Error: rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
File:                     eSy8N9dE2IS2DsRH6irH5M2yLX0.mft (raw, json)
Hash identifier:          5nNM3vZ1s+hlTa8DFw5RZrjd8y0NyjwG/uX7qlJQEb8=
Subject key identifier:   60:30:A3:70:A5:0D:83:AA:6D:1B:95:43:A2:31:2E:11:7F:65:88:1F
Authority key identifier: 79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D
Certificate issuer:       /CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
Certificate serial:       06EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
Manifest number:          06EA
Signing time:             Sat 14 Nov 2026 02:37:07 +0000
Manifest this update:     Sat 14 Nov 2026 02:37:07 +0000
Manifest next update:     Mon 16 Nov 2026 02:37:07 +0000
Files and hashes:         1: eSy8N9dE2IS2DsRH6irH5M2yLX0.crl (hash: drW+46cA8xpThew8we+cf9TH5Ggw1ueTjoIm9oOOkkg=)
                          2: 17BF2496899211F1AEEAF8D4CE1D38B0.roa (hash: 3QEPwNqOHySqHSpYvLfuCr9CJxZy8YD9o8/9NGe9gfw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBC36AF, serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
        Validity
            Not Before: Nov 14 02:37:07 2026 GMT
            Not After : Nov 16 02:37:07 2026 GMT
        Subject: CN=6af7c953-5ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6e:d8:85:eb:4a:b6:be:ed:5c:81:c3:88:76:
                    fd:52:f8:4c:23:15:98:d5:7b:b1:4d:2e:3d:ac:68:
                    ba:ed:89:8d:8f:75:94:b7:2e:c0:8a:89:43:60:42:
                    4f:c2:f0:ab:9b:40:a7:36:8b:4f:fd:5a:b2:fa:7f:
                    b3:90:90:76:d1:36:10:87:a8:a3:fa:28:e4:9e:02:
                    96:d2:0b:78:b6:68:1e:e6:d3:ea:9f:4e:25:ac:f5:
                    f3:88:50:88:23:02:87:87:a1:54:c4:9e:d8:d3:61:
                    da:20:96:4e:26:31:7f:ea:9d:71:f6:ff:05:8e:b7:
                    c5:80:60:2b:5f:81:5a:be:66:5e:9c:9a:30:d0:73:
                    59:a8:f5:4e:17:64:82:44:0c:ac:93:09:60:ed:2a:
                    87:2a:88:c7:d3:91:c3:0c:5c:54:ad:64:9d:b4:17:
                    5a:cd:c8:26:89:1e:45:69:6c:d4:99:4f:dc:13:14:
                    54:ed:fa:51:28:08:fa:ea:24:8e:a8:15:19:91:98:
                    6b:9c:cd:f4:11:6b:df:b1:2e:e7:28:36:37:d8:b1:
                    97:f5:88:b6:6f:ef:fd:f0:f4:24:3d:e4:d2:92:89:
                    23:95:52:aa:01:9d:b7:2d:fb:04:77:b3:d1:e7:90:
                    0d:e4:88:77:0c:4c:0d:29:fc:eb:c3:b0:42:60:2d:
                    c4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:30:A3:70:A5:0D:83:AA:6D:1B:95:43:A2:31:2E:11:7F:65:88:1F
            X509v3 Authority Key Identifier:
                keyid:79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:50:e5:bc:fc:00:ea:ca:4d:72:6f:e6:86:09:73:59:42:
         52:e0:1c:33:2a:43:bb:0c:03:78:5a:7c:22:30:dd:66:6d:82:
         64:5a:07:55:9d:e6:78:80:eb:c4:66:79:7b:8f:de:95:b4:9f:
         f5:2d:cf:62:ad:fa:84:31:8f:34:24:15:0d:43:7d:39:4f:b8:
         47:31:68:df:29:3b:d2:93:c2:f5:47:b9:3f:fa:9c:e9:00:94:
         54:34:63:12:3f:a4:f5:b9:b2:de:9d:66:54:1e:25:3c:7d:31:
         81:df:1c:4b:bd:b6:c1:04:56:8a:6b:9d:b2:38:6e:f9:b0:d3:
         e5:01:d3:5e:2b:1d:91:76:41:71:24:29:28:d9:cb:22:30:04:
         2d:fe:8d:f9:b5:9f:97:13:24:2f:a0:9b:6d:5d:ea:4b:2d:d0:
         f9:f8:c3:96:cc:c4:fd:19:83:12:07:d6:d8:87:13:c0:99:74:
         97:8c:c0:f3:59:d8:91:20:6d:e3:9f:ca:96:a9:75:ad:04:b7:
         03:27:94:3b:dc:b1:7a:29:3f:5e:b2:11:59:d8:b9:3e:b4:61:
         e8:d2:99:cc:28:1f:d2:72:f3:09:77:85:15:fe:19:3f:ec:bf:
         70:77:c5:3a:47:5a:b4:e3:95:30:cf:d3:00:d4:36:50:e5:68:
         06:64:4e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:39 2026 by rpki-client