Error: rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
File:                     _Y4EWISxZp69QwrlZnIdl0BKbOg.mft (raw, json)
Hash identifier:          +d8WN01KQa/qbQKLkbpY0BxtIr5WsXahF0tB5jfKGLM=
Subject key identifier:   D2:60:CA:60:94:FB:59:9E:D6:59:C9:5B:E8:06:EB:CC:B3:75:FD:3C
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       0B19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
Manifest number:          0AF2
Signing time:             Wed 07 Oct 2026 01:27:50 +0000
Manifest this update:     Wed 07 Oct 2026 01:27:49 +0000
Manifest next update:     Fri 09 Oct 2026 01:27:49 +0000
Files and hashes:         1: _Y4EWISxZp69QwrlZnIdl0BKbOg.crl (hash: xY2E5Z389L0l35AOgK1odixn5WYjrg6RDTkfaUUWl70=)
                          2: 72FDA95EBED111EBB1E95938F8AEA228.roa (hash: BFwqjnvA7M7iOe8MrvjQVzzYtcahDaV6kGy9p/HlFzg=)
                          3: 417B7412681D11EABAE8A23BF8AEA228.roa (hash: EcSboq3Auo5ZSfF9dSrc6D9TXAo4UTRY5/uzWoCkLSY=)
                          4: B5869B0AC3C211F09F106C8BDAE4EC9C.roa (hash: mJeNbgIsODW0IZbdvirwPYTHzrvnFAJ+2bHY0LU02rk=)
                          5: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (hash: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=)
                          6: 9132C716F59111E9AF6CD33BF8AEA228.roa (hash: rXypH2zp9nVVHeDRCTVV4b8eCSlSkXxt3YUitRlyOEk=)
                          7: 9364DF78BED111EBB8FF9938F8AEA228.roa (hash: NRhe7qbaq8yZpi9FGOqJZVS+hbrFKmeWDZsrvab3+uA=)
                          8: 65F327B8C3C011F0ABEF947BDAE4EC9C.roa (hash: ZNx35ltsV215KO54NwIZRAjQFKuUp9eg7CgfIYk5wag=)
                          9: 238CE30A681D11EA8E2A7D3BF8AEA228.roa (hash: ydKx4ungEUC7wspHHxXIcDKz2U1m9S6af+pOZ0cF1vY=)
                          10: D836FE9222B311F1AE59E8A5DAE4EC9C.roa (hash: Zo4dYOB2OMVvcxcANyuKsstxdleGAQAhhFqhzGOXqz0=)
                          11: A0F84E4E22B411F1A094D2A9DAE4EC9C.roa (hash: RVM1tl7LuX44NxHiJWipsP33NfLSDKNOMeT1ioVv3KI=)
                          12: D7EB2302681D11EA9D36683CF8AEA228.roa (hash: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=)
                          13: 90942EAE22B611F1B2F2A6B5DAE4EC9C.roa (hash: B2oH+YLYL80SnvHNj5we7c9W00Nmw5CHyRiieTPA9Fk=)
                          14: F251F7A2681D11EA847A8F3CF8AEA228.roa (hash: CH6IVgy5lqquXIo/aSkiaRuN6dDR9B17P94pxUuhf4w=)
                          15: AF1ED052BED111EBAE20BD38F8AEA228.roa (hash: 4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=)
                          16: C7DF70DA22B611F1A9E4ACB5DAE4EC9C.roa (hash: FzSMi1ExAtIbBrOh99I/Xg/w2xrMl9lU3Ek0la62bJM=)
                          17: ED8D90DC22B611F1BFEFC9B7DAE4EC9C.roa (hash: Lg3vE54geb/W/HK9e5QX9UvaE5HfR3V6ZT67toBAsnk=)
                          18: 882D016CC3C211F091DEFD88DAE4EC9C.roa (hash: P8CrTuzMoS9SDVWJrxvNUlVaky2bUCzT4t7YspZSN5c=)
