv1OJTVxIksNymQURFZTgdYQ=)
                          5: 26BDEBE4C52F11F0A755A591DAE4EC9C.roa (hash: RjPpOx06Fz/3A2OGNli01TWWFc5ri4vhGZoXWXhU+F8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D462AF, serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
        Validity
            Not Before: Nov 14 05:13:33 2026 GMT
            Not After : Nov 16 05:13:33 2026 GMT
        Subject: CN=6af7edfe-f7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:a1:d5:6a:57:08:90:ef:71:b9:cd:a2:b8:
                    d0:5f:a0:36:dc:d6:cc:76:f1:f9:e4:93:06:67:bf:
                    7f:ac:84:ef:c4:95:28:4e:fa:86:2b:31:82:8f:07:
                    cb:06:73:51:ba:27:8f:23:b1:70:46:2b:3c:3d:2f:
                    8c:6e:70:96:15:2f:e7:7a:f4:80:32:8e:7b:1b:2f:
                    ee:0a:43:d3:ca:22:77:df:ca:c9:94:16:d9:c1:14:
                    fe:56:22:3c:a1:78:b6:ce:97:4d:24:8c:8b:62:1e:
                    1f:ca:d6:6d:15:2c:d6:dd:60:c5:aa:1f:7f:88:06:
                    0d:9e:0f:03:fd:c2:87:b1:80:a0:b3:68:47:2b:80:
                    30:98:5a:80:81:66:d3:b6:39:9d:af:60:30:85:50:
                    d1:58:21:bf:8f:d4:59:7d:9e:37:32:ff:11:17:8d:
                    7c:3e:66:ea:e8:cb:54:b7:97:98:90:3a:83:70:e1:
                    d2:4e:65:f4:b6:1f:82:35:6f:bc:67:ed:02:1b:e2:
                    64:17:da:e7:76:64:16:e2:06:2a:5e:06:35:b8:f2:
                    b3:5a:d5:1c:70:39:57:12:62:49:1c:8e:e3:8e:45:
                    d1:0f:d6:46:e6:ae:c1:34:a6:f6:bc:d4:5e:59:7e:
                    b9:7c:42:8e:88:f7:12:c7:ce:03:d1:56:67:58:58:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:91:9F:97:BB:2B:71:3C:11:BC:00:D4:C4:7C:EC:56:BB:3C:7E:5F
            X509v3 Authority Key Identifier:
                keyid:F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f2:7e:2c:b5:7e:f5:e2:d6:7f:2a:3a:ce:cf:49:77:b2:ed:
         70:14:2c:c5:cd:b8:da:b7:29:00:4d:fc:2e:6a:25:09:8f:d1:
         ac:38:08:8e:59:f0:17:53:2d:c6:85:23:12:5a:ec:ba:17:5a:
         8c:f6:b8:83:8c:d5:e3:aa:fe:24:af:1c:57:af:70:9b:cd:14:
         39:c3:d1:94:f5:24:39:78:51:16:87:4f:d5:ef:89:23:df:ce:
         24:29:86:8c:54:67:7e:41:8f:37:0f:d8:19:10:1d:cb:21:9e:
         c7:bd:f9:ee:a9:06:39:00:27:f0:2f:21:85:ad:8f:aa:4b:dd:
         29:c3:9f:e8:29:bc:28:7f:72:79:f4:80:ab:ae:10:f5:f4:0f:
         ad:3d:8a:46:35:9a:04:d1:ac:e8:52:df:34:9f:37:64:7e:65:
         9e:de:93:fb:3f:d6:15:ac:4d:3f:03:50:1c:09:0f:f7:31:e9:
         fd:ab:9c:81:8d:10:85:5c:5d:1f:7b:a7:c4:91:08:bb:51:0b:
         d4:f0:f8:85:98:2e:76:93:e5:21:83:94:7f:53:5f:07:71:8e:
         49:33:3b:4f:74:41:bf:39:39:4c:6d:1c:ca:b3:40:ab:e6:4f:
         03:89:db:d4:56:67:40:1c:64:3c:7f:7a:1e:8c:32:76:55:f5:
         ed:67:c6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:39:06 2026 by rpki-client