Error: rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
File:                     Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft (raw, json)
Hash identifier:          FvXMuV26mHs8a1WISLGiKomEkjTUujuH8uUdqZbEX7U=
Subject key identifier:   83:F9:9D:62:E1:8D:59:12:0C:70:A9:22:A7:71:05:0F:60:B0:88:31
Authority key identifier: 42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51
Certificate issuer:       /CN=F36303B6AF/serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
Certificate serial:       49
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
Manifest number:          37
Signing time:             Sat 14 Nov 2026 06:00:30 +0000
Manifest this update:     Sat 14 Nov 2026 06:00:29 +0000
Manifest next update:     Mon 16 Nov 2026 06:00:29 +0000
Files and hashes:         1: Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl (hash: VXF7/djMOLiouHDVsZTA6FqG7BXOZ1387EBLZLlf+5s=)
                          2: 3AEE4098D9B811F1A0938ADACE1D38B0.roa (hash: XjmsH2QoCgxzn5qzo0PkIp8qpHS4XOGa/Rr7smKSmeE=)
                          3: D89DB0A4D9CB11F197B9A2D7CE1D38B0.roa (hash: BPoN+HLouSLlc0ZMEZOWuc5CT/rKwAiBzKdcoYWIFLw=)
                          4: D9C3BA46D9B711F18CBC3DD8CE1D38B0.roa (hash: 6/VjH5DzF0b2K7oIs/16apoG8UKlyiL/G8le11t2hts=)
                          5: D3AE546EDCD611F1827676BACE1D38B0.roa (hash: mdXH41QDkmPVLQEJ2cqSe9wJWvtSt17XghAmyK91Wss=)
                          6: 5AA55E3AD9D111F19E1C6DF8CE1D38B0.roa (hash: ly71sWReWlWZU57g5BwSC4ZC77FpGpKTABcpbxRChgk=)
                          7: 08C2EABAD9B811F18BA362D8CE1D38B0.roa (hash: HnBZNOc3uedDlgcj3nmOPrBtYlFln9TnWrFmztlzHr8=)
                          8: 7C30AAB0CC7411F1A79AB2F9CE1D38B0.roa (hash: 3UNcBBTGXDGkBC19KfMrYNG02yB+9xZG2PC6lb7/20s=)
                          9: DE637694DD9B11F19A02DBC2CE1D38B0.roa (hash: 3GauihZTZb9yoXBoh9mhb9mlho2lD2j68RZw9PZIkBk=)
                          10: 67C19E9ED9B811F1BC95ACDACE1D38B0.roa (hash: u0wmZGCeaEr00RT6dpAOJuImlP++KH7eeTYi9FiCtj4=)
                          11: 00B5AB78DD9B11F1AA0D93BCCE1D38B0.roa (hash: g6+pWI/Hz10tDtrUP150M34HkdHmNv0vw9I7bkHNRyE=)
                          12: 0AB80F6ADC0811F1AEB6DBF2CE1D38B0.roa (hash: 4dodTiz/blNws9e+1EJ6cBqGqXRcn2nfBGL/lI1CfJ8=)
                          13: F9449D48DC1611F1B6B2B5D3CE1D38B0.roa (hash: syyl0bbQp/DrJxDnEp3+UouhsiqpOyGnDZbozgrLTZU=)
                          14: 538AEEEACC7411F1928864F9CE1D38B0.roa (hash: Ek4o8gDndgzgoGp8D74Lcua6Yw8tCl1Qn/XiI78/aCI=)
                          15: E682EBBCCC7411F19EDAB4FDCE1D38B0.roa (hash: PSXqPLjVFSHDcjtZ0BTL6m+np8Z0EOCei72ykHqfn4E=)
                          16: 6A363EFAD9D611F18871E018CF1D38B0.roa (hash: ZDW7vI2Q0S/jcSaWgaJg3w7J1zw0ikpfsR11QsXiTCk=)
                          17: 72EBB978CC6411F1A7758E12CF1D38B0.roa (hash: qJm/SgkcNugXTelu59JtHzi/QsMzb2yI1Gky+WX45gA=)
