Error: rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
File:                     _eoOU4nJlJDK7YKxckgBHMMy7tk.mft (raw, json)
Hash identifier:          6FRZNWC81vG6gDwJa1+ZtEnCAwTZEvzhg8QIi61Y4Jw=
Subject key identifier:   4E:61:94:A5:8B:05:80:AA:5D:D9:C9:25:72:FF:D8:F9:18:77:EB:6E
Authority key identifier: FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9
Certificate issuer:       /CN=F36593EDAF/serialNumber=FDEA0E5389C99490CAED82B17248011CC332EED9
Certificate serial:       0172
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
Manifest number:          016E
Signing time:             Tue 03 Nov 2026 05:14:28 +0000
Manifest this update:     Tue 03 Nov 2026 05:14:27 +0000
Manifest next update:     Thu 05 Nov 2026 05:14:27 +0000
Files and hashes:         1: _eoOU4nJlJDK7YKxckgBHMMy7tk.crl (hash: FHeY8x7ia8LiuVR4B/yTJN7BX56omukhoN3t4KbkCGQ=)
                          2: AD090708EB3E11F081BA3F85DAE4EC9C.roa (hash: EEvjnWrqTqCrU6/jH+ZrQQTx3G+T9FDIB2rCpcs/TAg=)
                          3: 4ADCA614BE4511F083697AD7DAE4EC9C.roa (hash: KsRE8YxYfAamy8KQbWjEE04hfq5hfQMC2xTIjicbIBs=)
                          4: A9197C02BE4511F0A56D70D9DAE4EC9C.roa (hash: sDj0YyIRtK97M4F56g15Jln7lJ0EnGTXSqsDxsiEbSM=)
                          5: 861C7CAEBE4511F0B75667D9DAE4EC9C.roa (hash: OkqebA0OWr7M0W+78GzAZtR6dGZ8IZSnDyQyYfbN3aQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36593EDAF, serialNumber=FDEA0E5389C99490CAED82B17248011CC332EED9
        Validity
            Not Before: Nov  3 05:14:27 2026 GMT
            Not After : Nov  5 05:14:27 2026 GMT
        Subject: CN=6ae96db4-c56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:f7:ac:c3:e6:65:ff:35:24:fa:0a:1e:0b:
                    1a:e9:07:da:2a:f4:44:aa:80:33:31:0e:80:13:dc:
                    60:5f:f9:b7:f6:57:f3:a9:2e:f9:15:f5:d5:c9:2d:
                    56:4f:b2:40:a0:0f:ec:e7:e6:19:67:fe:47:a2:d7:
                    4c:de:ff:fe:64:25:e6:99:9e:c1:d0:a6:6f:63:1f:
                    30:78:fa:5f:7d:2d:5d:e7:25:6d:b6:8f:98:d6:a5:
                    46:37:99:5d:45:8c:b9:51:67:5e:84:e7:45:f8:94:
                    43:74:5d:ff:3e:2d:11:bd:27:f6:77:16:69:ec:4c:
                    52:12:19:a5:30:0f:c9:40:7c:ea:08:27:84:1c:ba:
                    2a:eb:1f:f3:69:26:c0:3c:28:f6:61:2e:ea:7f:26:
                    8a:6a:17:4a:45:8f:e1:b8:2a:f2:74:f8:93:08:a2:
                    de:2f:b5:84:6f:ae:58:df:e2:32:e9:0f:df:5e:da:
                    04:0c:71:be:6f:75:a7:c2:53:1a:b5:9d:18:eb:09:
                    b0:09:da:77:5e:a3:95:84:71:2c:a0:28:8c:22:40:
                    85:ba:8a:df:d5:af:e8:8a:bb:b2:dc:01:8c:c4:ba:
                    94:9e:e0:dc:8e:87:4b:f3:73:78:f1:f7:fd:0a:88:
