Error: rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
File:                     mN_xVrpdOxH6ps0Beov2VCUd68c.mft (raw, json)
Hash identifier:          sux9g9IBlEVWg+T01ZNZSmUPiUuapAe3qfvxJSIivGA=
Subject key identifier:   EB:C3:1A:E0:3F:00:08:6F:D5:E9:19:75:8A:40:B7:A9:57:7B:3E:95
Authority key identifier: 98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7
Certificate issuer:       /CN=F36A1982AF/serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
Certificate serial:       0219
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
Manifest number:          0215
Signing time:             Sat 14 Nov 2026 04:53:52 +0000
Manifest this update:     Sat 14 Nov 2026 04:53:52 +0000
Manifest next update:     Mon 16 Nov 2026 04:53:52 +0000
Files and hashes:         1: mN_xVrpdOxH6ps0Beov2VCUd68c.crl (hash: 6nlY8Rm8UOG8vKrAxhYGIrORZAVZNreSAZFLoMhyGr0=)
                          2: D2FA44589C6011F1B8DD4813CF1D38B0.roa (hash: hXG29WZ9gIw6Ovjrleo65ug3xqHYZi4HJYO7R16FihU=)
                          3: 7832FB8A45D311F0AC0634DDDAE4EC9C.roa (hash: cfPkV/3/J2Pr+p9FB17NDz/hy3nd+JaytMl2veZxtBo=)
                          4: D87AD8E69C7111F19CDB70F7CE1D38B0.roa (hash: WoxmRBNYxtlklGhzUk4A1A/VNqHlUjBfPcsPhHsejnY=)
                          5: 553164D49C9711F1815829D7CE1D38B0.roa (hash: wVWSeXVlQ34ZCg2wQQL7tOgF8T/M9yaqQVdvI4IZzIU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1982AF, serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
        Validity
            Not Before: Nov 14 04:53:52 2026 GMT
            Not After : Nov 16 04:53:52 2026 GMT
        Subject: CN=6af7e960-26c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:4f:03:37:3b:9e:88:d0:38:da:7a:c4:bc:
                    da:6f:31:a1:7f:2d:c6:8d:58:df:ad:c9:fd:3d:c0:
                    2e:24:74:46:b5:e1:6a:a6:dd:c7:96:e7:76:22:cd:
                    02:97:8f:fd:16:9e:a5:1c:f1:77:14:e7:40:ac:df:
                    a0:45:ca:72:79:8a:6e:55:7b:d8:8c:78:73:f9:83:
                    7a:1a:d9:57:60:5f:e7:56:2c:cf:31:2b:0c:2b:f7:
                    38:5e:f1:c2:d9:73:b1:fe:2b:bd:a3:05:e0:e3:0c:
                    33:ca:21:41:93:02:a0:ca:40:07:a2:1a:7e:43:ae:
                    b2:9d:68:41:6d:1c:b7:1d:af:1f:07:be:38:fd:fe:
                    3b:f3:d2:96:01:fe:fa:ed:6b:42:94:e5:05:9a:70:
                    c6:b5:fd:b7:50:c6:7e:aa:a8:af:82:1d:21:14:e8:
                    99:bf:de:c8:bc:77:63:20:a2:86:59:32:78:d6:87:
                    6d:e9:67:8f:74:0c:e1:e5:0f:5f:20:ea:94:d7:36:
                    87:10:3e:d8:65:28:97:05:8e:c3:0e:38:52:5a:33:
                    c9:f5:92:df:c2:a2:36:21:dc:72:42:d0:c7:cf:5b:
                    70:39:0f:9e:f0:9e:67:1c:22:a9:86:57:98:f6:26:
                    f2:48:b6:92:a3:64:86:6d:2d:e6:d8:dc:0b:4e:55:
                    08:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C3:1A:E0:3F:00:08:6F:D5:E9:19:75:8A:40:B7:A9:57:7B:3E:95
            X509v3 Authority Key Identifier:
                keyid:98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:a3:5d:32:34:4b:3d:af:3b:eb:65:c0:6a:62:c8:c1:f9:
         62:1b:f6:3f:f1:6d:5b:00:5c:5b:70:ad:79:69:cf:9d:5e:2d:
         46:bf:21:17:bb:ff:e7:b1:9d:ce:3d:65:93:c0:10:04:79:4e:
         ad:37:46:c5:34:22:b3:3a:f9:d9:bc:12:96:0f:41:4f:73:7b:
         55:de:7d:6e:4b:4d:4b:46:c6:40:10:df:e6:ac:3e:e5:69:cf:
         88:44:98:1c:47:64:30:00:4a:63:22:8c:07:f6:29:b5:88:8c:
         49:c4:03:c7:f2:21:4b:25:1e:44:bf:58:33:39:9c:b8:b3:99:
         e3:3a:eb:0f:5c:bf:4e:6f:3a:81:ec:59:e0:b7:79:e2:46:a7:
         d0:6e:09:b1:f0:c4:f1:72:fc:ef:67:04:46:57:2e:b6:70:f6:
         24:06:c7:ed:c0:3e:a7:33:8b:78:f8:88:06:df:87:94:b6:77:
         96:40:ed:69:e9:51:60:a3:21:06:36:b6:6c:8c:59:eb:44:f6:
         2a:d1:c2:85:47:30:0e:ae:be:d6:b2:c8:a5:5c:63:95:fe:04:
         bd:30:ce:3c:97:50:cf:b1:f3:0a:df:12:73:6c:c6:5e:69:80:
         69:9b:d0:a2:d0:08:df:7c:1d:12:73:e9:b2:5d:62:7b:63:bc:
         01:26:f2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:34:04 2026 by rpki-client