Error: rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
File:                     qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft (raw, json)
Hash identifier:          jz2grMUnD4TSGtWu/YGt5e3qlODrfNUM+4JtSrfZZ+8=
Subject key identifier:   FA:3C:5E:0D:3B:81:E8:B0:6F:30:B6:FB:20:1D:B3:C1:8B:2B:04:7E
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Certificate issuer:       /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial:       088A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
Manifest number:          0879
Signing time:             Sat 14 Nov 2026 02:00:29 +0000
Manifest this update:     Sat 14 Nov 2026 02:00:28 +0000
Manifest next update:     Mon 16 Nov 2026 02:00:28 +0000
Files and hashes:         1: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl (hash: Zqx0KxUXf5v8IPwq0l6ozJv0UNHby1W0N2lBYIDToLA=)
                          2: 6E11E8C68B7011F18D00CBBBCE1D38B0.roa (hash: R6ZAuWQ1b65qdYhlJLI34DH8ImhOccUwMkIcZJKfSZ4=)
                          3: C76433F68B7111F1BB81E8C3CE1D38B0.roa (hash: Jyo6mTt5D+siT/5Sy486p7UlD/qKwUVTTEmDw7nQRpU=)
                          4: 44E2BFD6BEB611EEB2F13E55775412E6.roa (hash: 6BGl+d3/Qn7Bi9MGN7eS+0tAvnZagMzcLCnJkf/75K0=)
                          5: 1516EA16764311EB901D143DF8AEA228.roa (hash: NKQ3jb8Jf2A8DHKj6MSRen4+1RRngARTbxS7x9DY4og=)
                          6: B9DCB9DE8B7011F1A0C8D9BBCE1D38B0.roa (hash: Tkfyz7A/sSnniZvLtR3qk5hB4dmcR1R0uZM1aLmEtpE=)
                          7: 614715108B7211F1B8A9A6C7CE1D38B0.roa (hash: GCcG6qz6sOs6xxzlm6NT7/+vvW8mXelsZNfCKKxtonA=)
                          8: 64B3D22A8B7111F183D4E9BFCE1D38B0.roa (hash: 17rQOz1O2eNeJPsxK6qXRaLtzqR4vb82M+67xoEWKq0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
        Validity
            Not Before: Nov 14 02:00:28 2026 GMT
            Not After : Nov 16 02:00:28 2026 GMT
        Subject: CN=6af7c0bd-fa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:7e:27:6d:90:2d:54:cd:76:f5:59:81:70:
                    9e:d0:47:aa:88:b5:50:41:40:37:3e:14:a4:09:62:
                    69:ee:0a:1c:6f:21:48:d8:c3:18:94:35:b3:96:33:
                    7c:f8:f7:ad:c7:34:4c:74:0b:34:a0:4d:d0:1a:15:
                    0e:24:4e:c4:79:cd:52:8b:96:fa:68:2a:72:5f:28:
                    80:ed:61:e5:ad:77:9d:a2:bd:66:25:fc:f4:29:df:
                    0f:5a:9c:f6:17:0b:47:28:86:29:2e:9c:50:af:c2:
                    1e:35:f4:56:c1:dd:a7:77:8f:a4:62:16:6c:2b:41:
                    f1:84:c5:a9:03:b5:d3:92:b5:bc:d1:38:27:d8:76:
                    d7:d5:86:cd:1e:90:84:28:a1:52:2b:73:13:44:b1:
                    f7:3a:08:6a:42:59:33:97:a7:56:90:25:ba:dd:32:
                    f6:b9:eb:d5:a6:26:e1:de:ce:6c:0c:5f:70:e5:1f:
                    1e:61:2e:48:04:13:c2:55:94:9f:fb:23:db:41:53:
                    8c:a4:d8:c3:83:48:5b:1e:32:16:b3:59:01:c8:29:
                    90:eb:95:48:70:a5:01:10:a5:b1:05:5b:61:2b:77:
                    ad:16:e0:06:47:93:86:4f:cf:e6:cd:07:fb:a6:d5:
                    2f:8b:72:40:2f:85:f3:f1:54:f0:22:9f:72:91:c7:
                    10:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3C:5E:0D:3B:81:E8:B0:6F:30:B6:FB:20:1D:B3:C1:8B:2B:04:7E
            X509v3 Authority Key Identifier:
                keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:31:e0:6e:9e:e9:5e:4e:f8:56:ba:2b:f4:32:c7:7a:f1:69:
         d5:fb:de:1f:01:a7:4a:d9:22:91:cb:8b:a4:2e:d5:64:05:eb:
         36:f9:4b:a0:92:dd:3e:af:50:09:4e:22:ca:ff:db:92:3c:6c:
         01:5e:b6:0b:ef:72:e2:fa:e4:fa:38:11:49:db:5d:62:e7:92:
         64:5c:db:81:3f:b4:df:15:b2:14:1f:37:53:98:ae:4a:0d:96:
         1c:cf:b7:80:f3:ac:01:f8:85:40:65:94:c5:9c:42:3a:07:81:
         15:0f:33:7b:e8:2e:95:ad:4b:42:64:b3:74:b5:a6:82:bd:ce:
         63:c1:56:2a:70:ee:e8:93:1f:70:66:cb:c0:87:0a:29:0c:9e:
         e7:c6:e1:20:6e:e8:60:fd:9c:49:c5:bc:59:1b:41:26:b0:56:
         f4:12:04:ef:47:5b:fd:91:db:82:3b:e2:31:3e:eb:50:35:45:
         68:60:b6:0a:42:a0:c2:ad:16:a6:9e:b5:e3:11:71:76:22:52:
         6e:c5:47:4a:85:ff:c6:c7:33:de:4e:1d:18:42:a3:95:9c:7a:
         38:ce:45:60:ff:c7:92:8b:cb:18:55:f7:2c:7a:e7:d1:64:40:
         76:24:62:80:cd:d7:23:83:b5:91:16:1f:ba:73:81:8c:47:60:
         c2:e4:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:51:43 2026 by rpki-client