Error: rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
File:                     biQiwqfj3wfM4NH9AdFG21Z40ds.mft (raw, json)
Hash identifier:          wAbwSoznzRhKVW9RnFewPXHtPs13vuGYXz4Eyz5btxk=
Subject key identifier:   AB:13:12:63:9C:D0:D6:F7:DA:C3:78:3F:CE:87:67:5C:49:41:BC:1A
Authority key identifier: 6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB
Certificate issuer:       /CN=F36C6E36AF/serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
Certificate serial:       37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
Manifest number:          2E
Signing time:             Wed 23 Sep 2026 05:50:41 +0000
Manifest this update:     Wed 23 Sep 2026 05:50:40 +0000
Manifest next update:     Fri 25 Sep 2026 05:50:40 +0000
Files and hashes:         1: biQiwqfj3wfM4NH9AdFG21Z40ds.crl (hash: GxQbY5ak2jCQ0ZCgd9RR2V1HoUp/bDAKYuPd4+uqfEw=)
                          2: 2BAE2E76B2D611F1AAFB07C7CE1D38B0.roa (hash: xVwAUnrViwTntUveNDo6qYXWSRccSSgDlFmKIFO0HSM=)
                          3: 6C7FD260B2D611F193C51DC7CE1D38B0.roa (hash: +KcH4KSDhfgOgrPgucsOz0T5Y9dgTuxMI1/ms+27xx4=)
                          4: E2095C86B2D611F182DB22CBCE1D38B0.roa (hash: 0QotgG4JTFYIzqDDSEaZjrPBe1AsQnW20uL0HP117RM=)
                          5: 8EB514929BA411F18359831DCF1D38B0.roa (hash: HIgQE1FkAEHLt9W55ZyAHjmOCHWt9l42BG52dMjKpNM=)
                          6: 2721414EB2D711F19D7933CBCE1D38B0.roa (hash: L1RNC7+I9L1V3kn3iAD4GkwCCWlSqZzac+IyOHlw4BY=)
                          7: 0745CDAEB2D711F187AA27CBCE1D38B0.roa (hash: DV4zcMkbFgzhtFkdO2oTjhaIbbAWHRM/lgDhjMjNUhc=)
                          8: C53660ACB2D311F19EF6E7B6CE1D38B0.roa (hash: 5Dj/UiotHDT3B1x2BeMhtWpFuhLdGfHWKGcnmB6uC1c=)
                          9: 974C140EB2D611F1A4B778C7CE1D38B0.roa (hash: /3CPs8bAIpaxY0a9SbOCMe+TpsRY6Oe9DBQBTqL2Q24=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                          rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E36AF, serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
        Validity
            Not Before: Sep 23 05:50:40 2026 GMT
            Not After : Sep 25 05:50:40 2026 GMT
        Subject: CN=6ab368b1-1b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:48:28:60:cc:a7:b2:21:fa:38:85:71:b2:
                    de:2c:b5:b3:69:78:86:da:05:96:49:9d:c2:ba:91:
                    f4:fe:cc:44:56:bf:6d:c5:9d:8b:fb:af:26:ba:cc:
                    4f:ee:27:8d:1d:36:19:2b:6e:86:1c:4f:0e:72:8f:
                    bb:10:5e:b2:21:1a:85:7d:68:bd:7c:1e:5d:13:74:
                    fa:95:f3:5e:c3:a1:70:05:70:c9:38:a6:ff:0c:04:
                    54:50:83:87:e4:0e:4b:a2:62:ae:24:00:9f:64:c2:
                    fc:50:ec:b6:d7:79:fd:12:8a:5c:5e:17:ac:38:5c:
                    c9:f7:0a:9a:90:00:47:a7:48:43:32:51:99:06:b6:
                    07:dd:de:a7:bd:9a:49:8a:bb:5f:bf:5c:c0:41:3f:
                    af:32:04:8a:a2:ec:66:f6:fd:04:72:5d:17:cb:6a:
                    d7:b0:24:75:5b:6b:db:6a:eb:c7:4b:10:ba:3e:54:
                    05:fd:8f:73:97:c0:87:f2:85:9d:fc:7c:64:27:eb:
                    e9:1a:60:be:80:19:df:49:01:a1:8d:69:68:99:01:
                    5b:5f:ce:62:25:7c:0b:2c:e8:58:32:69:8d:a2:3a:
                    fe:54:1f:44:81:d6:4c:07:75:d3:9d:74:91:cb:fe:
                    42:a0:c0:cf:83:d1:ad:57:7f:d4:8e:9d:9c:7d:12:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:13:12:63:9C:D0:D6:F7:DA:C3:78:3F:CE:87:67:5C:49:41:BC:1A
            X509v3 Authority Key Identifier:
                keyid:6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:63:bb:24:61:65:92:9f:44:e9:70:8f:b7:9d:a2:bf:eb:8d:
         ec:9d:b2:10:4f:fd:70:c8:9f:8d:2c:65:f8:49:d5:8c:62:2f:
         ed:35:3e:1f:e3:2a:e3:a5:1f:ea:0e:a4:2b:c1:33:ca:61:a0:
         26:0e:28:b5:d4:ee:20:47:94:aa:a5:aa:39:6e:00:10:e2:92:
         5a:a9:1d:69:f3:87:40:f2:66:09:24:77:12:75:17:2d:b3:72:
         a6:98:cd:53:93:e8:7a:ca:99:e9:da:9c:c4:a9:c9:b2:71:3e:
         f4:ec:ae:ad:94:83:26:a8:0e:64:0e:83:91:6a:c0:d0:a0:1a:
         b5:61:d7:8f:a4:1c:4c:99:bf:5c:61:9e:06:51:78:41:62:18:
         8a:fd:8a:5d:e3:1d:b2:59:97:3d:bf:f9:01:04:1f:3d:11:6e:
         a2:ca:43:ab:f5:a2:ef:c2:be:43:02:d8:04:2c:14:e7:ec:19:
         6f:8c:7c:64:33:eb:b5:14:c3:e0:c5:ca:62:3e:0a:26:05:0e:
         2f:77:d4:38:6e:37:2a:83:5a:c7:fb:f9:78:8d:38:bf:48:c3:
         2d:f6:42:13:1d:6f:f5:7e:69:29:46:a4:6e:d8:37:9f:35:29:
         78:1c:86:22:b5:0f:ea:47:a9:09:c7:3e:4d:47:51:e3:1a:61:
         60:a3:b0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:48:22 2026 by rpki-client