Error: rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
File:                     v10_TcmvF_i6c_VaHXLzlZwFGOI.mft (raw, json)
Hash identifier:          X17ewkjJ1lxnRDS38pwt7sBKCa6GevrgeJgIVHQ/53U=
Subject key identifier:   3E:E1:D1:6D:4C:B4:2B:B9:99:D9:EC:CA:11:C9:21:3D:5D:FE:C0:59
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Certificate issuer:       /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial:       0731
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
Manifest number:          0729
Signing time:             Thu 24 Sep 2026 02:30:57 +0000
Manifest this update:     Thu 24 Sep 2026 02:30:56 +0000
Manifest next update:     Sat 26 Sep 2026 02:30:56 +0000
Files and hashes:         1: v10_TcmvF_i6c_VaHXLzlZwFGOI.crl (hash: IxxV0p8cv041qaZTs5iA8TBBekfbqCBYR+rwrc+K/kA=)
                          2: C22CE7B8848211EFB04104A3762E951A.roa (hash: UvSKfzbPPPDmh9qt5fUcWRDz2kLL0/oUIRFROj/013Y=)
                          3: 8922B3068A5411F18CA202F9CE1D38B0.roa (hash: l7tujZrecd0pm3b6zD0UYp8LyARkv2XxQVA5DhrewW8=)
                          4: EC73A322848211EFA35B4DA3762E951A.roa (hash: E9n0BXdEdCO4VUpJ00TALsQfI4M1cW8WL9kQTleR3iM=)
                          5: 4FE58CA0848211EFB21CDAA0762E951A.roa (hash: hT4mSK8j0yF0krAa2/n501dY/MbNiSKbpGMw/g08dhw=)
                          6: C6263998848011EFAA998A96762E951A.roa (hash: 7pLiVykcpNB61b9uTOfPQKtdMaNQfNXZhZHjF5fDR2M=)
                          7: FD442A68977511EFAFDE5CA6762E951A.roa (hash: jCYhuEuX8SeXpiy1mcrGpnTn+Pm2iMoNn/fsKbfF3rg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841 (0x731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D32D1AF, serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
        Validity
            Not Before: Sep 24 02:30:56 2026 GMT
            Not After : Sep 26 02:30:56 2026 GMT
        Subject: CN=6ab48b60-23df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d3:b3:17:09:cd:6f:4a:de:28:53:88:64:59:
                    9c:d9:e6:d4:69:53:e9:e2:af:6b:79:42:69:a8:ef:
                    4d:dd:c0:ea:44:fa:e6:e3:40:48:0c:50:9b:1f:95:
                    5e:fa:64:60:06:32:fd:1d:b7:f6:43:6e:1b:b0:fe:
                    72:68:9f:2c:25:bc:f0:de:ec:ce:d0:d8:52:09:fc:
                    a4:8e:39:13:25:6e:25:03:a6:26:74:58:0f:b7:80:
                    49:a0:df:5c:bf:04:93:a2:64:56:38:0e:c4:c9:f2:
                    f6:92:8c:27:b6:02:a7:b0:b7:ff:1a:24:a6:92:29:
                    c1:ca:3c:83:4a:49:a3:a8:07:e5:92:c6:9e:dc:71:
                    d2:66:e4:07:85:0e:bf:c6:0e:15:42:e1:77:b0:91:
                    36:72:c2:e9:b8:e6:40:32:65:ca:99:67:90:26:66:
                    98:8e:5b:79:3c:27:ac:5f:e4:c5:66:40:a7:ee:50:
                    52:94:5e:79:12:03:65:82:82:83:27:d4:d5:6b:78:
                    af:12:f9:a6:7c:19:80:f7:2e:15:b4:ba:a3:2f:c8:
                    5b:54:71:ff:3f:cc:b3:20:23:3e:3f:0f:9a:b5:1d:
                    ec:0f:9f:9e:84:c6:1f:17:69:bd:1b:d2:93:99:a3:
                    07:61:60:d3:5f:f2:50:35:30:44:2d:90:4e:7f:b6:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E1:D1:6D:4C:B4:2B:B9:99:D9:EC:CA:11:C9:21:3D:5D:FE:C0:59
            X509v3 Authority Key Identifier:
                keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cc:b1:79:fa:ca:8d:a0:77:2b:1a:4e:2f:3b:57:cf:5d:8a:
         14:c6:bb:d2:95:97:49:ae:c3:02:79:b0:32:b1:48:7d:23:cf:
         85:4b:5e:43:2e:bb:aa:9e:e4:73:8c:6e:5c:95:f9:c8:e0:bc:
         84:ca:9a:f6:ef:d1:48:8f:fd:1b:52:b6:aa:9e:85:a6:d4:5d:
         17:19:79:d1:f5:c1:ed:51:f6:9b:58:11:da:44:1e:2f:86:74:
         f6:87:1c:b4:1c:fa:cd:88:f4:4c:15:97:89:18:08:04:c7:da:
         49:22:e2:08:d1:a8:74:76:8b:60:b2:1e:32:2e:8c:34:51:c1:
         a0:ee:02:a2:24:f0:bb:67:42:5b:da:7f:80:e6:cc:a7:64:e5:
         66:4c:03:be:78:b5:24:1e:70:79:d4:86:be:10:6d:03:18:e0:
         db:3e:c2:95:72:24:c0:de:11:38:79:2b:58:37:e0:8b:a9:8b:
         e0:0b:2f:e6:6f:de:62:f7:5e:57:06:33:ce:d9:66:b8:1b:5b:
         e8:ef:de:5b:1c:e2:62:70:a9:45:c0:19:21:7b:09:f2:1b:77:
         84:4c:67:89:c6:62:59:69:12:c4:42:16:19:8c:e1:0c:52:40:
         b7:ae:9d:bf:06:8e:88:34:d5:f5:c1:2d:2d:73:5b:32:e8:96:
         54:ce:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:10:11 2026 by rpki-client