Error: rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
File:                     IlhakHPb2Nx6VQRFf_nceJcpdE4.mft (raw, json)
Hash identifier:          oeJiD/f8V7rIclsvvIk1XWekhYCHx46Mv8YsGs6NgwU=
Subject key identifier:   D3:93:7B:75:1A:5C:47:FD:38:0A:29:3E:6B:B6:CB:BC:0F:5E:1B:A2
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Certificate issuer:       /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial:       05DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
Manifest number:          05DA
Signing time:             Sat 14 Nov 2026 03:04:19 +0000
Manifest this update:     Sat 14 Nov 2026 03:04:19 +0000
Manifest next update:     Mon 16 Nov 2026 03:04:19 +0000
Files and hashes:         1: IlhakHPb2Nx6VQRFf_nceJcpdE4.crl (hash: 1MFd0tdAtsElqZISKRN2Gs3CfYVf2R2v/MbjLoXnVVs=)
                          2: 927918B47E9211F1B10E100BCF1D38B0.roa (hash: t1dmJ5rTWfJPttLndRXr3M5OZ9VvePtT9qEnQGPsMKA=)
                          3: 8CE3B23E846D11F1A56407E7CE1D38B0.roa (hash: Nw6b5ero/wWuFYNopyGbuS9j7QQwO11rcoEZb6aRGW0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503 (0x5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
        Validity
            Not Before: Nov 14 03:04:19 2026 GMT
            Not After : Nov 16 03:04:19 2026 GMT
        Subject: CN=6af7cfb3-d256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:2b:50:1b:31:f5:38:0b:78:6b:a3:9c:60:
                    c1:40:1b:95:31:d4:51:0a:0b:90:17:c9:99:f8:0f:
                    f7:64:4a:d7:e2:39:f1:af:20:04:31:f4:43:f8:eb:
                    3d:b7:71:24:32:7e:e2:5c:88:8a:d1:23:fc:22:ca:
                    1e:f0:3a:6d:18:17:75:eb:b0:7e:ca:96:26:3b:93:
                    b7:3d:0c:24:ad:63:cd:0a:f1:18:b9:0d:f5:fa:e0:
                    a2:78:55:87:93:dc:f3:eb:56:c3:fe:2e:f8:ca:56:
                    81:18:e1:f1:71:7c:2d:4c:de:b8:9c:7e:bf:03:ec:
                    f6:23:8d:38:ea:f3:59:9f:6d:d2:08:d4:6a:df:76:
                    4f:ff:b6:f5:3e:9f:d6:1f:87:8b:f4:fe:a1:8a:97:
                    a9:48:64:a0:f8:43:e7:41:a7:47:da:9d:8f:06:d9:
                    36:c0:63:b1:50:0d:e7:bf:95:42:73:83:63:02:0b:
                    c8:05:48:a5:82:77:2a:5d:a7:f9:ac:47:cf:91:ea:
                    8a:b0:b9:6d:cf:a3:6d:97:aa:88:61:18:1c:64:e9:
                    81:38:d1:ad:26:60:5b:37:e0:b7:2e:16:44:93:80:
                    2a:55:90:d3:1a:78:3f:3d:58:eb:c5:e7:90:c4:4c:
                    a6:df:50:03:75:d7:42:0b:74:be:db:6f:47:9f:ee:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:93:7B:75:1A:5C:47:FD:38:0A:29:3E:6B:B6:CB:BC:0F:5E:1B:A2
            X509v3 Authority Key Identifier:
                keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:57:d3:c3:0a:97:75:76:18:db:df:20:bc:e2:6c:27:77:fc:
         fc:1f:f1:e3:f6:e3:17:ef:b4:ff:d4:a9:f1:30:80:7d:02:79:
         25:72:66:0b:51:74:86:31:5e:a0:ba:1a:bc:2a:86:56:e3:29:
         fd:a9:a1:09:23:7a:41:84:78:30:64:ec:43:be:2d:0e:85:82:
         cb:cf:94:51:9e:2c:ad:6d:95:e4:ef:eb:65:ce:15:96:6c:43:
         bd:34:7d:2a:34:2a:21:d6:81:8e:fe:68:fd:0d:55:c1:72:d2:
         e4:96:56:4a:da:55:e8:7b:63:39:ef:91:e1:69:d8:3f:ee:5e:
         eb:29:44:8c:9f:bd:5f:c1:27:32:43:36:9d:dd:85:e4:f8:6a:
         f1:3d:1c:50:4c:8a:6b:25:c4:4b:d8:fa:fb:4c:0c:5b:9b:33:
         50:32:1d:65:cd:11:77:06:93:8f:f3:10:a5:df:4a:fd:85:1d:
         1e:58:45:bc:86:26:1d:11:cf:a7:7e:32:d7:6f:7f:e1:63:49:
         de:ac:6c:1b:28:a8:d5:e5:7c:d8:59:9c:fd:7b:f6:76:83:28:
         41:5b:c1:4b:65:08:e2:e2:8b:bc:66:0e:38:ac:81:bb:d6:23:
         18:66:4f:e5:6c:19:1e:6c:3b:af:50:04:7d:59:ed:a4:ad:6c:
         27:66:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:46:05 2026 by rpki-client