Error: rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft
File:                     msAeeNqxc6pXMODHe3RAzBzJgWA.mft (raw, json)
Hash identifier:          M2yj3Zvhtgk19q+TscBx9HjeN3dOAuBLZMi5/m9HBII=
Subject key identifier:   F7:A3:F0:7F:91:82:41:B6:B0:06:DF:79:0A:81:EE:57:60:85:E6:ED
Authority key identifier: 9A:C0:1E:78:DA:B1:73:AA:57:30:E0:C7:7B:74:40:CC:1C:C9:81:60
Certificate issuer:       /CN=F369D7FAAF/serialNumber=9AC01E78DAB173AA5730E0C77B7440CC1CC98160
Certificate serial:       0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/msAeeNqxc6pXMODHe3RAzBzJgWA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft
Manifest number:          0C
Signing time:             Wed 04 Nov 2026 06:05:42 +0000
Manifest this update:     Wed 04 Nov 2026 06:05:41 +0000
Manifest next update:     Fri 06 Nov 2026 06:05:41 +0000
Files and hashes:         1: msAeeNqxc6pXMODHe3RAzBzJgWA.crl (hash: 0l0r5SoKj30O5VNUHgvslpDQr7UtNnJ7f8LZ9GEvXr8=)
                          2: EE394FA2D13511F1A0D33BC1CE1D38B0.roa (hash: nAPdYEo3baU1QOTFpmKcWBXkVW5IKAMofBS8s1gtSs8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/msAeeNqxc6pXMODHe3RAzBzJgWA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D7FAAF, serialNumber=9AC01E78DAB173AA5730E0C77B7440CC1CC98160
        Validity
            Not Before: Nov  4 06:05:41 2026 GMT
            Not After : Nov  6 06:05:41 2026 GMT
        Subject: CN=6aeacb36-933f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:2d:f2:7f:00:62:f2:32:cd:c6:26:f9:49:
                    11:d6:8a:24:5e:be:03:08:7b:1d:40:77:48:cd:e9:
                    9c:30:85:fd:b9:fb:2b:d4:81:30:a3:db:b2:3c:fb:
                    d4:64:3c:3a:0f:d7:cc:4d:2c:12:7e:41:89:eb:5f:
                    34:91:5e:8b:11:f5:a6:b0:3a:d9:bc:9b:16:fb:a9:
                    55:c9:d7:31:57:ef:97:69:36:97:86:18:83:39:84:
                    2d:da:41:ae:3c:11:10:4e:f1:1c:78:c7:97:8e:48:
                    8a:11:f5:b7:72:59:c9:f0:fb:b0:69:d8:8a:4f:14:
                    c4:94:e9:a6:ef:6c:83:c2:b0:bb:f5:24:5a:11:1b:
                    c0:b1:c9:e2:c2:99:b9:18:28:e0:9a:45:b2:72:39:
                    7f:aa:da:ef:7a:ad:4d:21:ad:72:8d:d9:0a:47:7b:
                    42:65:1c:26:c2:23:31:ae:35:f4:3d:90:de:f3:9b:
                    f4:49:2d:7c:32:33:0c:64:d9:c7:da:06:3f:92:03:
                    42:b8:0d:18:7f:d7:c7:b1:b0:b0:d2:c6:20:7e:70:
                    76:dd:3c:8c:62:6e:01:35:cd:77:8c:6e:87:39:ec:
                    d7:fa:13:57:1e:17:be:7d:ca:43:d3:72:fb:f2:44:
                    b4:a4:bf:36:43:22:a2:df:ff:e2:00:55:5b:f0:5c:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A3:F0:7F:91:82:41:B6:B0:06:DF:79:0A:81:EE:57:60:85:E6:ED
            X509v3 Authority Key Identifier:
                keyid:9A:C0:1E:78:DA:B1:73:AA:57:30:E0:C7:7B:74:40:CC:1C:C9:81:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/msAeeNqxc6pXMODHe3RAzBzJgWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:61:2f:3d:44:b6:07:6f:29:85:69:4b:1c:6c:81:48:d8:14:
         0f:95:63:f2:25:fa:fc:4f:12:38:e6:3e:99:28:73:48:e1:c7:
         e0:f7:f9:6e:87:b6:8b:4e:b9:de:e7:ad:02:b9:28:81:1a:55:
         d9:63:5a:15:82:a8:7b:19:c0:df:3b:ee:e6:19:a6:b5:a3:8d:
         34:12:ec:9b:5e:20:de:43:8a:76:76:5f:aa:52:ff:1f:16:ee:
         2e:00:d5:71:c4:d2:51:b3:6f:94:81:e7:3a:a9:4e:dc:a1:11:
         4a:60:4e:43:a8:fb:0f:61:89:6e:08:44:2a:f1:35:09:6e:ea:
         89:4d:8d:21:55:74:63:4a:c8:23:71:50:6e:93:78:dc:81:07:
         5f:ef:91:d4:2a:ca:5e:19:cc:af:49:01:d8:ee:12:7b:89:62:
         4b:a2:f1:95:1c:f3:42:88:6e:5c:9f:1b:fb:9e:0f:3c:14:55:
         68:69:d8:b9:eb:da:f7:8a:c5:76:09:ec:7e:04:4a:83:0a:72:
         7a:74:92:d7:20:29:3d:0b:54:16:9d:3c:fd:82:13:a5:24:c6:
         5f:05:07:c4:b6:0e:ce:f5:ad:7c:48:1d:75:69:bb:0c:2a:4a:
         6b:62:30:c6:43:5d:c8:d2:fc:cf:b5:95:ad:36:44:da:40:6d:
         32:79:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:36:40 2026 by rpki-client