Error: rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
File:                     -vPHS9tBaK0Umzg5f1vk--Qjx1I.mft (raw, json)
Hash identifier:          6A6lDsIj7MgapzMmPPjXKUzYwnfD1N97GNYhTm0iQQs=
Subject key identifier:   65:1F:D4:66:7B:0C:3B:28:77:11:6F:62:CA:2A:68:6C:9A:7E:CB:28
Authority key identifier: FA:F3:C7:4B:DB:41:68:AD:14:9B:38:39:7F:5B:E4:FB:E4:23:C7:52
Certificate issuer:       /CN=F36BDAEAAF/serialNumber=FAF3C74BDB4168AD149B38397F5BE4FBE423C752
Certificate serial:       74
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
Manifest number:          73
Signing time:             Thu 15 Oct 2026 05:40:59 +0000
Manifest this update:     Thu 15 Oct 2026 05:40:59 +0000
Manifest next update:     Sat 17 Oct 2026 05:40:59 +0000
Files and hashes:         1: -vPHS9tBaK0Umzg5f1vk--Qjx1I.crl (hash: rbbuEzpEnMSlgK153AxTLG/7asrrHeEy18v207BQ2MI=)
                          2: A166CB0A6FB511F1A388A7EBCE1D38B0.roa (hash: N2A8A30zOOL02+LkqB3kmhadKKBzgndfImHLlNc0+Fg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 05:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BDAEAAF, serialNumber=FAF3C74BDB4168AD149B38397F5BE4FBE423C752
        Validity
            Not Before: Oct 15 05:40:59 2026 GMT
            Not After : Oct 17 05:40:59 2026 GMT
        Subject: CN=6ad0676b-0356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:7e:03:1f:9c:4d:2e:d2:33:ec:1d:52:af:
                    ff:f3:dd:4e:2a:a6:86:58:f3:7a:e2:39:87:63:06:
                    68:bb:35:52:4d:a1:82:06:46:d7:64:77:ce:39:3d:
                    c1:ee:f7:13:c0:e8:09:7f:1c:7f:43:14:9f:85:26:
                    39:d2:0f:55:21:94:98:ea:41:a3:08:ff:99:fb:b3:
                    00:b3:72:17:33:23:3d:12:b3:dd:74:ec:01:b4:a5:
                    4f:ee:7a:d4:8e:0e:dc:9f:86:72:4c:91:d1:bc:4e:
                    db:7c:c0:84:bd:e6:e8:04:db:32:a4:45:62:eb:6b:
                    07:2c:45:be:43:a0:cf:05:14:13:87:20:88:18:cf:
                    0f:c0:84:35:f8:f3:d9:5e:e7:0d:6e:c5:35:0f:a2:
                    ba:bf:d5:25:3e:d4:74:8c:af:b2:9e:f2:2a:80:f3:
                    f1:b8:5d:3d:36:8e:ba:6b:8b:c7:a3:cb:05:5a:5c:
                    67:f4:dc:f0:47:c2:22:74:e4:4d:c5:bf:34:b1:83:
                    3d:fd:15:d8:98:f0:72:8e:12:37:47:d2:30:c0:ea:
                    cd:9d:dd:19:ab:dc:a0:93:9f:81:ba:0c:2a:7b:c3:
                    80:cd:8c:7c:27:b0:2a:a3:c6:b4:77:e8:33:cf:09:
                    3a:34:a8:25:20:3c:1e:1c:f0:62:c0:0d:1a:36:24:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1F:D4:66:7B:0C:3B:28:77:11:6F:62:CA:2A:68:6C:9A:7E:CB:28
            X509v3 Authority Key Identifier:
                keyid:FA:F3:C7:4B:DB:41:68:AD:14:9B:38:39:7F:5B:E4:FB:E4:23:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1c:a3:7f:50:fb:d6:1a:a5:18:9c:6d:ec:51:8d:eb:97:3e:
         d1:26:ff:54:dd:cd:0e:6a:d9:2f:21:35:30:4b:7b:57:61:b2:
         97:7b:5f:c7:69:51:45:8c:b4:90:c7:34:52:af:72:84:29:b0:
         fb:2d:47:d9:60:d5:c8:36:7b:85:ad:ff:cd:8a:89:b1:91:68:
         22:0b:66:a1:84:20:84:f5:03:d4:bd:ed:69:f5:ea:8e:6d:97:
         76:32:e0:9c:6a:53:4c:40:73:ca:35:cc:3f:d2:d6:60:d5:d8:
         2f:91:dc:43:14:45:a8:ca:63:8c:fe:ce:61:3b:4d:d2:42:d6:
         c1:02:95:14:c8:e7:0b:db:96:9e:e5:64:00:93:2c:71:d4:9d:
         0a:70:59:69:a2:72:8b:f8:47:6f:1c:13:b2:da:8f:47:a7:5c:
         b9:a0:d9:87:d4:56:bd:5a:bb:6e:b3:71:f3:34:96:b8:e2:3d:
         25:83:57:b4:f8:63:65:4c:63:6a:44:30:7b:60:f3:93:ed:9a:
         03:4d:d3:06:37:c8:f9:cc:a1:86:69:68:20:01:17:82:2e:51:
         4b:3c:34:0b:ca:24:54:3e:6e:c6:2c:29:23:fb:dc:83:64:75:
         59:87:ed:28:9e:72:de:5d:dc:13:19:4d:94:d3:65:f2:0c:42:
         9b:51:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:17:44 2026 by rpki-client