Error: rpki.afrinic.net/repository/member_repository/F3664D8D/C5F37738CD6211F1AF0CBE07CF1D38B0/Eva48tY24zx4PCGW1WgdOewGN5E.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3664D8D/C5F37738CD6211F1AF0CBE07CF1D38B0/Eva48tY24zx4PCGW1WgdOewGN5E.mft
File:                     Eva48tY24zx4PCGW1WgdOewGN5E.mft (raw, json)
Hash identifier:          MeBR//R4oz/TUEzIaR+zslmnTHfjMpAL4aKaexUk55Q=
Subject key identifier:   B3:E6:21:D9:43:D2:21:A3:C5:C6:9A:6F:75:A3:68:05:A3:67:4F:79
Authority key identifier: 12:F6:B8:F2:D6:36:E3:3C:78:3C:21:96:D5:68:1D:39:EC:06:37:91
Certificate issuer:       /CN=F3664D8DAF/serialNumber=12F6B8F2D636E33C783C2196D5681D39EC063791
Certificate serial:       1A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Eva48tY24zx4PCGW1WgdOewGN5E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/C5F37738CD6211F1AF0CBE07CF1D38B0/Eva48tY24zx4PCGW1WgdOewGN5E.mft
Manifest number:          1A
Signing time:             Sun 15 Nov 2026 06:02:43 +0000
Manifest this update:     Sun 15 Nov 2026 06:02:42 +0000
Manifest next update:     Tue 17 Nov 2026 06:02:42 +0000
Files and hashes:         1: Eva48tY24zx4PCGW1WgdOewGN5E.crl (hash: Kac54alQxmhqUtlr0xNr8HdRVZTj6dixQ223tbMJ7Fw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/C5F37738CD6211F1AF0CBE07CF1D38B0/Eva48tY24zx4PCGW1WgdOewGN5E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/C5F37738CD6211F1AF0CBE07CF1D38B0/Eva48tY24zx4PCGW1WgdOewGN5E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Eva48tY24zx4PCGW1WgdOewGN5E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664D8DAF, serialNumber=12F6B8F2D636E33C783C2196D5681D39EC063791
        Validity
            Not Before: Nov 15 06:02:42 2026 GMT
            Not After : Nov 17 06:02:42 2026 GMT
        Subject: CN=6af94b03-4ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:1c:03:09:65:73:95:40:c0:e4:c2:fe:ea:
                    52:f3:34:02:21:51:77:0d:45:50:d7:86:c7:88:7c:
                    ef:ef:ac:bb:e4:61:74:50:3f:2c:2f:a9:a9:ec:36:
                    b9:5f:bd:44:82:a6:d7:43:52:01:3c:09:eb:1f:93:
                    d3:2e:a9:0e:3c:8e:94:e5:3c:0c:5b:28:c0:2a:c9:
                    57:72:53:15:c4:ad:3b:f4:38:85:de:d3:65:0b:50:
                    92:50:f0:44:b8:eb:42:3d:61:e8:ea:2f:8a:b3:85:
                    52:cf:c7:d7:9e:59:27:bd:a4:09:88:55:0c:e3:18:
                    ef:b6:e9:d4:09:04:99:12:84:e0:f5:95:e3:56:61:
                    7d:23:1c:79:4a:03:fe:d0:4d:51:54:4e:2b:74:bb:
                    2f:32:8b:bf:17:2a:ca:46:fe:37:1a:2b:59:52:a1:
                    09:54:a0:ea:aa:22:4b:d0:e9:b0:c6:11:bc:f1:bf:
                    09:76:fb:d0:61:5a:b1:dd:10:d9:9b:3e:05:ab:8a:
                    ee:a9:12:1e:6b:6f:03:71:b5:6d:9f:03:de:5f:c9:
                    29:f6:ea:92:35:94:9b:86:24:b4:5b:b1:41:c8:76:
                    fa:62:4b:75:ba:c5:5b:e2:15:2c:a0:39:35:03:6f:
                    29:47:d4:b3:1b:f9:6d:3a:cf:fc:6a:e0:04:ca:d3:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E6:21:D9:43:D2:21:A3:C5:C6:9A:6F:75:A3:68:05:A3:67:4F:79
            X509v3 Authority Key Identifier:
                keyid:12:F6:B8:F2:D6:36:E3:3C:78:3C:21:96:D5:68:1D:39:EC:06:37:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/C5F37738CD6211F1AF0CBE07CF1D38B0/Eva48tY24zx4PCGW1WgdOewGN5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Eva48tY24zx4PCGW1WgdOewGN5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/C5F37738CD6211F1AF0CBE07CF1D38B0/Eva48tY24zx4PCGW1WgdOewGN5E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:4e:83:de:bc:24:48:a6:04:2b:ce:f3:6f:33:19:93:c9:
         c9:bf:f4:d1:21:24:d1:6f:eb:d2:fa:3e:66:dc:68:62:cb:13:
         95:91:61:73:f2:a8:32:4d:8f:63:21:a2:32:d7:a9:fc:c4:8c:
         f4:39:97:12:87:6b:4d:26:25:bd:b5:1f:33:c8:90:70:85:4f:
         e9:0d:fe:48:92:3b:27:8c:c6:eb:24:8c:8a:9e:a3:d4:be:f4:
         07:4e:51:92:b1:68:31:e9:61:ef:6d:e7:4a:ca:47:43:06:63:
         8c:66:8a:ac:7c:c9:60:31:bb:60:e6:b2:d6:c6:dc:8c:8b:f3:
         09:a1:d1:a4:17:d9:d7:c2:29:1e:24:54:49:2c:d0:dd:34:f3:
         5a:ed:58:96:7b:46:dd:aa:0a:fa:21:46:86:d3:c9:4d:b0:b0:
         c2:53:db:87:69:e9:7c:d6:13:e3:d0:59:25:79:af:4f:4e:7f:
         63:1d:c5:ac:26:96:bf:48:e1:cb:c9:c6:bf:60:71:43:68:88:
         8b:20:b1:99:5a:10:04:66:74:5e:83:fd:b0:9a:ea:21:44:e3:
         e5:19:6c:91:eb:c1:8f:6f:34:0c:28:92:f4:e8:be:c6:63:c9:
         cc:13:1e:51:09:1b:88:f5:dd:24:1b:09:42:17:00:38:df:83:
         2d:d2:68:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:09 2026 by rpki-client