Error: rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
File:                     IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft (raw, json)
Hash identifier:          2mFiCxNxjoUFfSsLj/MTa58RTXuMBDaV1e4F8YWTCWs=
Subject key identifier:   86:81:82:3A:65:D2:12:EB:68:DD:4D:36:78:0C:74:73:AD:74:C2:6F
Authority key identifier: 22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
Certificate issuer:       /CN=F36CE430AF/serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Certificate serial:       010D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
Manifest number:          010B
Signing time:             Sat 14 Nov 2026 05:27:28 +0000
Manifest this update:     Sat 14 Nov 2026 05:27:27 +0000
Manifest next update:     Mon 16 Nov 2026 05:27:27 +0000
Files and hashes:         1: IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl (hash: /c0fpI5XgtsaMKx63RTg4bBEdcg97H1g4zWAjctNHbY=)
                          2: B26406B2115E11F1A6022FD5DAE4EC9C.roa (hash: 7PV+1FdMOwzL2sEcSdwc46KEV9LTzKnwF2E0RpdtuUA=)
                          3: 61252ABC115C11F195A7B0C6DAE4EC9C.roa (hash: +97KNf3zcICVtSO8hAKNcT79qEYenewn2RIftrsHFA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CE430AF, serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
        Validity
            Not Before: Nov 14 05:27:27 2026 GMT
            Not After : Nov 16 05:27:27 2026 GMT
        Subject: CN=6af7f13f-a797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:48:80:6a:58:e8:95:10:12:e0:59:f8:90:
                    1f:9f:15:13:f8:e0:c5:fd:b6:0a:2f:63:2a:c3:bc:
                    56:2f:9d:89:90:ac:61:4a:dd:3a:50:d2:5f:cc:c9:
                    21:a4:f5:ea:4a:a8:95:75:a6:4c:c8:34:d4:5d:1b:
                    dc:6b:84:2b:31:39:ff:ec:b7:ef:ba:a1:66:a5:59:
                    e1:6e:6a:22:d3:62:7a:b6:41:4c:a8:50:f6:b1:a9:
                    88:03:8b:ea:1c:8c:ae:bd:a9:71:5c:d0:49:c0:24:
                    40:f4:1e:a8:c0:da:9d:2e:b7:33:ec:59:7f:de:96:
                    c8:57:d8:f2:de:e1:2a:60:fc:1e:28:54:b6:47:9b:
                    d4:f9:64:1d:c6:ec:3f:ac:11:18:64:76:99:10:5d:
                    5d:50:a3:f6:7b:47:7f:e1:71:21:24:e3:3d:5e:76:
                    9e:c4:40:78:e5:4c:d7:17:ed:d9:2e:13:bf:cc:61:
                    5f:2d:f8:56:1d:5a:b9:de:e7:0c:14:69:0f:46:d1:
                    92:f0:65:ec:72:c7:12:7b:66:35:04:79:d6:82:8c:
                    14:f1:ad:fb:0d:5d:aa:02:f8:3d:b7:f2:e1:c4:31:
                    fa:9d:9a:c1:c7:f0:32:51:71:28:d1:50:87:ee:89:
                    5e:89:4f:be:6a:5d:e8:98:e9:41:39:98:04:df:23:
                    a4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:81:82:3A:65:D2:12:EB:68:DD:4D:36:78:0C:74:73:AD:74:C2:6F
            X509v3 Authority Key Identifier:
                keyid:22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6f:9b:ec:f5:32:57:15:50:21:26:10:65:94:e9:0f:c2:3a:
         15:b4:7c:a7:b4:89:fc:37:b9:3f:77:ae:df:1f:96:01:5d:12:
         05:de:3d:28:4e:3f:49:a8:e8:c6:85:f0:1b:0f:31:28:fd:7d:
         4b:8e:57:fc:d5:a9:33:20:05:1a:29:09:4c:1e:2f:dc:00:9c:
         8b:ee:d6:9b:db:31:54:50:c6:16:b9:10:f3:33:82:42:98:5d:
         20:97:24:3f:31:ae:8b:b5:72:d2:0f:8c:47:e7:46:d9:d4:20:
         23:c0:f1:dc:2e:62:65:aa:15:01:c9:f1:2c:fc:59:b7:a1:cc:
         b4:55:7a:57:3c:8f:8c:76:fc:e2:d0:af:83:89:63:d1:ba:c3:
         3d:0e:a9:2a:0b:10:df:bd:d0:59:29:4f:3f:56:ff:f9:bc:77:
         ea:5e:ca:64:c8:57:a9:ac:27:35:98:64:0d:18:e5:f4:37:20:
         a8:68:d8:c2:e8:c5:ee:34:ba:20:c0:16:5b:d8:15:61:99:f6:
         9e:aa:f6:21:bb:0c:18:1d:da:46:55:8a:a0:3e:c5:ee:cb:55:
         39:6e:0e:07:62:94:16:01:64:a3:79:75:06:9a:c9:de:34:36:
         ad:ca:e2:20:65:20:88:6f:58:17:d8:5e:20:04:c7:f3:d3:3f:
         89:04:fe:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:22:34 2026 by rpki-client