Error: rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
File:                     2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft (raw, json)
Hash identifier:          /VCIrYIC5sRfpz3DMfSlS4b9KglWhIa3tZDxlBzS61w=
Subject key identifier:   10:2F:A6:83:F7:1E:A6:75:EA:60:E8:02:49:58:16:91:09:94:15:26
Authority key identifier: D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7
Certificate issuer:       /CN=F3695E06AF/serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
Certificate serial:       0803
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
Manifest number:          0800
Signing time:             Sat 14 Nov 2026 02:11:31 +0000
Manifest this update:     Sat 14 Nov 2026 02:11:30 +0000
Manifest next update:     Mon 16 Nov 2026 02:11:30 +0000
Files and hashes:         1: 2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl (hash: pDcNroPxjZS5pGbJ35/Skt1oXqIUolg/QxcNLFIbE5E=)
                          2: 6B702572C5B611EB874E825FF8AEA228.roa (hash: TuOEHMyp7ZkGMu80eO/vkZfJHkaFNIwGb2ogLtbprVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695E06AF, serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
        Validity
            Not Before: Nov 14 02:11:30 2026 GMT
            Not After : Nov 16 02:11:30 2026 GMT
        Subject: CN=6af7c353-af55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:06:9b:00:bf:cc:6d:8e:62:f8:91:70:56:
                    d7:57:c3:8f:52:08:ae:20:56:7f:cc:29:e8:bc:3a:
                    09:41:1d:2e:1a:b9:18:61:38:fa:6d:13:a5:b7:be:
                    66:42:89:50:bd:03:67:2e:26:1b:32:40:f7:5e:10:
                    b4:23:24:ff:c8:cd:f5:6c:73:f0:44:0a:a9:fb:93:
                    0b:07:0f:51:76:fa:0a:62:f8:f1:f4:b9:57:6f:3e:
                    bc:1a:43:72:4d:41:05:52:9e:3e:70:ed:3b:78:83:
                    90:1d:eb:e1:7c:4b:fe:00:74:14:4f:c0:9c:49:20:
                    f9:0a:b9:e5:73:4f:bd:a9:db:60:a0:7e:85:79:a8:
                    10:d6:02:37:23:5d:11:b7:cc:66:48:97:c3:d5:a6:
                    32:95:09:f0:22:43:a3:c5:4d:a9:a4:be:05:c2:9f:
                    81:e0:88:91:e3:5f:f4:44:97:ca:14:16:54:23:8c:
                    17:ed:f6:bc:34:36:76:5d:ba:56:22:c1:8a:3d:cc:
                    55:e6:df:6a:a1:00:eb:e7:3f:84:77:74:ae:47:b6:
                    a4:1b:a4:91:7e:a3:b2:5c:c5:8c:75:05:6a:d3:38:
                    87:1f:51:37:5b:3d:69:23:17:e1:de:ef:f7:3f:a9:
                    62:1a:17:56:d3:ed:7e:b7:a5:e4:80:a8:43:a3:db:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2F:A6:83:F7:1E:A6:75:EA:60:E8:02:49:58:16:91:09:94:15:26
            X509v3 Authority Key Identifier:
                keyid:D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:75:27:fd:5f:ee:5a:10:00:84:51:07:36:79:e6:55:e9:ef:
         41:e2:04:75:7a:b4:7d:34:3b:bf:ac:32:cf:8d:16:ed:bb:85:
         63:d4:d8:29:ea:b4:e8:4e:9c:57:10:08:25:5f:3c:53:25:c1:
         5d:11:b8:50:9c:71:bc:68:33:4f:7e:3e:39:2f:f9:8f:11:65:
         65:4d:16:36:5c:41:45:9b:9a:aa:02:9c:83:03:1e:44:18:36:
         1e:dd:46:2f:0f:e7:17:f8:c6:f5:19:c1:99:85:24:16:e3:28:
         96:68:cf:11:4d:7e:ee:bd:ff:31:18:6b:52:54:7a:1d:d7:76:
         45:9a:50:5c:10:96:ad:65:97:32:19:ce:d2:79:b3:7f:f1:ce:
         f7:8e:ce:92:e5:40:f6:be:5b:9a:b5:c2:8b:5c:73:73:cc:ca:
         cd:b8:60:0b:e2:e0:5e:a9:2f:71:c1:12:27:d1:ea:ae:39:7b:
         e1:3e:9e:56:b9:b8:a6:08:c4:5e:bf:44:3a:5b:b8:61:9f:d6:
         98:9e:14:fe:9e:bb:14:79:8e:c4:d2:02:b2:ec:1f:ea:58:ab:
         f3:18:93:af:cf:bf:2f:5f:ce:3c:2b:7f:de:09:1f:09:7a:32:
         df:a6:7a:7f:58:19:88:aa:42:95:cf:48:93:40:0a:89:e6:e4:
         cf:96:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:29:20 2026 by rpki-client