                          18: 0C957E3CD9D611F19475A716CF1D38B0.roa (hash: crnUauEpz0OrdUylOKNwfiIJnEuJ4G8anYagukpSCA0=)
                          19: 40E7B15CDC0911F1BEDC83FBCE1D38B0.roa (hash: E1YEE6EulwkNX/mR2LB5nB/ozrtBbxd8gHNfVZA+IBk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36303B6AF, serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
        Validity
            Not Before: Nov 14 06:00:29 2026 GMT
            Not After : Nov 16 06:00:29 2026 GMT
        Subject: CN=6af7f8fe-7b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:15:2b:55:e4:72:0c:14:bd:b3:c6:ca:d5:
                    d3:d8:47:bf:15:01:7d:1a:66:c8:f1:c0:de:dc:e8:
                    e2:ee:72:b9:e2:c7:c6:7a:8e:d1:7f:a6:04:cc:af:
                    5e:2d:73:a3:f9:fc:62:d5:b0:2e:0d:2f:d2:6e:43:
                    bd:52:e3:dd:8b:93:1f:41:3c:18:13:aa:c3:45:34:
                    35:e8:57:ed:82:73:28:5a:cf:8e:12:b6:2c:0d:36:
                    c8:4b:f1:bc:99:57:06:28:ec:9c:0a:b3:9f:f4:15:
                    73:7c:ff:9c:d0:1d:20:e2:9f:e3:e8:74:28:11:e2:
                    ed:cd:29:16:21:f7:da:74:5b:c9:0d:aa:cc:b2:9c:
                    cc:93:a0:98:d7:0e:cd:42:73:c5:c1:e4:c2:f9:a4:
                    fd:80:2a:b5:4f:d5:0c:54:d2:95:96:53:e4:a8:27:
                    e7:ab:64:1d:ef:67:23:12:b3:c6:9d:3d:d7:1e:ca:
                    5c:d6:0e:b9:2c:0d:89:e4:ec:05:5d:fb:dd:aa:f5:
                    fd:e9:22:d7:d4:fc:c3:55:df:91:b2:1c:90:1b:6e:
                    cb:7f:01:9f:ba:0b:57:2f:8c:8b:9d:40:08:f0:66:
                    a4:fb:bc:7a:59:00:43:8d:8a:d6:e7:f7:1f:d1:19:
                    3a:36:67:72:c4:f8:55:64:0b:61:56:1c:03:0a:4f:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F9:9D:62:E1:8D:59:12:0C:70:A9:22:A7:71:05:0F:60:B0:88:31
            X509v3 Authority Key Identifier:
                keyid:42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e9:d1:db:de:4e:d8:b4:7d:65:a5:62:f3:7a:87:d3:5c:d6:
         0c:25:1a:f3:73:40:31:8f:ab:1f:a6:a7:ce:ad:df:ad:e9:79:
         e9:44:57:60:15:fa:b8:b9:32:8a:78:e0:70:ca:0c:1e:3c:22:
         c2:d9:f6:89:38:42:8e:62:92:df:f5:67:f7:d8:cd:19:31:79:
         42:50:f7:fc:23:3a:b1:bd:70:94:d4:91:58:cc:90:5c:2f:b2:
         50:a8:0e:e4:c6:72:f5:3b:5e:a0:a2:3a:cf:69:fc:34:27:5d:
         a6:81:30:7e:8a:db:72:02:2c:50:1d:74:fe:f6:5b:a5:e2:08:
         6f:90:9a:3e:3d:c0:cf:a1:c1:1e:b9:d3:6a:75:5f:ad:a1:6a:
         e8:7d:61:c1:6d:50:c0:7b:95:11:e6:d1:e8:47:25:ff:73:84:
         9a:5d:3f:b3:30:6a:e2:50:90:9a:d1:27:d7:8b:95:7a:36:88:
         06:d1:41:ec:37:a1:7e:46:9e:5f:1e:4e:de:a6:f0:68:bb:fe:
         2a:88:e4:e3:79:09:1f:88:82:ab:c8:ec:95:18:f3:87:11:1d:
         bc:ce:73:fd:f3:ad:a0:4f:d3:25:a5:78:20:58:0b:c0:0f:a0:
         c9:91:45:23:50:0f:db:58:35:f0:c3:15:19:d9:89:87:ea:43:
         70:fd:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:54:00 2026 by rpki-client