Error: rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
File:                     pz69jeko0iBEFPgOnBKclZ18RIk.mft (raw, json)
Hash identifier:          1T9bEmC7QycqMo5+8XbXM5BG/4LN1/Fa9KnYvkW0BbU=
Subject key identifier:   B4:81:8C:25:41:3C:F1:48:1C:8F:B0:6C:C7:B5:BF:B4:B9:DD:8F:DA
Authority key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
Certificate issuer:       /CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Certificate serial:       0E0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
Manifest number:          0E0B
Signing time:             Wed 04 Nov 2026 01:07:29 +0000
Manifest this update:     Wed 04 Nov 2026 01:07:28 +0000
Manifest next update:     Fri 06 Nov 2026 01:07:28 +0000
Files and hashes:         1: pz69jeko0iBEFPgOnBKclZ18RIk.crl (hash: qR5D8q2e8ja0hSh8QDvk3gdHGycp5TBNTlu0Okh8VIo=)
                          2: A5F505EE310A11E89814DE46F8AEA228.roa (hash: G7wALW0FIkxQXpAJOH3ldp5an+aZ2+T0e/6OMG97saU=)
                          3: E7F9C2D60E4C11E795956341F8AEA228.roa (hash: emeNnLebc/Q9zvHY298LJgCEJ9keSysC0t/xMmR8occ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 01:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3597 (0xe0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F191AF, serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
        Validity
            Not Before: Nov  4 01:07:28 2026 GMT
            Not After : Nov  6 01:07:28 2026 GMT
        Subject: CN=6aea8551-ebd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:df:b1:c0:7e:a9:1b:19:ca:dc:73:2d:9a:
                    0b:16:56:7f:15:97:42:5b:1f:6e:78:2e:9b:15:36:
                    ca:cd:ff:40:80:bc:b7:68:c5:68:c1:3f:8b:b7:4e:
                    e1:51:49:06:f5:d8:0b:77:95:3e:43:ba:5c:4f:48:
                    ea:0a:65:e6:5d:6c:bb:7d:26:a9:eb:63:ee:af:22:
                    f4:92:c6:fb:12:e3:c7:82:bc:0b:16:23:10:48:87:
                    44:17:ae:11:66:d9:1d:34:f1:52:9f:5e:39:2d:34:
                    67:54:8f:ef:1b:49:00:13:2c:20:bc:15:60:e2:68:
                    1f:61:c2:15:d5:f1:52:ca:73:c6:8a:fe:52:ad:3c:
                    15:0c:9a:91:b0:fa:f5:65:b5:da:03:be:eb:1b:bb:
                    4e:72:19:b9:a1:d1:54:d5:a3:c3:79:c1:05:43:fb:
                    39:10:3e:38:6c:a7:2c:22:7c:b9:c8:17:1d:ba:ef:
                    f8:ad:10:25:e5:c6:a2:73:5c:d3:fa:4e:30:54:d6:
                    8e:81:ee:99:df:fb:85:dd:87:37:dc:c3:0e:77:da:
                    8e:91:59:2e:2a:55:27:25:14:45:62:79:27:74:4b:
                    91:3e:ed:b1:d1:48:fe:70:97:81:34:89:34:24:a3:
                    cb:9b:5f:67:32:65:17:b6:1d:8f:0f:38:b5:45:92:
                    f3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:81:8C:25:41:3C:F1:48:1C:8F:B0:6C:C7:B5:BF:B4:B9:DD:8F:DA
            X509v3 Authority Key Identifier:
                keyid:A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:73:8f:30:7b:56:d1:95:8b:ef:d9:ae:28:b3:9d:c3:ec:ad:
         75:51:a1:22:ab:41:16:a7:b6:70:e6:ef:cd:01:27:b6:53:3c:
         ab:ce:0c:80:2f:1e:7c:91:13:da:39:7c:33:28:f3:05:29:6b:
         06:fb:3c:79:05:94:09:83:34:14:78:64:03:b1:20:51:0f:ac:
         00:11:bb:4e:e8:52:24:04:d3:37:5f:31:5c:d2:9c:00:a6:c3:
         7b:15:b0:96:37:8b:3f:c6:3a:09:10:6c:2e:45:b0:7a:27:53:
         b5:29:eb:09:a4:59:df:08:3d:3f:50:36:77:ae:54:b9:12:28:
         55:d5:51:55:f3:4f:63:bc:f5:10:3e:4c:b7:52:19:e9:f0:ca:
         01:a6:3c:54:10:07:99:df:89:9c:d0:9b:a5:79:9d:c8:53:d6:
         11:65:c4:bd:6f:3e:fb:33:c7:65:47:76:ca:27:40:28:99:65:
         d6:e9:77:72:cf:64:2a:b1:cb:a9:36:2e:0b:25:10:36:08:29:
         8c:5f:ef:31:70:b7:75:56:71:7d:12:76:86:ce:5b:9d:14:d2:
         38:f4:e8:a1:c4:74:31:70:cd:77:ff:69:c8:49:ad:8b:9a:14:
         e0:8e:24:ff:5a:8e:a1:86:15:0d:53:13:5b:40:7e:cb:52:68:
         3a:ed:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:39:21 2026 by rpki-client