Error: rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
File:                     k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft (raw, json)
Hash identifier:          yH9Tn6u5CEM+qaGSc8CDnP3D+gaGtme7ptwjWcPCugc=
Subject key identifier:   A0:72:DC:39:5B:31:E8:12:B6:2E:18:3B:98:19:A1:55:58:7D:6B:9A
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Certificate issuer:       /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial:       0AEB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
Manifest number:          0AD9
Signing time:             Mon 12 Oct 2026 01:29:03 +0000
Manifest this update:     Mon 12 Oct 2026 01:29:03 +0000
Manifest next update:     Wed 14 Oct 2026 01:29:03 +0000
Files and hashes:         1: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl (hash: jOCwV1dS7kko0AsyxmQ2pEyngYGX+v1pkMyxE3fMZJM=)
                          2: B75C7E906EE411F1BFC0C5F8CE1D38B0.roa (hash: yxSUyn7Yk5ZGWHG0/FHM9bfxbuiVZMuC4aOCNZye1hU=)
                          3: 6C92F8926EE111F1BE935CE6CE1D38B0.roa (hash: 4lwcOgnzLzEB/E9hUs2QzeevDs6EAMCI/rEoNCniIAc=)
                          4: EDEF3E0C6EE411F19B54C6FACE1D38B0.roa (hash: BU4bFgjRPGM2my9qgXl9GWzjnVJcxAn8h0IPdvk7Tg4=)
                          5: E95E4E02065B11F0BF610D92762E951A.roa (hash: hC1qoRCVr73SSJvtnxgOKj5VeDUtOUW6+PzCj2xq8vw=)
                          6: C99074A86EE511F1A0B7BA00CF1D38B0.roa (hash: TMRCyfSKOW6QLRSeFIMaerdug4mgiwMN7tQz4PORojM=)
                          7: 2C657F88958811F19565AA04CF1D38B0.roa (hash: D87TM0giV+0DWOAmJ22pHAEcl9l7JcZYRoDDL9i+LNg=)
                          8: F4F37FFCB7D111F1BD1A89C4CE1D38B0.roa (hash: e7xMBKMTAeroe6V+KIuKWf5P+NchJblhR16sOfvrzDU=)
                          9: 297034DCB7D211F1B54802C5CE1D38B0.roa (hash: rXWVQT892VCrJK5vdICYklgxuIZ5tALpLCItsAt6RW8=)
                          10: A84E555A6EE311F1897E5EF4CE1D38B0.roa (hash: t4D6hIFY0p5ZMnItN5GrDjfqPD9JxuqJaTYlOHaS5Lc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 01:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795 (0xaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
        Validity
            Not Before: Oct 12 01:29:03 2026 GMT
            Not After : Oct 14 01:29:03 2026 GMT
        Subject: CN=6acc37df-91c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:cf:0d:e2:b4:3f:c0:aa:a6:e7:4d:98:2f:
                    65:ea:0d:d9:20:31:d6:4a:b1:ab:4d:97:1c:6c:79:
                    2f:a7:dd:d5:d4:29:44:8e:b1:7e:d4:64:71:29:37:
                    96:4d:ef:79:2d:04:35:0d:f1:f7:fe:45:d4:92:92:
                    a4:6e:e9:17:3d:b5:06:9c:f3:4f:aa:bf:14:0d:90:
                    fd:53:7a:94:c9:16:44:29:e5:85:1f:09:ff:d8:96:
                    3b:98:df:a5:bf:2f:75:6f:d3:26:89:6e:aa:6f:64:
                    a8:12:6f:ec:8c:29:90:c3:9c:bc:06:6b:9a:96:27:
                    58:e8:cf:e7:8d:71:e1:22:76:e0:86:c2:c6:c1:01:
                    f7:8a:e1:8f:a9:27:74:06:10:1e:9e:bb:9d:be:15:
                    66:9d:70:5c:5e:95:e1:7e:fe:7e:a5:bd:eb:6e:0a:
                    7c:bd:a9:67:30:d7:0a:87:fa:4b:ed:5b:a1:22:a4:
                    ec:23:59:82:34:5b:b0:04:75:49:65:c7:f0:4c:ce:
                    0e:2b:c9:43:1d:f3:36:22:72:ba:82:84:f4:1c:81:
                    7f:2f:36:14:ca:57:92:18:3d:31:f2:49:87:97:97:
                    24:64:a3:1f:04:e8:8c:43:0f:83:a3:7f:5f:cd:e0:
                    a0:c3:1e:79:16:d6:c7:58:7a:63:ac:45:e6:5f:e2:
                    c4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:72:DC:39:5B:31:E8:12:B6:2E:18:3B:98:19:A1:55:58:7D:6B:9A
            X509v3 Authority Key Identifier:
                keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:09:bf:21:bc:08:41:ee:62:1e:5d:11:cd:2e:bb:7b:a8:
         b1:8a:45:18:41:b4:d3:c5:88:7b:b3:99:96:ac:bb:02:aa:8c:
         8b:f6:99:8f:f8:89:a5:b0:34:e9:09:ef:4e:3a:66:d6:c7:cb:
         b7:8f:38:51:a4:b6:63:49:f5:23:78:5f:a1:85:3c:7f:62:27:
         f1:c9:8e:3d:08:f6:ab:e8:d4:0c:45:60:f0:2f:59:6a:43:fc:
         02:75:30:49:ca:e0:86:a4:81:a3:1a:de:b7:ca:0a:ca:ed:ab:
         9f:c4:c2:a0:84:ae:6e:76:6f:dc:0c:6d:fb:03:70:34:41:c6:
         d7:f1:70:d0:e3:de:8e:ca:af:d6:79:fc:8a:7e:61:fd:e7:e9:
         8a:7c:f9:3c:72:ea:d7:c4:92:7f:99:4b:58:6f:b4:5f:09:79:
         d2:e3:3b:81:79:e0:a9:b8:4c:59:e7:9d:34:17:eb:c0:77:5d:
         e7:86:54:88:cf:88:6c:1b:91:22:2b:56:e4:46:dc:1e:bd:03:
         a1:75:e1:6b:7c:17:23:48:59:76:46:c1:9e:a9:16:80:62:e8:
         23:8c:2a:27:a2:28:2a:02:9c:3b:4e:93:d7:23:ff:f2:c0:c5:
         df:e4:1e:cb:77:c6:1a:ad:63:af:dd:0d:c1:16:09:c3:3e:ec:
         c4:0a:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:58:16 2026 by rpki-client