Error: rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
File:                     MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft (raw, json)
Hash identifier:          zaDV4zVARY7quqaog72YG0nsTTL+PIUy/qwkvZ0YIZQ=
Subject key identifier:   05:D1:1B:52:35:5D:CF:D6:0B:3A:2F:AB:D9:60:CB:D7:D6:53:BF:85
Authority key identifier: 31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
Certificate issuer:       /CN=F36BC6CCAF/serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Certificate serial:       0270
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
Manifest number:          026C
Signing time:             Thu 24 Sep 2026 04:46:01 +0000
Manifest this update:     Thu 24 Sep 2026 04:46:01 +0000
Manifest next update:     Sat 26 Sep 2026 04:46:01 +0000
Files and hashes:         1: MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl (hash: icfjGIOKcH/07K6KYE2VvXdkaRPhGDZCMhj2RH91t18=)
                          2: DF18A1E640CF11F09299DFB6DAE4EC9C.roa (hash: ztjI0ZwpfaRw5ubRwQgZNSs1wBiMAXUEL6HQoRKIjlI=)
                          3: 981965A640C911F0AA7BC28FDAE4EC9C.roa (hash: /+6/RjZuNbqQtneE80fqEs+UIumXvOJpiE0MpFoYgdc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 04:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC6CCAF, serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
        Validity
            Not Before: Sep 24 04:46:01 2026 GMT
            Not After : Sep 26 04:46:01 2026 GMT
        Subject: CN=6ab4ab09-24a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:b3:a7:b9:1d:87:fc:4d:17:91:5f:01:d6:
                    90:53:4a:d1:3b:f3:b8:32:c0:ab:ea:60:eb:ab:09:
                    ff:68:3b:74:79:01:a6:da:7a:a8:2f:cf:c5:57:84:
                    07:1a:27:86:f3:80:b3:67:ee:d9:23:65:af:5f:1c:
                    f0:bd:c2:9c:38:cb:6f:b2:4c:ec:b9:e7:75:f9:0d:
                    7b:20:4e:f0:f8:02:1d:f7:2c:76:c9:fd:f6:2a:c8:
                    0e:a1:3a:4c:0a:6c:e2:4c:88:ed:0b:db:6c:55:2d:
                    e8:d1:49:e8:a4:87:cb:0c:91:20:50:f2:80:04:75:
                    32:6e:e5:0d:d8:2d:aa:84:c8:f2:f7:92:c5:3a:71:
                    32:c7:31:c7:37:00:ff:92:b1:33:07:b6:1c:84:70:
                    05:4c:04:c1:86:52:33:b7:42:cc:3c:76:e1:81:09:
                    9e:6a:4a:76:32:9f:c4:d4:df:00:48:68:5c:7b:c6:
                    a9:ea:d3:04:31:57:11:10:85:c7:55:bd:a7:d2:14:
                    32:29:26:a4:04:78:1c:6e:9b:af:dc:60:69:2e:ae:
                    f4:7c:70:92:bb:ae:c5:3f:d4:ea:88:17:c8:60:be:
                    4a:61:e1:19:e8:b3:50:1a:5d:44:29:ef:ab:d5:6e:
                    10:b0:7a:05:c7:80:2a:dc:4e:ef:98:f8:eb:67:3f:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D1:1B:52:35:5D:CF:D6:0B:3A:2F:AB:D9:60:CB:D7:D6:53:BF:85
            X509v3 Authority Key Identifier:
                keyid:31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f9:91:13:88:fa:cc:23:8c:61:84:ed:c0:d7:ce:67:59:29:
         61:61:0d:4b:81:d2:5e:60:97:40:27:1e:50:31:7b:ec:ed:44:
         31:3c:68:9b:57:5e:b8:2d:32:5b:59:70:13:63:95:a7:0e:da:
         4b:82:d6:8b:68:ca:d8:5b:5e:63:28:b9:17:5a:55:e2:48:d7:
         12:c6:94:91:ae:6b:c4:7d:8e:be:23:94:d2:1f:f9:05:d6:03:
         00:3f:75:ab:1a:52:eb:8e:1f:8b:e0:c4:e4:fb:cd:51:aa:c6:
         41:8a:e3:f2:12:12:8e:ad:c8:04:51:32:00:60:7e:fb:94:46:
         71:af:6d:7b:de:d2:2c:fc:1d:7e:9d:63:55:19:75:fa:f7:41:
         ae:fc:ad:fe:17:cc:66:9a:b7:90:7b:63:23:ad:de:6c:13:4f:
         7d:6f:12:46:c5:68:61:d1:74:32:68:06:2f:be:f9:4c:d6:6b:
         46:82:22:4f:1a:f8:79:b2:02:8a:bc:e9:b8:b2:99:a2:e8:ce:
         e6:0a:1b:1c:37:b9:23:4b:a2:92:82:a6:a6:87:28:b9:c7:7b:
         e5:c6:11:93:42:58:8d:a1:43:7f:c6:f4:a1:9f:ba:55:a7:c3:
         9d:4e:01:58:f9:14:3e:f5:33:3f:db:8c:04:e3:f5:0f:32:52:
         e9:8d:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:29:07 2026 by rpki-client