Error: rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
File:                     RGKi49FTZoSmrSMoDP2hhYW6Rug.mft (raw, json)
Hash identifier:          dYWLS4nzX3PhUvU3mCZ3FUZyD9chUmDi357KaEsvyC4=
Subject key identifier:   5C:01:78:96:68:5D:76:C8:6C:87:9D:1F:1B:72:8C:E1:D4:95:82:F5
Authority key identifier: 44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
Certificate issuer:       /CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Certificate serial:       060B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
Manifest number:          0600
Signing time:             Sun 15 Nov 2026 03:03:11 +0000
Manifest this update:     Sun 15 Nov 2026 03:03:10 +0000
Manifest next update:     Tue 17 Nov 2026 03:03:10 +0000
Files and hashes:         1: RGKi49FTZoSmrSMoDP2hhYW6Rug.crl (hash: ltHdgim5aWbvO57SlD2iYTTvnKFw6BM9PUBiLEc8mcU=)
                          2: DDFC2BF08CF711F1BB88A212CF1D38B0.roa (hash: hr6ElrihATc78d5WqQJCxdCYuXhQgsouSoSSt/TE0Tc=)
                          3: 68DCA48A8A5411F1917BEBF8CE1D38B0.roa (hash: 3vTSaEtEOnFn9KuheTF81XkElcWkmzlKDkHKLYKalOY=)
                          4: C48E89BA8A5411F1B004F6FCCE1D38B0.roa (hash: XktUWr86OFCoCLGD5TDHlTLBdurnxWwUHKblb3/NzZs=)
                          5: 148BCB9E8A5511F1951213FDCE1D38B0.roa (hash: J+tkhNUxLX7cRuis8AunqQjdW/I75K6IIxqcvuvvwDs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36455FBAF, serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
        Validity
            Not Before: Nov 15 03:03:10 2026 GMT
            Not After : Nov 17 03:03:10 2026 GMT
        Subject: CN=6af920ef-e295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:dc:2b:f8:d3:3f:3e:cc:48:58:fa:c9:43:
                    4d:b7:f4:a0:c3:08:7f:f5:86:8f:79:cd:44:23:35:
                    41:4f:c9:01:e5:31:fe:3d:71:9d:b6:b6:9a:56:63:
                    70:0a:66:d4:04:3f:7b:65:7d:91:27:5b:55:b9:79:
                    7b:a1:39:c0:7d:2e:53:d6:e4:c7:14:1a:e7:7f:b7:
                    91:48:09:78:55:a1:15:d5:e1:9f:ea:39:d6:3e:05:
                    3a:bb:7a:4b:9d:2c:09:4b:4e:81:38:93:e2:23:cc:
                    1d:e7:db:74:e2:a9:1d:d1:93:27:00:4b:30:84:da:
                    29:14:d7:f4:ec:57:29:d4:3b:f5:63:c0:78:6e:86:
                    a6:68:a0:99:05:08:e9:88:a3:71:ee:18:e6:7a:1d:
                    75:15:7d:50:b1:8f:fe:47:59:3c:c0:fe:e3:01:d3:
                    6d:7a:53:13:b5:40:c2:36:e4:39:86:6b:7b:e0:e2:
                    d7:0c:56:65:9d:a5:3f:d2:79:c3:f9:b6:c1:b6:93:
                    39:59:af:65:d5:d9:ca:9b:9c:33:15:42:0c:c7:4b:
                    47:8e:5e:05:24:1b:9f:33:72:8c:0c:fd:64:37:27:
                    ab:a2:88:f9:dd:d8:5b:3a:8d:3d:be:08:8e:fb:f4:
                    66:4c:b8:13:d6:26:8b:06:13:a9:2e:ef:28:c5:0a:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:01:78:96:68:5D:76:C8:6C:87:9D:1F:1B:72:8C:E1:D4:95:82:F5
            X509v3 Authority Key Identifier:
                keyid:44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:92:62:6f:27:a8:9b:62:74:32:a0:68:4d:a6:aa:02:d6:03:
         7f:b6:e8:2d:df:27:b5:51:97:ea:29:e7:14:2f:b1:06:39:67:
         0e:a9:5c:dd:3d:f3:a4:01:a8:1f:3c:a7:1b:ba:b6:b8:f8:71:
         f4:2c:4f:d6:97:6d:bb:2a:3d:3d:75:95:79:27:29:27:16:6b:
         d4:ec:3f:63:7a:b8:ec:26:3d:7d:d3:25:be:b9:d9:c2:c7:e6:
         b8:f5:9c:82:aa:3b:45:6d:57:cb:bb:b5:54:53:8b:cc:62:27:
         65:75:49:6e:db:88:ef:ab:b2:c5:cb:5f:b0:7a:cd:56:74:3b:
         40:d3:ad:0c:2b:9e:98:c9:2b:80:b3:42:be:14:0c:e6:59:9f:
         ad:db:57:32:61:b3:de:0d:18:29:a9:76:b1:58:76:86:ad:a2:
         ea:a5:27:26:37:f8:6e:ff:a6:67:f4:93:5b:99:db:69:54:75:
         bb:cb:6f:ff:1e:f2:89:31:9d:42:1b:63:b3:0b:f9:f4:6b:55:
         46:de:49:a7:15:6f:50:87:58:ad:76:16:84:b7:22:cc:0c:6e:
         7d:b3:1b:f8:83:88:55:b8:bc:0e:63:07:14:9c:75:26:52:a8:
         3c:08:59:a9:67:05:95:4d:db:25:62:43:6a:24:9e:8d:dc:d1:
         ce:31:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:06:40 2026 by rpki-client