Error: rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
File:                     DcakyCEJ_yyznB0aWMOOMDPFoP4.mft (raw, json)
Hash identifier:          TvVbf6HXi0LK9dyXe4iUVBsH1UoOw9qSO9hcAAYGOWs=
Subject key identifier:   39:D7:22:66:C5:8F:62:A9:BC:FF:3C:AC:BB:35:23:53:7F:C9:3B:07
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Certificate issuer:       /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial:       03EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
Manifest number:          03D0
Signing time:             Sat 14 Nov 2026 04:11:19 +0000
Manifest this update:     Sat 14 Nov 2026 04:11:18 +0000
Manifest next update:     Mon 16 Nov 2026 04:11:18 +0000
Files and hashes:         1: DcakyCEJ_yyznB0aWMOOMDPFoP4.crl (hash: yQIl905/0/Ykz02NsUEQqmYUkyKMmL16yprtWtGDBL4=)
                          2: D36F9FC09E1211F0966632AEDAE4EC9C.roa (hash: bJSVRApPrsDM0DOSvCfvAqU85OY/qAv2av1QekfCggw=)
                          3: 840BAFE4D5CE11EF9F26DD77762E951A.roa (hash: sKdcVkYo4xUul2xhcopwWLTEZ0Coub2IAaU4zBm9Qoc=)
                          4: 5391E35A514E11F0B3FBEA9BDAE4EC9C.roa (hash: FgqtDyexUlItVpAKSV/WBoPJSeqrXF4SEH2sFDGm9KI=)
                          5: 44F7A312514D11F0BE5B7493DAE4EC9C.roa (hash: JjfCaY/DSyk/x0PG88+ivHyCCCQmlDsXI+ZkbsOp9Bk=)
                          6: C4B25498D5CF11EF8B385380762E951A.roa (hash: c0lIUY0MI/RJ9MopAqogt6LcUcP2aw6oEoJwJbuApDA=)
                          7: 7DD153FE514D11F0A35C1C97DAE4EC9C.roa (hash: 8bWJ3tM27kTbYQCS7pka2UKCEjGC//pzMPNEA8dwKMk=)
                          8: 7B24675800F311F18E4DA8EBDAE4EC9C.roa (hash: gxOS892rWa//UdGze2bCZeoQIzTnFobyOT8pCY9k+UM=)
                          9: F28EE676D5B911EFB1FFC972762E951A.roa (hash: EzqsSk1Co9k9NgSov+FZr7H05V+t9uoO/FrO5hKwcOM=)
                          10: 23D3EB78D5BA11EF86DD9F74762E951A.roa (hash: G4Ai8yoQfjwUNFDDrcLjtsPrrCfGiIRKwRB24pEHxY8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004 (0x3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36877BBAF, serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
        Validity
            Not Before: Nov 14 04:11:18 2026 GMT
            Not After : Nov 16 04:11:18 2026 GMT
        Subject: CN=6af7df66-f679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:7c:13:15:44:cb:c8:c6:eb:de:80:7e:0f:
                    a3:5a:ec:b6:cb:4e:11:e6:87:d8:80:7b:2d:ac:5a:
                    e1:7c:04:13:34:af:2a:d2:5e:e0:d7:96:19:36:0e:
                    a6:12:6b:d4:ed:cf:8f:0a:55:af:50:56:98:69:de:
                    d7:08:2a:fd:e7:cb:a9:e7:a7:f2:12:78:1c:fb:ff:
                    b9:38:dc:00:bb:42:8e:04:9d:00:e5:ce:19:07:9e:
                    84:43:2f:6f:8d:cc:86:0c:5b:19:ca:3b:2e:ed:2c:
                    f1:43:6b:47:b7:d3:15:16:97:56:db:fa:b3:65:78:
                    bf:8b:db:dd:1d:ac:3f:3d:5d:33:6a:bf:4c:cd:ba:
                    73:2a:7d:06:d4:26:f7:77:3c:79:23:87:63:17:94:
                    cd:78:74:e9:5c:22:7a:4c:99:ef:c8:5b:7f:d7:f8:
                    c3:e1:21:f8:4c:9f:e6:c3:3b:fc:2b:a5:8c:92:20:
                    23:8e:65:6f:8d:5f:ad:a4:7f:e8:f5:13:8e:ec:5b:
                    5e:24:a3:6f:f7:32:d6:2f:59:b2:e4:f4:53:da:f4:
                    1b:7f:7c:e8:aa:1f:4e:51:33:da:5d:59:46:d9:2b:
                    b9:d4:a2:29:eb:bf:0d:33:4c:01:8e:94:94:27:a6:
                    e5:8b:5e:07:fa:1f:e4:bc:7f:8b:29:3f:82:cc:cb:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D7:22:66:C5:8F:62:A9:BC:FF:3C:AC:BB:35:23:53:7F:C9:3B:07
            X509v3 Authority Key Identifier:
                keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a8:dc:15:7d:72:c8:b5:6a:5e:d2:3f:0c:9f:06:77:9d:a6:
         a3:91:5d:af:af:7e:09:6c:84:8a:b7:48:e6:1e:84:21:28:4c:
         bb:a0:20:b0:e6:ae:f0:d7:5f:83:82:6b:3f:e0:40:87:fe:bb:
         42:6a:85:02:b2:c8:e4:a4:01:0b:cc:15:74:cc:c7:ff:63:84:
         26:50:ea:30:24:8f:dc:32:01:78:ad:e7:dd:ed:05:0a:33:0e:
         19:e2:d8:39:bf:00:08:87:31:c5:db:63:aa:1c:0f:be:10:dd:
         cb:7a:6e:bc:76:63:9e:c8:b7:17:34:9c:3b:1e:8d:5f:8a:23:
         61:d7:e8:bb:f3:dc:6c:54:32:55:3b:ae:df:fe:68:3b:24:54:
         80:c3:61:e8:67:ff:62:ac:ca:29:4c:fa:2a:2b:ae:6f:f5:83:
         68:29:f6:c6:c1:26:df:54:0f:d2:ec:13:69:38:02:4c:b1:a3:
         86:05:d6:08:59:56:cf:9f:c2:20:4b:38:24:d8:aa:9a:5f:12:
         40:a2:75:82:4f:f8:38:09:fc:37:fe:1e:65:55:5f:6b:37:21:
         63:3f:15:1c:eb:f2:2e:e2:3b:d9:ff:b4:e9:1f:33:d6:30:53:
         11:d0:bf:c3:4e:61:bd:4e:a8:75:ca:37:79:8c:1a:9d:3c:9d:
         26:43:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:46:05 2026 by rpki-client