Error: rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
File:                     3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft (raw, json)
Hash identifier:          9C+AN99qSqY/MfORvijkMkvbS3t3XZd1aVgDwEnuMdE=
Subject key identifier:   E4:DD:07:85:E2:16:B2:E0:C2:C2:32:34:39:89:3F:D8:F2:22:BF:2C
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Certificate issuer:       /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial:       07BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
Manifest number:          079D
Signing time:             Sun 15 Nov 2026 02:27:10 +0000
Manifest this update:     Sun 15 Nov 2026 02:27:09 +0000
Manifest next update:     Tue 17 Nov 2026 02:27:09 +0000
Files and hashes:         1: 3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl (hash: So7mhdfzb2fbAfrhSN+DKDKFFWIL9RN/4A8KzJ+uzWI=)
                          2: 6F7B2D9CE6EB11EFAF676182762E951A.roa (hash: ywXo19J7zzDJozIEEmOFi9+A4iofR1mYhpmq35OcaZk=)
                          3: 6A5D847ABD6111F0A69CE1BFDAE4EC9C.roa (hash: fHB735+tbv3iVDIq2ZhU4RWinWdYCJgEt4jlNj33RYU=)
                          4: 0EB8532CE6E611EFA1284861762E951A.roa (hash: +Ok9dLqiCTNEexkoRFgNd4UM629LDyyikx+fFXEssiA=)
                          5: D2640C504D8611F194813CBECE1D38B0.roa (hash: /99i/E37/sLc9uckkDyxL7ts9mUcGjjrXZJ3fFKWsS4=)
                          6: F5ED0DA04D7E11F1841FD20ECF1D38B0.roa (hash: oEUd1BdQ4h8SlMS9rr6IITgSdjGWARvpJYNAzue0L1Q=)
                          7: CEBF9F2CBD9B11F0AACFB4A9DAE4EC9C.roa (hash: Y3SPEfa9FhnRnBcfIvNCeFJG2P0gudqhEmqdjsID6Jo=)
                          8: F61EA0164D8511F1812018BACE1D38B0.roa (hash: Ab9rIz1detylRD5j7+jES2KsDtf7UxmgzAMTiEbWGbc=)
                          9: 6FD074F64D8711F1A4EC49C2CE1D38B0.roa (hash: zxcsbgaRBJy457Rvci+coU8tsua7eVRsu1+gKbjYR7U=)
                          10: F3B29612C8E711EFAC3B3EA9762E951A.roa (hash: OETANewi1spwDI+wuFRp4Ft8bl6bEviyIyR18XaKaRE=)
                          11: CF2B6C9C4DED11F18455B9BCCE1D38B0.roa (hash: zO7OG6eEHPwr6j/HSsWNv1nMchvBsohwY9RpbxKAxGU=)
                          12: C66E300C4DEE11F19B3077C4CE1D38B0.roa (hash: 16rkfSs+t576hxwFyafItM6LVAcNfwbY0/MmDqPh9yE=)
                          13: 5F5BD7A8C90511EF919C5060762E951A.roa (hash: CP9UE+jBOHX8oQ6s2JYHUVcCyElYEvB82K2Sr0b1faI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1982 (0x7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
        Validity
            Not Before: Nov 15 02:27:09 2026 GMT
            Not After : Nov 17 02:27:09 2026 GMT
        Subject: CN=6af9187e-875b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:42:82:be:0b:ed:9d:e0:b2:6e:2a:7c:2a:
                    96:be:fe:8c:8b:7a:ae:2b:b0:6c:a4:05:c3:44:ee:
                    75:16:95:46:df:72:92:55:46:f4:3f:fc:99:30:d1:
                    24:43:5c:3d:9c:28:3d:6b:8e:fd:ad:08:ca:b6:ad:
                    b1:66:2d:a2:43:16:45:5a:c8:b3:93:80:6d:64:27:
                    16:91:33:ca:58:1f:5d:a3:5d:07:be:dc:3c:46:48:
                    61:78:f8:d0:35:ed:7b:89:a5:cc:60:34:da:85:92:
                    a9:2c:32:a0:08:b2:d4:0c:28:9b:07:9a:c8:38:fe:
                    cf:29:2c:31:2d:fd:d3:4b:4d:a6:60:75:b3:bf:7e:
                    76:3b:1a:74:b4:98:b8:a0:ce:c8:3d:51:8a:e2:88:
                    55:5a:3d:03:bd:8c:2a:13:e7:bd:66:8a:52:01:ab:
                    b6:4b:35:33:f6:b5:21:3a:75:59:ac:48:d6:24:89:
                    4f:08:6c:7f:4f:7f:e3:c5:4d:af:f8:cd:0e:08:2e:
                    ac:55:c9:5e:42:d1:9a:bd:90:de:e6:57:26:4a:a4:
                    69:70:d5:34:73:8f:0e:bc:a9:f4:12:b3:5c:fe:3c:
                    0d:0f:34:64:59:9b:d7:dc:c7:a7:8d:23:8c:0a:59:
                    30:37:96:5c:73:01:4e:a9:67:29:40:13:ac:64:51:
                    46:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DD:07:85:E2:16:B2:E0:C2:C2:32:34:39:89:3F:D8:F2:22:BF:2C
            X509v3 Authority Key Identifier:
                keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:23:92:99:89:25:f5:46:50:71:06:2e:ef:81:88:fe:da:47:
         32:9f:8b:16:6e:ca:d3:43:19:65:7b:95:25:6d:ac:e1:ed:eb:
         52:c0:38:5c:79:75:84:5e:c0:44:bc:b3:f8:e3:0f:27:08:8d:
         7c:af:15:3f:51:0b:da:2b:49:ed:7e:b5:eb:fc:2d:07:9b:78:
         7b:32:46:17:e3:78:ed:aa:52:be:07:32:d8:b7:5c:35:dd:9f:
         67:9c:00:03:eb:68:95:a2:da:bf:93:38:c7:04:e6:96:7b:72:
         88:77:33:9d:4c:f8:c7:1a:03:d2:55:3a:73:80:55:97:2a:d8:
         7e:a0:0a:2b:11:3d:ff:1e:56:df:7c:7c:8c:51:8f:47:93:7f:
         63:a8:1c:6d:ad:aa:8f:c7:1b:0a:00:c1:46:5a:91:db:83:51:
         21:75:a4:65:35:27:96:43:cf:2f:c3:ca:b5:12:db:04:8c:d0:
         6e:b7:10:30:92:14:21:ca:40:70:4c:28:7b:6b:8f:fc:2e:41:
         7a:2a:f3:07:e2:56:f5:a5:5b:38:48:44:a9:d9:6b:c6:17:9a:
         42:ac:29:22:53:71:32:03:4e:da:e2:22:bf:ac:95:03:39:81:
         94:80:ae:d9:e1:c8:07:90:ba:cf:07:b1:02:66:d8:13:0d:74:
         80:87:87:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:28:39 2026 by rpki-client