Error: rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
File:                     P2d_OhisqubJf4H5muh5RlTgQQs.mft (raw, json)
Hash identifier:          fkpANhHlYb51zFCzaB/LGTKvIbFa81cekXzTyuvmDOw=
Subject key identifier:   5D:96:86:DD:13:DC:9E:06:76:07:E6:9D:42:C6:70:BE:85:B0:72:48
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       0577
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
Manifest number:          0543
Signing time:             Sun 15 Nov 2026 03:31:31 +0000
Manifest this update:     Sun 15 Nov 2026 03:31:30 +0000
Manifest next update:     Tue 17 Nov 2026 03:31:30 +0000
Files and hashes:         1: P2d_OhisqubJf4H5muh5RlTgQQs.crl (hash: EgxmrCWdZPEC73OcWkfwrm9/B9w9B4CFtPAbxVIsroM=)
                          2: 93BEB9727B6F11EF81325783762E951A.roa (hash: XGjuCE7tXlwix5GuCmklZ88dhoOPc6iO4b/dd0dOcD8=)
                          3: B598428C7BD011EF9348E170762E951A.roa (hash: u8koei9o52T1/oDA6+Vc7alnKCHHr6e9qCPf+FyEca0=)
                          4: 93134C74962011EFAAA0A9B4762E951A.roa (hash: HWJdyAQD0gPKecvYAkvhvhhvqGUM+2Gwedr+o6pd7fI=)
                          5: 1A4F9134922511EF83368F9D762E951A.roa (hash: anCBfgZHtzniM7dP4vfF3lMI+1CdF2Ions9Nt8kdpN4=)
                          6: 0EED0EBABAA811EFB3FB887B762E951A.roa (hash: cWJpYejV3y01oVA8qnDQSW9CTviS9mBH5RQPU8qnsl4=)
                          7: 7B0EB180561611EF957AD24F762E951A.roa (hash: YLCMHlWP1EnEGexbMo2ag/60lLWvA9wmZJiet6AJRXI=)
                          8: 837E97941C2511EEAA26D4594AD9E6FC.roa (hash: DmTBedmJtAZllDRXX8QYacyLifphZi9/9tYqy0qa/Z8=)
                          9: E1F54F2E5FF511EFAE767E52762E951A.roa (hash: ZHyP78AP+q/JJtHtUW/HC4m2P265a+lBVZzkus9pUMQ=)
                          10: 9B6E721AE3E411EFB934FF78762E951A.roa (hash: gBgcjfT/qrh95VoyMQ5KZbvh0uc6ei9HAXRDsRUsII4=)
                          11: 77525E5A1C2611EE8D4AC85C4AD9E6FC.roa (hash: DpMrNiTjRZWKu4SpXJlLIPkKtzQPA3MM+9+EToM9kyg=)
                          12: 9EECB24E1C2611EEA7AD515D4AD9E6FC.roa (hash: 9W8fC1Pv3M9CQpx7wz4y4cmIGIFTbWUALksyFRhYDgE=)
                          13: D305BF9E1C2611EE962CF15D4AD9E6FC.roa (hash: QvV0F8KyJ9WvuBSABzYloVhD1CSoUH2t+UNQgJHZffQ=)
                          14: 8CBFAAFA561711EFA32AB1BE762E951A.roa (hash: x13tTUmCqaneTmuylrncyIbgJsZvmJqEqrEdlvKnZD8=)
                          15: 003205069B9511EFB5BBFBA3762E951A.roa (hash: UjNuym/YVxBGxCeImR5szQOeTVJpSD09YHDR0+HigJY=)
                          16: 48DB40CE1C2511EE961F2B594AD9E6FC.roa (hash: 0WYNowNq6/ghxa/+ViWE2YlwzJQFXVRIIBMOUYA+fQ8=)
                          17: CC06753C9B9411EFB98A1EA2762E951A.roa (hash: PrWrPFpz78YhUoGxQ7jEkZFHzPPsv0jeCPOMzZB31PQ=)
                          18: D6A352521C2511EE9164F55A4AD9E6FC.roa (hash: He2Venw8taiOIZNG5L2+aSFbOwse3tT4XMAeuZ2rfyQ=)
                          19: 4134710A1C2611EE8654415C4AD9E6FC.roa (hash: FOrfNT73uBh2aYXKjOIxZWv6Nr2ME7Pa+Um5EKzqmIQ=)
                          20: 2D888128971311EFB14662AA762E951A.roa (hash: m6Vgw13O/Z9CVMDFoYn3/x7Scp+tZSUuvP1qWkzu25Q=)
                          21: 0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa (hash: Ev2ul4e+ltqtbvYSPW/0zConR3j9rixqOLLNpHJBAUU=)
