Error: rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
File:                     LNMcPCUfXtoYP5OOf8s6Sh26id0.mft (raw, json)
Hash identifier:          4U71TllaFm6j6NE8JMQs9yACW5uWjq7DRkkxMAtss8k=
Subject key identifier:   D3:DB:CB:EB:8F:28:87:EA:44:DB:C7:FC:DD:BE:11:CB:6A:31:A7:C3
Authority key identifier: 2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
Certificate issuer:       /CN=F36FDDEEAF/serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Certificate serial:       0976
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
Manifest number:          0968
Signing time:             Sun 15 Nov 2026 01:50:14 +0000
Manifest this update:     Sun 15 Nov 2026 01:50:13 +0000
Manifest next update:     Tue 17 Nov 2026 01:50:13 +0000
Files and hashes:         1: LNMcPCUfXtoYP5OOf8s6Sh26id0.crl (hash: UoMbb9G78ObFHVhc/e5TYNq8VQ4AIUN7vx94YhhNP8A=)
                          2: F0EF141C4FAD11F0A2CF018ADAE4EC9C.roa (hash: s9CANyFnnMQFBebtZSUl9JpC2l7TIpoth6Vtnvo8L04=)
                          3: 8CBEF34A4FAD11F093912788DAE4EC9C.roa (hash: LYzjFbg1hC2pJNCyNVlFyFaCoTckxwNGPohEbA60zjQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2422 (0x976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDDEEAF, serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
        Validity
            Not Before: Nov 15 01:50:13 2026 GMT
            Not After : Nov 17 01:50:13 2026 GMT
        Subject: CN=6af90fd6-1988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:fe:e8:93:1d:b7:16:b2:61:2a:66:c0:51:
                    0b:4e:91:ab:e3:5e:dd:33:66:03:e1:9f:f9:26:5d:
                    b3:98:82:82:0f:9b:b0:7a:b2:21:20:0e:3d:a1:54:
                    01:d7:e6:86:f7:c9:95:9f:f9:4b:b4:0a:d3:d3:bc:
                    6e:77:16:31:f9:8a:d1:6a:da:ff:d5:96:66:51:ed:
                    1f:75:fb:c5:ea:c2:ca:e4:e3:6f:8f:ce:3d:d7:0c:
                    bd:6c:2b:1a:91:92:5c:fa:f7:6a:86:b0:cf:b5:46:
                    9a:4b:0f:60:15:22:cc:87:30:51:78:44:20:b0:da:
                    60:86:a1:ff:13:c1:1c:9f:77:e5:88:2a:53:47:ad:
                    7c:26:55:75:19:c5:d2:55:33:af:1f:b2:18:ae:39:
                    f6:b7:99:dc:a1:5a:9c:37:2c:a0:1c:1f:75:39:d4:
                    01:91:69:c3:7b:4b:3f:73:b2:8a:d8:c0:2c:ce:fd:
                    d7:4d:1d:86:b1:09:a2:2d:61:64:e5:4d:e2:b1:b6:
                    14:66:1d:5b:12:8a:47:b8:16:8b:39:4c:a1:43:d1:
                    9e:2d:7f:b9:9a:65:a5:4b:51:d0:e6:37:7a:bd:3e:
                    2b:ff:f2:ef:37:80:d7:fc:4a:08:7f:21:1c:3f:47:
                    67:bf:fb:94:a7:b1:12:44:9a:fe:55:b6:ac:63:56:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DB:CB:EB:8F:28:87:EA:44:DB:C7:FC:DD:BE:11:CB:6A:31:A7:C3
            X509v3 Authority Key Identifier:
                keyid:2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:30:bc:07:29:6a:4a:0f:d0:83:91:5d:e5:6a:65:99:c6:62:
         57:28:73:fa:58:95:49:ef:4f:4c:9d:73:43:f1:7b:73:f4:ff:
         06:0f:a9:43:38:70:d7:c4:24:f3:4a:00:99:66:de:f4:a1:b5:
         77:cf:c0:4d:42:e6:18:c1:69:2e:cf:51:58:70:01:40:d2:d7:
         96:8a:4a:91:e1:f1:67:f3:ca:60:3a:ed:d0:0f:90:9e:42:56:
         33:bf:79:92:39:2e:b5:4e:c5:64:80:ba:fb:7d:96:99:23:2c:
         bd:be:cf:4d:40:2a:53:0f:77:ce:61:78:c8:46:61:de:73:f6:
         b0:a2:35:05:7b:b1:d2:89:c4:3e:51:ae:cf:89:b7:23:89:c7:
         69:8d:23:ac:38:9a:cd:44:c2:30:e1:6d:35:a9:d3:30:90:93:
         d2:8c:12:1f:19:88:6b:4c:6d:2d:a3:b5:df:b6:a0:68:04:b2:
         62:b6:cb:1a:f3:81:92:45:7b:88:70:f3:dc:a1:7e:96:3a:6f:
         af:97:55:2f:97:8a:4e:8d:93:d8:5e:bc:f5:b8:bb:e2:b9:e5:
         85:95:1f:6a:53:e2:82:08:67:8a:b2:97:ee:4c:94:5c:fa:bf:
         34:59:b9:85:6e:1a:9b:4b:27:98:5e:02:ce:de:64:48:02:cc:
         ab:9a:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:16:28 2026 by rpki-client