Error: rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
File:                     x2kBfEr3fF65-LyEaI2IawFQMjo.mft (raw, json)
Hash identifier:          iCN61CiH/xPG/JSDouP/+CYBbFidNxnLz0O/dLTDmus=
Subject key identifier:   16:B8:F5:74:B5:02:6B:38:AB:DF:E0:EC:65:7E:40:67:26:77:29:77
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Certificate issuer:       /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial:       05D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
Manifest number:          05CD
Signing time:             Sun 15 Nov 2026 03:05:24 +0000
Manifest this update:     Sun 15 Nov 2026 03:05:23 +0000
Manifest next update:     Tue 17 Nov 2026 03:05:23 +0000
Files and hashes:         1: x2kBfEr3fF65-LyEaI2IawFQMjo.crl (hash: u1T0TMBHA15hE9/Jdkr733rirqVi1FZaDgdbJj6nlb0=)
                          2: 3196566E8B6311F19E3E65EBCE1D38B0.roa (hash: v7y9eUAibJifVNLUl1+W1iLBl8UIok0yyshaY1ZA/e0=)
                          3: 72225BFEA05C11EFA3BA68B5762E951A.roa (hash: ptoIi4ERlN82BasAiG/RRS1jzH5R046ZZLHto70J/kQ=)
                          4: 901FE13E898B11F1AAC9AAAFCE1D38B0.roa (hash: uWhuNuHaUJY3NQlHsMC9E6dmoj2aQb7rOfWxrMfLF8I=)
                          5: 6F61D56CD3F011EF874D80BD762E951A.roa (hash: aQ5eotveqGJrhssXyUfqPg5E0r4EtEOvK2qBBQ8Oc9Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E4C8AF, serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
        Validity
            Not Before: Nov 15 03:05:23 2026 GMT
            Not After : Nov 17 03:05:23 2026 GMT
        Subject: CN=6af92174-21a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:16:66:3e:4f:e3:07:70:de:0c:14:08:df:
                    46:9f:f5:16:dd:3c:8d:13:15:4a:ff:4e:c2:69:69:
                    0e:1c:fb:1f:29:a6:83:74:2d:b2:71:79:c3:0b:0a:
                    95:47:1c:97:81:ae:3b:c4:0b:de:eb:f7:99:bd:50:
                    60:7e:99:8f:f2:45:fb:bb:ca:65:33:f5:f5:45:68:
                    8b:5e:c6:2d:81:5e:7b:08:57:7e:16:f2:29:d7:5c:
                    1c:67:71:0a:6c:ea:b5:05:48:ae:2f:bf:47:38:9c:
                    60:4b:ce:73:81:98:d3:fe:48:e1:cd:8f:0f:13:eb:
                    95:8b:64:a0:45:c4:34:cf:08:fc:25:75:9f:31:8f:
                    37:a2:89:e5:0f:b9:e0:a9:7d:ec:6d:72:dc:8b:34:
                    dd:24:b3:d9:35:4c:a3:ed:31:0f:04:72:2a:9e:5e:
                    9c:a8:46:6d:73:4d:68:f9:6a:f7:65:ac:96:ab:21:
                    e7:b7:d0:50:4a:63:ae:93:15:a4:fb:1f:0e:6b:b9:
                    79:ba:8d:ed:e8:93:c6:8c:cd:2f:3f:91:fc:e5:8c:
                    ff:f5:21:80:c6:2a:3b:5a:15:75:43:90:5b:7c:83:
                    b4:20:dc:57:d0:ef:0f:34:ee:1f:42:3c:dc:13:96:
                    33:44:2a:4a:ab:7d:14:0d:e3:a6:53:2d:13:8b:85:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B8:F5:74:B5:02:6B:38:AB:DF:E0:EC:65:7E:40:67:26:77:29:77
            X509v3 Authority Key Identifier:
                keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b7:07:ba:7e:4b:17:f6:43:a1:33:e1:bf:6f:17:0a:f0:b9:
         d5:e6:9d:9b:c2:ab:f6:74:ef:05:1a:ab:aa:13:12:c9:08:cc:
         fa:14:7e:30:b7:30:c1:81:4f:a8:5c:13:d4:88:3f:4d:b4:f5:
         99:a0:bf:47:fa:0f:06:9e:72:97:0a:6f:94:e7:db:86:f8:c3:
         40:18:26:42:3f:12:f9:df:27:99:a8:34:e1:13:1f:81:0e:d6:
         38:17:44:6d:34:ae:c2:5e:bb:a3:61:b5:07:62:41:49:24:1a:
         a3:46:e4:5e:c8:97:55:32:d8:9e:28:f6:34:ba:32:6a:12:0a:
         15:65:79:3d:13:a3:63:af:d9:7d:3f:69:9c:00:f4:df:b9:cd:
         e7:ba:d4:32:de:1a:94:41:84:07:97:8c:8b:d5:70:4a:32:31:
         9e:18:79:da:36:a8:62:b5:8b:00:ed:d2:15:47:d5:ec:89:3f:
         14:c5:a5:f3:13:9c:b9:e6:d0:81:62:ba:ef:fd:0b:9e:b2:8c:
         dd:a2:5e:be:27:d4:8a:7d:06:93:42:e5:0e:d3:e4:c2:2d:b9:
         fc:a7:7f:8b:2f:9b:86:5b:01:00:4a:18:2e:05:e4:ad:44:b5:
         39:06:fe:00:be:ac:96:67:04:ea:3e:3e:e5:53:cb:56:14:86:
         e0:75:1f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:13:19 2026 by rpki-client