                          22: 494629A869C611EFAB29428D762E951A.roa (hash: eeCnZNp5+DXjWbE73Xzf+vc1c6ITE8Mpg+2iFFIZRf0=)
                          23: AC6C1AF87C2011EF8072375D762E951A.roa (hash: 3Rl3eJ9URzbNEAjNItG8eZqFtndJzNxZbtBiE9bB/NU=)
                          24: 93F6BF08D1D611EFA285465B762E951A.roa (hash: tVKwje6T2o4eP3SDnHXNKWk8+gEDaKos+OkXYB9+jE0=)
                          25: C41EE034846D11F1B0082AE7CE1D38B0.roa (hash: vPIx+3su5XEgYcI5vDBbL8/o4dvvzyDdnNa2ovBoobU=)
                          26: C3DC7C78744B11EFB00C628E762E951A.roa (hash: DslpOa5/mWSwqGcWwNCCAP4kUIk852TGOki17LeoHAI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF, serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Nov 15 03:31:30 2026 GMT
            Not After : Nov 17 03:31:30 2026 GMT
        Subject: CN=6af92793-81be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8a:29:ce:e5:85:45:6d:61:9e:b8:6e:7c:40:
                    8c:f2:09:05:2b:90:d1:7a:25:0d:da:75:18:f4:d0:
                    9b:03:c7:58:21:8b:72:8b:f7:3e:fb:c1:d3:b6:3d:
                    3c:4d:03:63:cb:65:ca:42:d3:b5:eb:dd:78:2d:d6:
                    98:44:51:51:fb:a1:9f:16:8c:c4:de:b5:cf:30:31:
                    7b:6d:b0:c9:3b:9a:0c:80:61:1c:84:25:07:89:5e:
                    e2:13:7e:13:44:a2:de:d0:a4:bc:52:85:06:6c:93:
                    d9:17:7a:0b:20:d8:0d:23:c1:96:12:55:81:11:1c:
                    bb:a4:ce:92:05:72:ab:91:68:bc:49:6c:2f:7c:2a:
                    a0:a4:65:d6:c6:46:f3:92:66:d8:cb:78:8c:fb:48:
                    f6:77:5b:d1:5c:6d:e1:0b:25:fc:27:b9:2b:73:c5:
                    99:40:c9:94:4a:78:3f:70:42:d0:8a:1e:24:14:2b:
                    d2:7a:41:a6:4d:3e:18:d2:36:fb:78:3f:74:1b:fb:
                    d9:33:53:5e:e9:f2:29:1c:6c:20:64:ee:ce:5b:c5:
                    6a:b3:59:c4:3c:ee:12:ec:8a:39:c2:ac:1e:93:d8:
                    41:f8:0f:b1:24:d4:c5:94:41:43:22:e6:06:d5:c9:
                    3e:22:31:9b:f6:c9:47:f2:fd:12:3c:2c:96:d9:e2:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:96:86:DD:13:DC:9E:06:76:07:E6:9D:42:C6:70:BE:85:B0:72:48
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:30:53:f6:08:f7:db:30:1e:75:dd:0c:c6:9b:0f:a5:78:67:
         84:d9:83:6e:6d:88:3c:92:b9:13:44:4b:dd:6b:69:66:01:f1:
         d3:e9:3e:6d:6e:61:b9:ef:d2:fa:7c:3d:e2:4f:8f:da:d5:8e:
         d7:bb:14:c2:09:d2:89:2f:c2:e9:ee:98:f7:40:80:94:9b:0d:
         56:64:cb:84:37:f8:16:e4:35:6a:83:20:cb:b0:ae:c0:80:6a:
         ab:08:26:95:79:ed:e5:cf:e7:0c:04:dd:cb:0a:15:a8:80:42:
         a2:7c:d6:59:c1:0d:43:a0:1a:64:50:b1:bc:0a:40:50:e2:62:
         38:4d:a0:ec:1e:3a:10:65:32:cf:f3:ba:f5:83:98:0e:b9:12:
         90:53:bd:6c:d4:10:55:be:2c:67:e6:e0:e3:82:db:8d:db:56:
         57:20:cf:60:c3:b0:8c:2e:7c:f8:32:b5:6e:31:5a:33:3c:e2:
         4a:5f:6e:bd:21:36:39:ee:81:61:12:7d:99:66:62:e6:1a:45:
         ae:ea:4e:0a:f4:3f:6e:7c:c0:90:8f:db:40:f6:90:31:17:0d:
         e6:be:ec:a2:50:90:34:2e:88:42:2e:a7:d9:e4:d8:6e:56:70:
         54:69:58:a7:f9:c7:74:56:f6:36:85:db:02:3e:02:99:54:61:
         ba:86:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:18:01 2026 by rpki-client