                    86:a6:2d:61:0c:84:dd:45:41:ce:7e:5c:eb:e0:df:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:61:94:A5:8B:05:80:AA:5D:D9:C9:25:72:FF:D8:F9:18:77:EB:6E
            X509v3 Authority Key Identifier:
                keyid:FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1b:41:9a:3b:18:16:1c:b7:0a:ad:27:a9:eb:8e:81:13:fd:
         a3:fa:26:62:47:83:bf:1d:8c:9b:20:93:8b:0b:c9:d4:6c:d7:
         31:da:01:9c:cc:b6:9d:fb:72:ac:60:c6:09:5e:49:a9:d3:d3:
         62:6e:9e:db:4f:86:35:43:8e:d2:e4:bf:98:34:cc:ba:66:98:
         7f:5f:a0:54:55:dd:f7:72:dc:f1:43:38:9a:c9:ae:ad:4e:f7:
         da:33:09:1c:e8:a2:87:0c:43:04:bc:42:6b:94:00:01:fc:77:
         79:33:b0:80:ab:f1:f3:b5:cd:10:02:f1:c4:63:96:8b:c8:dc:
         ac:fc:8b:17:a3:89:0e:b9:a6:70:99:e1:37:8d:4a:26:9d:c1:
         54:be:dc:1d:96:bd:5b:79:0b:74:e7:8f:81:ce:3d:77:a1:30:
         2e:91:48:6f:e6:ca:7f:ca:50:d1:ea:a7:33:1a:01:8d:41:fa:
         f2:49:8e:66:b4:ff:9e:a6:0e:9c:ae:6f:ef:34:c7:07:6f:14:
         07:89:5d:87:77:7b:89:f4:bc:c9:48:76:6f:9a:51:af:50:f0:
         9f:e8:3f:91:df:98:96:79:15:29:4f:79:3c:0f:88:3d:18:9b:
         1f:f4:13:02:32:74:3c:fb:29:cd:7e:2f:61:45:e5:6d:3d:ca:
         af:13:b0:af
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTkzRURBRjExMC8GA1UEBRMoRkRFQTBFNTM4OUM5OTQ5MENBRUQ4MkIxNzI0ODAx
MUNDMzMyRUVEOTAeFw0yNjExMDMwNTE0MjdaFw0yNjExMDUwNTE0MjdaMBgxFjAU
BgNVBAMTDTZhZTk2ZGI0LWM1NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6E/esw+Zl/zUk+goeCxrpB9oq9ESqgDMxDoAT3GBf+bf2V/OpLvkV9dXJ
LVZPskCgD+zn5hln/kei10ze//5kJeaZnsHQpm9jHzB4+l99LV3nJW22j5jWpUY3
mV1FjLlRZ16E50X4lEN0Xf8+LRG9J/Z3FmnsTFISGaUwD8lAfOoIJ4QcuirrH/Np
JsA8KPZhLup/JopqF0pFj+G4KvJ0+JMIot4vtYRvrljf4jLpD99e2gQMcb5vdafC
Uxq1nRjrCbAJ2ndeo5WEcSygKIwiQIW6it/Vr+iKu7LcAYzEupSe4NyOh0vzc3jx
9/0KiIamLWEMhN1FQc5+XOvg3xdBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTmGU
pYsFgKpd2cklcv/Y+Rh3624wHwYDVR0jBBgwFoAU/eoOU4nJlJDK7YKxckgBHMMy
7tkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5M0VELzUzMzc1RkIyQkU0NDExRjA4OUVCRUZEMERBRTRFQzlDL19lb09V
NG5KbEpESzdZS3hja2dCSE1NeTd0ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19lb09VNG5KbEpESzdZS3hja2dCSE1NeTd0ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTkzRUQvNTMzNzVGQjJCRTQ0MTFGMDg5RUJFRkQwREFF
NEVDOUMvX2VvT1U0bkpsSkRLN1lLeGNrZ0JITU15N3RrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHG0GaOxgWHLcKrSep646BE/2j+iZi
R4O/HYybIJOLC8nUbNcx2gGczLad+3KsYMYJXkmp09Nibp7bT4Y1Q47S5L+YNMy6
Zph/X6BUVd33ctzxQziaya6tTvfaMwkc6KKHDEMEvEJrlAAB/Hd5M7CAq/Hztc0Q
AvHEY5aLyNys/IsXo4kOuaZwmeE3jUomncFUvtwdlr1beQt054+Bzj13oTAukUhv
5sp/ylDR6qczGgGNQfrySY5mtP+epg6crm/vNMcHbxQHiV2Hd3uJ9LzJSHZvmlGv
UPCf6D+R35iWeRUpT3k8D4g9GJsf9BMCMnQ8+ynNfi9hReVtPcqvE7Cv
-----END CERTIFICATE-----
Generated at Tue Nov 3 23:36:19 2026 by rpki-client