Error: rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
File:                     1QtxHNd881kYPT_e5YqZVLbPdwg.mft (raw, json)
Hash identifier:          EVjvlcNZWmEPxdQOpVn6eY6xxgWChYx0BMX3mCqc+Qc=
Subject key identifier:   29:8A:A1:95:12:FC:4F:8E:E6:C5:0F:32:B7:0F:9C:4C:A2:9A:55:0E
Authority key identifier: D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
Certificate issuer:       /CN=F367FECCAF/serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Certificate serial:       07CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
Manifest number:          07CA
Signing time:             Sat 14 Nov 2026 02:15:42 +0000
Manifest this update:     Sat 14 Nov 2026 02:15:41 +0000
Manifest next update:     Mon 16 Nov 2026 02:15:41 +0000
Files and hashes:         1: 1QtxHNd881kYPT_e5YqZVLbPdwg.crl (hash: p6+4sK2wafjEd+IAWo1RAuqxxOuBmjGLTlGMZa5JnKs=)
                          2: 2D74E6CE2CDE11F1B13255A8DAE4EC9C.roa (hash: +81hzYpM3W36exbMJDzXr2Ri1//pFW7oRixW0r8/AJY=)
                          3: 526901882CE611F1BF63EBD6DAE4EC9C.roa (hash: aw2Z7KwdzkCBr55pTjeJJCbVsjj0x/wKbNsblVOzb6E=)
                          4: FF757B4E2CDD11F19B6540A8DAE4EC9C.roa (hash: 5UlL0ZRX7x5wQWu7za/SUcPB92F6HJ1BFe+lS7nnTtc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FECCAF, serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
        Validity
            Not Before: Nov 14 02:15:41 2026 GMT
            Not After : Nov 16 02:15:41 2026 GMT
        Subject: CN=6af7c44e-62d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:8d:d8:df:c5:ab:25:93:4a:60:43:18:e2:
                    16:21:81:fc:d0:ec:82:01:80:0f:37:7f:fb:3c:40:
                    9e:37:b4:26:ba:c9:3c:7a:5c:11:23:7a:66:e5:e2:
                    ad:46:7d:d0:ec:3f:7b:0a:1d:2d:78:b3:14:b6:ba:
                    42:61:cd:f5:c7:0d:be:ab:cb:31:89:4c:d0:53:aa:
                    21:4b:ef:8a:42:0d:9f:4b:4b:a0:eb:ac:f0:32:98:
                    d9:78:4f:1d:2c:a9:b1:98:f2:d7:e8:25:08:a7:13:
                    64:a2:11:df:f4:34:9e:0c:6d:db:d5:5b:09:f9:e1:
                    63:1f:02:79:57:f7:4e:80:1a:d9:8b:e4:f7:d8:13:
                    db:84:e2:c4:2b:84:40:39:22:7c:62:c6:3f:6f:40:
                    ea:de:ce:e6:2c:72:c9:5f:1e:1d:59:4c:fe:54:20:
                    fd:df:0e:ad:c1:90:2b:75:8b:c6:a0:b3:8b:19:d9:
                    77:2d:f9:a1:59:0b:4b:a7:53:86:14:02:6d:19:c6:
                    ba:4b:3d:17:35:9c:ef:3b:7e:fd:2b:65:f2:12:0a:
                    31:5a:2d:c9:6b:43:5e:9d:6a:9d:f0:e2:c4:cb:4e:
                    b8:91:58:6b:dc:fa:3a:95:64:6c:a8:da:5c:13:c6:
                    f0:f6:6e:ff:b9:69:72:a2:e3:30:62:bf:67:f4:b3:
                    10:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8A:A1:95:12:FC:4F:8E:E6:C5:0F:32:B7:0F:9C:4C:A2:9A:55:0E
            X509v3 Authority Key Identifier:
                keyid:D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:25:38:0d:43:38:15:bb:43:a5:40:2d:2e:47:af:a3:4c:8c:
         4b:12:2d:c8:c0:d6:0a:6b:0c:c1:04:2b:6d:ab:71:b9:37:3b:
         4d:f1:ee:0b:4c:56:fa:74:20:21:cd:ba:f4:bb:e5:12:7c:79:
         1a:e3:4f:ae:02:c0:ea:a1:cc:52:43:ae:4e:df:5c:df:52:7a:
         89:98:00:f1:41:78:fc:42:88:a1:c5:7f:40:73:af:6f:6c:e0:
         eb:7d:0a:e0:13:8f:51:31:b3:42:7b:a0:90:ee:2a:3c:2f:40:
         48:bd:d5:6f:60:39:5a:83:f4:b6:63:45:3d:9a:17:32:bd:33:
         a7:72:b9:85:e5:91:92:54:d7:4d:d7:f9:f7:c5:47:72:e2:bc:
         14:d5:81:dd:59:f2:7a:e1:8d:a9:8b:4d:8f:c9:e5:49:67:c5:
         3a:09:de:12:6a:4f:f0:fd:a7:8d:68:e3:2b:37:4b:02:7b:8a:
         61:fd:22:61:30:bc:36:6e:82:52:5a:b4:d0:89:05:3b:c8:c4:
         bf:0d:d8:5c:d3:82:af:50:84:d5:af:68:61:6b:2e:ec:cd:89:
         d6:44:8e:7d:24:52:07:a2:6c:17:fb:55:2f:1a:d6:dd:aa:aa:
         d8:b8:39:2f:17:cb:22:3c:87:90:f3:8d:93:1d:87:43:d5:bc:
         82:d4:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:31:31 2026 by rpki-client