Error: rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
File:                     T2-ijGjtO5T38fS_9TUdrd4vpik.mft (raw, json)
Hash identifier:          V2jxty0XZcjkDYxRCDvGclOr0Tnpmyv6AfgFtOGkNPU=
Subject key identifier:   7B:6F:AC:DB:89:46:5C:15:19:0D:BE:1F:B4:BC:9E:07:E0:09:5C:AB
Authority key identifier: 4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29
Certificate issuer:       /CN=F3629FF7AF/serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
Manifest number:          1E
Signing time:             Tue 03 Nov 2026 06:05:03 +0000
Manifest this update:     Tue 03 Nov 2026 06:05:03 +0000
Manifest next update:     Thu 05 Nov 2026 06:05:03 +0000
Files and hashes:         1: T2-ijGjtO5T38fS_9TUdrd4vpik.crl (hash: 3WF1X18H5+rgH5DMLMTlK/PNLW8nEObzsGKoCYlKKn4=)
                          2: 42EBC58ACDED11F183869C1ACF1D38B0.roa (hash: tDKcAYhuT+aW//I3S03BhHzK69gTIxE22Nsegs3prCY=)
                          3: 15BADC18CDED11F1B01F7D18CF1D38B0.roa (hash: CWauGwHWbt6BWA131ocqtzdSXRZkkMOn/J1Umic7zVc=)
                          4: B37E972ECD8811F1B7CBC9F7CE1D38B0.roa (hash: augC+sXpRzmsOp+dT2SuylWRuz4Dj+xmQYCJP0YAcAg=)
                          5: D7BA98CCCD5111F19220611DCF1D38B0.roa (hash: WwX0aD1Mvx1royy9ATSog8neLx2pzWaqnryCmdSZ+I0=)
                          6: 1D7407E2CD5511F1990ADDB4CE1D38B0.roa (hash: ubzOrGclp3kcD3ZkFNZlJpNcVeSdncQSpuNIhbR0YV0=)
                          7: 7BC92C3CCD7811F18C930911CF1D38B0.roa (hash: TVrFCSAbiWGonFMali19fDI5ij3S902bOr1HFsvm5nI=)
                          8: B44DE316CD4D11F19594E501CF1D38B0.roa (hash: egLIPmYT4vceJzYRmOiMLBtXTwkZ5jF7Ek6GRiai+64=)
                          9: 2AF76868CD5111F1AC41F718CF1D38B0.roa (hash: BKcesv22fXr5hHfsb/9hhQmBbOcc1B3MHmXpwRxfpFI=)
                          10: E167F496CDF111F19EC52DBACE1D38B0.roa (hash: 8TQAquVGuqFSedAEvxh2gTQnx5WloxSe6RIvcG/K2d4=)
                          11: D021E79CCD7811F19873FB15CF1D38B0.roa (hash: lgZnpsBQ+4u+VlH7rVcjMX62nYAZJbuksQiLO4HI2q8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629FF7AF, serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
        Validity
            Not Before: Nov  3 06:05:03 2026 GMT
            Not After : Nov  5 06:05:03 2026 GMT
        Subject: CN=6ae9798f-3b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:e2:76:48:80:30:c3:38:e0:2a:e0:a6:2e:
                    73:9c:4d:ae:01:b1:6d:cf:e4:87:34:4e:eb:0d:b0:
                    32:97:fb:f8:49:97:fb:72:e4:49:ac:29:2e:6d:cc:
                    29:01:6c:38:71:f8:85:cd:de:b0:06:72:f3:b8:78:
                    b7:15:24:69:37:0e:b9:98:e9:65:18:11:7d:26:39:
                    1e:c5:b6:43:29:6b:18:e4:86:5f:0f:b7:1f:ee:fd:
                    b2:b1:8c:44:24:71:61:b4:a5:e4:de:51:20:d2:7e:
                    2a:06:77:20:4f:1f:8c:c9:33:6c:19:90:6e:45:25:
                    c6:c9:d7:2e:ec:0d:31:8d:26:24:5f:e7:61:65:46:
                    44:1f:ae:b0:e2:4e:59:0d:8a:71:47:54:f1:ba:58:
                    80:3f:c9:c1:70:2e:9a:ab:f1:78:4d:f1:7e:fa:c5:
                    ca:ac:b3:9d:23:60:b6:db:c4:8c:83:10:27:34:6d:
                    e8:f8:98:60:22:a0:05:ef:22:c8:a1:a3:2c:a3:ac:
                    21:df:3f:f8:1b:1f:da:23:56:e5:a0:e9:6f:42:de:
                    45:fd:ca:a7:ca:3c:d3:27:ce:a5:09:8a:e8:86:c6:
                    a9:7d:d2:11:4b:db:50:0d:42:25:69:62:68:af:35:
                    dc:a7:df:09:c9:ea:c9:52:4f:fd:3d:45:57:44:6f:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6F:AC:DB:89:46:5C:15:19:0D:BE:1F:B4:BC:9E:07:E0:09:5C:AB
            X509v3 Authority Key Identifier:
                keyid:4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2f:9f:65:02:15:11:88:4a:93:dc:17:da:54:36:37:bf:26:
         9b:47:df:a8:9e:03:94:6c:94:ea:a0:b2:b1:62:ac:27:8b:48:
         05:2a:0b:f0:b8:1e:25:ea:f9:5f:73:84:ac:52:65:9f:ac:e4:
         97:4f:45:70:3c:f4:97:9b:04:c6:d6:b6:b7:6a:fe:ea:26:4c:
         53:e6:3e:da:e7:a0:9e:86:32:aa:9a:36:84:94:2b:c4:ea:b7:
         02:f2:a3:e4:6f:f6:a0:09:41:5f:34:d2:c0:bb:67:61:90:6d:
         f3:5f:77:89:6f:e3:ea:20:1c:c8:65:8a:c1:51:f2:73:f9:9b:
         73:0f:ae:e6:d1:f9:c0:6d:d8:86:09:bc:73:cd:4b:3c:6d:f7:
         60:33:04:be:48:15:60:c0:e3:69:14:bb:37:1a:e0:e5:8a:7d:
         2a:8b:85:e7:48:4f:d9:ff:c9:ca:2b:3e:1c:34:d5:46:45:91:
         ed:bd:e0:d7:b3:4f:fc:7c:94:c2:3e:b9:44:c3:2f:db:14:ad:
         94:e2:0c:74:c7:fc:5a:25:8a:06:6d:7f:58:79:e2:b1:c8:9d:
         6c:8e:8b:10:37:18:37:e6:c3:1e:30:df:44:f0:c7:4f:9d:ef:
         1b:0c:ce:0d:f5:f6:fe:4a:de:c3:fb:57:78:3b:8d:ce:91:5a:
         e7:c5:3e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:06:34 2026 by rpki-client