Error: rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
File:                     Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft (raw, json)
Hash identifier:          m6XLwGz72OLeJa3b14X+GpNNDqfjuDvbC3EmQjoY3Y4=
Subject key identifier:   81:10:5A:1C:2A:3C:BB:77:DA:C6:3E:C6:47:1B:82:FB:A7:72:0B:60
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Certificate issuer:       /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial:       0C35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
Manifest number:          0C2A
Signing time:             Sun 15 Nov 2026 01:14:27 +0000
Manifest this update:     Sun 15 Nov 2026 01:14:26 +0000
Manifest next update:     Tue 17 Nov 2026 01:14:26 +0000
Files and hashes:         1: Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl (hash: smuiKaG6skLWriv4XhW1P6ckkdjJsNL4L35g4gpGfKI=)
                          2: 20F7E19E955B11E88F26617FF8AEA228.roa (hash: sfkjh7zAV15jSl9QHHQklWNOaiXkSZouLreAi3kdb8o=)
                          3: A41FAC428B6511F192AECEF7CE1D38B0.roa (hash: drLADxnaOEGMyqdel7G/uH1BM2flnhzBkm7jo80NuCg=)
                          4: 7E3B3DC8D0A211EE9C1C0C61775412E6.roa (hash: BmRCYuiQPjmiqgCkPMHoi7HMNfeBckz/l/PWc6bOGFU=)
                          5: 9D9A3A6C955B11E8A202E380F8AEA228.roa (hash: +I0HAW1gRUHoR+hm5FaXpkLRZEuabi7h8ckCvRV7EsI=)
                          6: 18465AD68B6511F1B80344F6CE1D38B0.roa (hash: rxp1LYHtsrztjq5zC600yur4RG+dLMJAQtCO5n3hBKY=)
                          7: CEFEEC808B6411F1936DA1F3CE1D38B0.roa (hash: XglJ0uhy4sNkIBBRSrMKRGPstU3401znCZ/NG+6Ge/s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3125 (0xc35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AF, serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
        Validity
            Not Before: Nov 15 01:14:26 2026 GMT
            Not After : Nov 17 01:14:26 2026 GMT
        Subject: CN=6af90773-4554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:a9:97:a9:43:dc:c3:2d:c2:a9:e0:d7:bc:
                    25:4a:99:76:7b:7e:c1:3b:91:4f:52:fc:5f:fe:40:
                    2a:60:2c:c1:85:0d:55:4a:65:ca:c9:8b:b7:83:ad:
                    d5:9f:58:92:89:3c:6c:60:a4:57:a4:b4:1b:93:a5:
                    32:be:2e:a9:32:3d:8f:4b:37:fa:3c:55:18:87:00:
                    70:95:c5:0d:98:73:63:62:22:07:d2:81:d8:7e:79:
                    01:cc:31:2c:0a:e4:b0:c0:32:7f:fb:3e:91:3f:45:
                    fb:a0:6a:bd:63:ba:52:8a:67:96:5c:72:37:e1:64:
                    76:d2:7e:f8:e1:ef:a3:e3:f8:e7:7d:af:b7:76:19:
                    04:5a:4f:f0:b0:d8:ea:96:54:d3:ed:3b:f5:6b:5b:
                    db:c5:cb:54:cc:35:42:1c:ca:da:01:17:fb:76:80:
                    a4:a1:dd:15:f3:6b:02:a9:08:a6:f3:c9:1c:c0:d4:
                    c4:2f:e2:a4:b3:54:3f:ad:38:26:d4:72:4f:7a:2f:
                    37:ee:c2:08:20:5f:d9:2c:16:2a:9a:e0:5e:33:d8:
                    4f:39:69:f9:3b:a4:bb:1f:88:51:a1:f6:71:4f:de:
                    2d:e4:10:6c:eb:f8:c6:e1:05:c6:71:d6:24:53:97:
                    3f:4d:77:f4:17:a8:ee:24:c9:4b:5f:92:5c:e7:96:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:10:5A:1C:2A:3C:BB:77:DA:C6:3E:C6:47:1B:82:FB:A7:72:0B:60
            X509v3 Authority Key Identifier:
                keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e0:64:c4:db:0f:09:18:14:e8:52:59:10:05:ed:ce:fb:67:
         a5:1d:1b:a5:f7:eb:ea:21:0e:da:71:8a:01:fb:a9:71:07:d0:
         74:99:2c:82:1b:35:e4:45:e1:fa:ae:cc:45:94:cd:dc:e5:12:
         4f:c8:ce:ef:57:76:8d:07:ec:95:ad:54:ed:6a:3e:25:14:61:
         b3:41:48:26:84:04:d4:c4:88:96:e4:89:83:91:59:75:d7:02:
         cd:48:e8:1b:c6:09:b7:ec:ab:49:27:63:24:5c:29:4f:99:60:
         cb:da:43:4e:50:5e:f9:06:e3:52:4d:df:c4:0d:30:95:07:21:
         6e:9e:34:8c:35:06:38:db:f7:f0:be:0b:94:f5:d9:65:26:e1:
         b1:51:fd:bc:40:43:b0:6d:a3:16:70:42:38:5b:b2:79:a7:1b:
         2a:8b:0c:dc:39:9f:9f:b4:05:e7:69:ee:ff:6f:d2:45:2a:a7:
         01:0c:8a:a5:3c:0c:d0:e9:a5:4c:20:ac:b8:fd:31:71:90:43:
         11:46:c5:40:9a:cf:f7:66:65:1d:e3:0e:28:55:b6:81:3f:c7:
         5a:d7:0f:72:eb:d9:41:e5:0e:eb:a8:17:6c:d3:73:1a:92:03:
         05:fb:5a:9a:ee:72:db:6b:e4:10:7f:a9:ed:b5:8c:d4:d0:f4:
         b6:26:e5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:21:37 2026 by rpki-client