Error: rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft
File:                     Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft (raw, json)
Hash identifier:          rZAz6VjZLgw7YanZgQG2S0iWZxYF1vonH0eRZ2PVTX0=
Subject key identifier:   F4:B8:63:DA:E4:F1:CE:28:9B:9D:16:9F:5B:E2:EC:9B:2C:FC:DB:36
Authority key identifier: 56:E9:3A:98:5F:6B:36:7D:36:8B:98:90:37:41:41:23:C0:4A:00:71
Certificate issuer:       /CN=F362E4AFAF/serialNumber=56E93A985F6B367D368B989037414123C04A0071
Certificate serial:       7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vuk6mF9rNn02i5iQN0FBI8BKAHE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft
Manifest number:          7E
Signing time:             Sun 15 Nov 2026 05:43:06 +0000
Manifest this update:     Sun 15 Nov 2026 05:43:05 +0000
Manifest next update:     Tue 17 Nov 2026 05:43:05 +0000
Files and hashes:         1: Vuk6mF9rNn02i5iQN0FBI8BKAHE.crl (hash: ljrIM6wqzo9jdmas9yD/Oz88URz0pqLKOSjgvljPgD4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vuk6mF9rNn02i5iQN0FBI8BKAHE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E4AFAF, serialNumber=56E93A985F6B367D368B989037414123C04A0071
        Validity
            Not Before: Nov 15 05:43:05 2026 GMT
            Not After : Nov 17 05:43:05 2026 GMT
        Subject: CN=6af9466a-8019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:9a:84:86:f4:15:37:aa:cd:ba:be:c9:2d:
                    a6:e2:6d:2f:f1:be:27:c8:ba:9c:c3:52:b3:1e:40:
                    1d:97:49:64:af:3e:71:d8:6d:fb:1c:23:8a:50:4c:
                    49:ee:d7:f4:57:c7:77:87:99:2d:e9:f2:fa:07:3a:
                    9a:21:6e:e4:b4:7c:67:e8:6e:64:ef:6e:f6:9a:b1:
                    88:55:7e:54:6a:12:b8:bd:b7:a2:7e:35:a8:b6:ec:
                    ff:e0:45:1e:12:9c:2e:d0:72:ca:fc:88:7e:60:a1:
                    92:63:fa:40:fe:37:e8:91:b3:30:cf:19:e2:ac:ab:
                    07:8b:94:0e:65:da:bf:83:be:62:e5:86:77:68:3d:
                    7a:e0:61:28:38:35:17:bb:3e:0f:d0:9c:e3:d6:e0:
                    ee:65:0c:70:ab:46:3c:10:5c:41:65:e4:6f:0a:ee:
                    7b:53:db:00:15:b3:00:d4:14:fa:1f:7d:29:ef:50:
                    ff:ae:92:68:5f:c0:d0:8f:79:15:43:e0:df:bb:53:
                    b9:4d:84:62:1f:bd:18:3f:c7:b7:f5:72:bf:42:9f:
                    f7:b8:62:8f:bc:d1:af:04:cf:bf:13:74:16:6a:f5:
                    d8:78:12:fe:64:25:20:bf:24:0a:ab:d7:fd:7d:f2:
                    0a:c6:79:3b:ce:c6:98:6c:de:72:55:4e:3e:3e:19:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B8:63:DA:E4:F1:CE:28:9B:9D:16:9F:5B:E2:EC:9B:2C:FC:DB:36
            X509v3 Authority Key Identifier:
                keyid:56:E9:3A:98:5F:6B:36:7D:36:8B:98:90:37:41:41:23:C0:4A:00:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vuk6mF9rNn02i5iQN0FBI8BKAHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/F717F8FA805211F1A5BA26AACE1D38B0/Vuk6mF9rNn02i5iQN0FBI8BKAHE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c7:66:ab:be:f9:fe:d0:e4:e5:14:e2:19:db:8b:bf:0a:e5:
         df:00:86:fa:84:92:ae:c3:ba:17:a5:72:6c:31:9e:e9:f5:d1:
         26:20:32:05:1c:a5:a8:c6:d4:e3:e7:72:b7:40:a2:cf:11:c2:
         73:52:90:09:9b:ef:2b:7b:98:a8:32:07:d9:3f:8e:8d:4c:d2:
         70:1c:db:41:03:b8:43:01:86:bf:24:a7:60:e1:fa:be:3b:1b:
         b8:4d:a4:04:1d:cc:88:92:1c:d7:f6:0a:49:94:81:48:8b:41:
         ac:88:33:a2:cb:c9:54:fe:a3:a6:9c:a9:54:c8:31:ed:9b:94:
         b5:19:a2:fe:86:78:bc:91:e3:18:4a:72:cf:23:59:14:0f:bf:
         9e:ef:35:ba:d5:3a:27:49:c5:3f:e6:3d:40:88:d6:5f:95:f2:
         59:b7:9b:fb:1b:b2:7b:78:1b:d6:bb:0b:4b:d0:77:d4:2a:f0:
         97:14:a4:e1:f1:58:04:35:7c:24:e2:d7:dd:cc:56:18:91:65:
         fc:70:cb:0a:23:15:cb:4f:31:60:c7:a8:8b:e6:58:9d:86:ca:
         21:08:a5:05:6b:4d:04:07:b7:b6:bd:96:d8:3a:f1:28:75:a3:
         91:99:3b:70:5d:63:56:c8:fc:fd:f8:7b:43:bd:40:1e:23:a7:
         d1:40:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:41:13 2026 by rpki-client