                          19: 691543FE22B611F1AD41E6B3DAE4EC9C.roa (hash: OcXC+95ot7At7Mu6jgi4eynHpzMzzE33mDt+ILGM0mU=)
                          20: 213A16D822B411F19F2100A8DAE4EC9C.roa (hash: +REceu3vGyfkElasQapk8ytHIl0xpyt/9IoQ658hAK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 01:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2841 (0xb19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Oct  7 01:27:49 2026 GMT
            Not After : Oct  9 01:27:49 2026 GMT
        Subject: CN=6ac5a016-124c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:ca:63:12:f5:be:d8:eb:07:4c:86:62:b5:
                    d8:4a:23:67:ff:7a:62:6b:c5:a6:17:8d:8d:41:b1:
                    94:53:cf:8b:c9:4f:4a:7c:72:35:67:b7:00:2f:ef:
                    21:70:a8:65:cc:b1:57:6a:bf:84:23:1a:00:ca:55:
                    5d:fd:2c:71:2f:09:bb:b2:8f:85:e4:51:97:8b:0d:
                    a6:c2:5e:9e:36:64:8f:24:86:b1:61:05:61:9d:dc:
                    6b:41:b7:9c:6d:ad:2d:a7:e7:7d:8e:84:89:f6:b0:
                    ae:45:28:ab:ce:d5:9f:fb:5c:d5:64:58:ab:cb:89:
                    ae:9d:0e:d0:9d:af:89:74:b1:77:6c:f4:44:e4:9a:
                    0e:fa:06:92:00:c0:b8:45:38:d3:72:04:bf:d2:ed:
                    45:ef:3c:02:0d:38:7c:ac:8e:ae:43:53:5d:15:ff:
                    01:04:60:49:54:a1:bc:19:ea:27:22:38:3e:3d:97:
                    94:e8:b8:f5:05:2a:a6:d1:d1:42:f5:ba:4c:67:e3:
                    cf:c4:31:ae:75:9b:f0:dd:f6:22:48:d7:31:00:4d:
                    fe:e0:f3:1a:fb:a8:2b:0c:cc:a1:b5:1b:8d:51:3a:
                    eb:c0:1b:f1:0e:b9:a5:51:26:7e:47:5b:c1:75:1c:
                    8c:3e:bc:32:e7:e6:40:b9:9f:a6:db:18:b3:33:2c:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:60:CA:60:94:FB:59:9E:D6:59:C9:5B:E8:06:EB:CC:B3:75:FD:3C
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5d:98:41:8e:b9:bc:6b:ea:64:96:a4:b5:24:69:f0:28:b3:
         ae:d3:fc:27:87:d3:7d:d7:43:bd:54:0a:fd:5e:99:a1:50:74:
         74:1a:8b:5c:bd:b5:2f:4e:01:b5:1a:10:88:b7:64:be:24:cf:
         8e:7b:cd:cf:cd:64:86:75:49:fb:47:53:e6:92:d6:fb:56:72:
         52:89:95:f1:41:90:73:a9:e9:b3:64:19:dc:63:7c:0a:bb:24:
         95:74:9c:ad:30:52:b0:c4:2f:a2:e4:19:c2:7d:cc:55:ee:49:
         04:6b:8f:6e:08:b1:ac:7f:47:86:98:45:c0:7e:37:d0:db:d0:
         0c:e5:b0:47:75:b4:0f:aa:18:1e:0e:44:72:b3:6e:e3:67:17:
         4e:92:6f:f4:48:23:6e:c5:e8:18:31:f0:04:a8:22:23:8d:06:
         8e:a3:92:90:92:b7:00:7e:47:30:99:57:df:f3:31:a7:7f:8a:
         a7:5b:06:cb:ee:c9:5e:e2:f0:26:71:7d:a2:fc:1d:2b:26:f4:
         39:db:c0:e9:40:d5:39:49:ac:b4:0d:c4:52:fa:71:c4:6f:e6:
         21:1d:ee:b8:e4:9e:c8:02:6d:06:41:cf:a4:fc:35:af:40:a6:
         38:98:64:8a:89:08:ce:c4:68:ed:72:ff:94:03:20:66:0b:4c:
         8b:19:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:25:04 2026 by rpki-client