Error: rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
File:                     w7UAblEUm7jKxFElONXFSJGYBRE.mft (raw, json)
Hash identifier:          P20fYyVisYrVNn6JM7lcrN5t2DNekz3EPA4VECsxCqQ=
Subject key identifier:   05:76:17:A8:1E:63:05:48:B8:B6:AF:D6:6F:06:1E:E9:DD:90:A6:6B
Authority key identifier: C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
Certificate issuer:       /CN=F36F1706AF/serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
Certificate serial:       78
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
Manifest number:          74
Signing time:             Sat 14 Nov 2026 05:45:23 +0000
Manifest this update:     Sat 14 Nov 2026 05:45:23 +0000
Manifest next update:     Mon 16 Nov 2026 05:45:23 +0000
Files and hashes:         1: w7UAblEUm7jKxFElONXFSJGYBRE.crl (hash: qBKDMk2nCzEzRbDUNWQXhq1qQXO9ft1MGQPXzCyyE9w=)
                          2: 89F59F52899911F1A7AD9101CF1D38B0.roa (hash: YNpVGkQy1GoFTog1cBsr5YOO00CSd9CWUy+PPCH4u+s=)
                          3: 57EAF720BCAF11F1BF4F8E00CF1D38B0.roa (hash: HzlJMZZZ8QH8YqSd5Cbe+CYkTDSPgjXYntKUoZaFBBQ=)
                          4: 682E97C2899711F19F9341F5CE1D38B0.roa (hash: rbfOhYq8VLN+kcDtAjr99tjl/9Nwedu05DLdKCoHF/M=)
                          5: FC113E3289CD11F19C9189BBCE1D38B0.roa (hash: wvDztMtFp9ErIeXN+hPapsd1xp1Y+eDSDNfLR594dug=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F1706AF, serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
        Validity
            Not Before: Nov 14 05:45:23 2026 GMT
            Not After : Nov 16 05:45:23 2026 GMT
        Subject: CN=6af7f573-151d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:46:b3:b4:a4:eb:e8:6e:59:cd:7b:18:ab:1f:
                    8f:25:b3:12:9d:40:e4:46:f3:62:68:e9:33:2f:bf:
                    03:7f:de:26:3f:24:1b:d4:58:c4:64:de:23:ff:88:
                    b8:4c:a6:f6:1b:0e:c5:5a:58:8b:5d:15:ce:9b:da:
                    d2:cc:08:a0:71:98:68:3f:8a:04:61:06:67:aa:e8:
                    57:19:f4:5c:d1:8e:99:20:11:7c:0b:05:20:7d:00:
                    37:a7:3d:5f:92:ec:11:88:d1:fd:c9:3c:6c:d4:b1:
                    75:0c:9a:b6:37:bd:b8:63:74:32:fe:54:ac:2a:73:
                    13:7a:9b:d2:9f:a9:31:b6:a4:c1:69:e1:e0:6c:2f:
                    a5:c9:cd:89:ad:03:58:58:d7:d1:47:d3:21:fc:71:
                    14:f0:a8:66:1a:22:a3:ef:78:ea:26:20:89:10:40:
                    bf:2b:36:81:eb:73:0b:b4:94:1a:0b:ac:75:b1:56:
                    ae:fe:05:1d:f3:b5:c1:ea:16:b2:91:2b:19:93:e9:
                    1c:24:73:b7:69:59:3b:d8:3b:af:6f:1c:b3:4e:a3:
                    b9:e7:ba:d6:82:59:99:a9:5b:07:d7:67:1b:8c:e5:
                    60:4f:06:f2:d7:d7:53:f3:4e:ef:c8:f2:a8:88:cd:
                    db:20:a3:ec:7f:40:f7:ef:c2:fd:d7:10:fd:81:f5:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:76:17:A8:1E:63:05:48:B8:B6:AF:D6:6F:06:1E:E9:DD:90:A6:6B
            X509v3 Authority Key Identifier:
                keyid:C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:34:32:ee:76:ce:1b:b5:2f:aa:5d:c2:d4:ee:4a:2b:03:
         f0:fe:77:d8:cb:38:58:1d:16:80:d1:f0:f2:bb:fe:1d:b2:d6:
         ff:01:00:57:bb:d3:a2:97:1c:cf:53:55:de:5e:74:49:4b:b7:
         73:a6:98:f1:08:4e:e7:1d:c5:5a:90:67:cc:a2:80:af:87:3b:
         85:e5:23:82:6f:b4:b3:43:4b:2e:e8:7b:00:af:1f:31:60:62:
         5d:cf:76:9c:c0:28:46:1b:27:76:97:ba:80:b1:9e:54:fc:f0:
         4b:84:e7:a8:79:21:a6:89:a3:a7:f0:04:5c:43:89:91:db:a8:
         ac:f1:ae:e7:dc:ac:28:e5:9d:ab:c4:bb:a1:00:8e:af:6e:06:
         6b:7a:5d:42:a0:c5:71:d4:73:d8:05:8e:fb:06:fe:a1:c8:ec:
         0a:a2:7c:5d:8f:76:41:b2:33:3d:8d:a6:b0:43:62:1a:87:66:
         2f:7a:1d:86:93:ec:06:e3:b8:54:6e:8e:63:90:ca:03:88:97:
         15:b3:b2:ef:a4:d8:ba:4a:e3:22:57:ad:c3:90:b5:a0:5a:f3:
         00:82:78:bb:e3:b8:f5:ab:b2:21:1e:03:43:18:3b:9e:83:9f:
         b0:4c:0f:24:cd:55:94:06:17:09:7c:70:9b:10:1c:39:ca:d1:
         9c:26:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:50:30 2026 by rpki-client