Error: rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
File:                     qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft (raw, json)
Hash identifier:          2JfZXpoKm/lb6znc3jHY0hkTthMCVTzzKMslohOYF/8=
Subject key identifier:   CE:AD:56:65:15:62:88:36:2D:BE:2B:A4:4A:0A:21:C4:BA:66:D3:2A
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Certificate issuer:       /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial:       0858
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
Manifest number:          0847
Signing time:             Fri 25 Sep 2026 02:00:44 +0000
Manifest this update:     Fri 25 Sep 2026 02:00:43 +0000
Manifest next update:     Sun 27 Sep 2026 02:00:43 +0000
Files and hashes:         1: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl (hash: Nvspd9ZzwMUGoujdM3twfDAjHJ8UHPtZiLmIrT6AQxU=)
                          2: 6E11E8C68B7011F18D00CBBBCE1D38B0.roa (hash: R6ZAuWQ1b65qdYhlJLI34DH8ImhOccUwMkIcZJKfSZ4=)
                          3: C76433F68B7111F1BB81E8C3CE1D38B0.roa (hash: Jyo6mTt5D+siT/5Sy486p7UlD/qKwUVTTEmDw7nQRpU=)
                          4: 44E2BFD6BEB611EEB2F13E55775412E6.roa (hash: 6BGl+d3/Qn7Bi9MGN7eS+0tAvnZagMzcLCnJkf/75K0=)
                          5: 1516EA16764311EB901D143DF8AEA228.roa (hash: NKQ3jb8Jf2A8DHKj6MSRen4+1RRngARTbxS7x9DY4og=)
                          6: B9DCB9DE8B7011F1A0C8D9BBCE1D38B0.roa (hash: Tkfyz7A/sSnniZvLtR3qk5hB4dmcR1R0uZM1aLmEtpE=)
                          7: 614715108B7211F1B8A9A6C7CE1D38B0.roa (hash: GCcG6qz6sOs6xxzlm6NT7/+vvW8mXelsZNfCKKxtonA=)
                          8: 64B3D22A8B7111F183D4E9BFCE1D38B0.roa (hash: 17rQOz1O2eNeJPsxK6qXRaLtzqR4vb82M+67xoEWKq0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136 (0x858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
        Validity
            Not Before: Sep 25 02:00:43 2026 GMT
            Not After : Sep 27 02:00:43 2026 GMT
        Subject: CN=6ab5d5cc-39cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:62:8b:5a:c7:56:bc:48:ba:a5:12:85:3c:
                    5f:fe:25:4f:36:79:58:e9:fa:3e:21:cd:64:2b:ee:
                    04:59:84:c6:e8:49:8a:f6:bc:f4:d2:6d:26:7d:17:
                    7d:70:18:15:e8:40:13:57:c4:e9:0a:a5:7e:5b:46:
                    5e:17:88:18:0a:fb:1e:2e:b3:6b:5a:f3:85:b4:ef:
                    2f:9f:69:e6:56:5e:60:4e:60:e1:89:4f:70:9e:3f:
                    b4:5e:8f:c9:b7:51:e5:31:3b:54:54:62:68:43:f8:
                    a8:9d:fd:60:21:87:cf:35:3a:3e:89:2a:00:fd:31:
                    d6:80:d7:21:14:31:08:49:64:2a:8e:67:b0:cf:56:
                    43:c4:8d:b9:e8:73:2e:ef:d9:e3:74:f2:52:99:04:
                    33:ce:55:0d:fa:4f:a4:d4:64:d6:31:49:10:6d:d4:
                    28:41:26:15:5f:0a:b6:ba:97:60:4b:95:0b:cc:5d:
                    93:95:d1:8a:dd:fe:7e:20:26:33:cb:28:5b:53:63:
                    20:6a:2a:82:2a:d1:de:13:43:d9:04:5a:34:d1:36:
                    3a:5d:df:f8:c5:29:9d:ee:a3:63:1c:27:af:91:58:
                    12:ba:97:e2:d0:b5:d9:e4:aa:dc:5f:60:81:9a:ec:
                    98:c9:44:b4:d5:79:a9:45:be:21:ca:c0:32:c9:f2:
                    6a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AD:56:65:15:62:88:36:2D:BE:2B:A4:4A:0A:21:C4:BA:66:D3:2A
            X509v3 Authority Key Identifier:
                keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ab:9b:7a:2e:e4:73:df:36:65:33:7e:b3:c8:9a:f2:50:20:
         d0:8c:fa:d4:63:2d:29:8b:33:e2:9f:ba:77:6c:51:14:02:9c:
         a1:f9:e6:02:20:03:0d:80:38:ca:1f:e7:bd:3f:2b:c4:49:5f:
         d6:1d:66:7d:2d:5f:62:f3:e6:8f:8a:3e:b4:e4:27:43:e5:21:
         e6:a7:de:0f:4a:de:a3:28:38:86:b5:9e:87:73:78:c7:cf:b3:
         f2:d7:a2:59:cf:28:23:16:2a:90:5b:ea:05:dd:50:3e:92:76:
         f0:36:57:09:9d:9d:5e:b0:89:c8:17:8e:e5:65:ad:b7:98:53:
         a8:f3:bd:55:96:59:e7:57:be:d0:be:b7:30:e8:0a:58:40:21:
         2e:81:52:37:d1:d7:47:9e:e8:fd:52:1f:ed:bd:e6:8b:b2:4d:
         5a:fb:ec:bf:05:68:c3:e2:7c:9e:0d:48:b4:7a:ab:a4:02:75:
         a8:4f:56:96:ea:04:9d:63:2d:18:23:6c:61:d6:fc:0c:55:b5:
         af:11:11:65:5e:2e:ab:ed:47:05:85:d7:bf:97:d0:08:7f:3d:
         19:6b:61:ab:09:1f:ba:61:39:11:8d:a8:5c:af:28:20:ad:df:
         c4:6a:94:20:18:0c:14:95:97:15:82:ad:c7:79:ca:1d:a5:d9:
         8e:a6:53:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:25:16 2026 by rpki-client