Error: rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/eke20jGhHUpmmiXyLN0QZoIQ8RQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/eke20jGhHUpmmiXyLN0QZoIQ8RQ.mft
File:                     eke20jGhHUpmmiXyLN0QZoIQ8RQ.mft (raw, json)
Hash identifier:          58VbgXd2wTwIZ8pWwxWcSpLRF/o1dY08WUXt+WBa16w=
Subject key identifier:   8D:AA:84:65:11:E5:E6:84:5B:69:67:08:9F:9E:62:EF:20:FF:C1:8E
Authority key identifier: 7A:47:B6:D2:31:A1:1D:4A:66:9A:25:F2:2C:DD:10:66:82:10:F1:14
Certificate issuer:       /CN=F36CE380AF/serialNumber=7A47B6D231A11D4A669A25F22CDD10668210F114
Certificate serial:       09
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eke20jGhHUpmmiXyLN0QZoIQ8RQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/eke20jGhHUpmmiXyLN0QZoIQ8RQ.mft
Manifest number:          08
Signing time:             Wed 04 Nov 2026 06:07:17 +0000
Manifest this update:     Wed 04 Nov 2026 06:07:16 +0000
Manifest next update:     Fri 06 Nov 2026 06:07:16 +0000
Files and hashes:         1: eke20jGhHUpmmiXyLN0QZoIQ8RQ.crl (hash: 2//S1CK3KBIVEglCKdGVv+djdb/aHYqEOga+yAQ+mpg=)
                          2: 72F80446D3D311F18514D7C8CE1D38B0.roa (hash: z4VuUSOw5DF3IwWbNNN/FETbyat+qjdliU84UelZv8M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/eke20jGhHUpmmiXyLN0QZoIQ8RQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/eke20jGhHUpmmiXyLN0QZoIQ8RQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eke20jGhHUpmmiXyLN0QZoIQ8RQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CE380AF, serialNumber=7A47B6D231A11D4A669A25F22CDD10668210F114
        Validity
            Not Before: Nov  4 06:07:16 2026 GMT
            Not After : Nov  6 06:07:16 2026 GMT
        Subject: CN=6aeacb95-9e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:4f:76:3e:d0:67:12:2c:26:90:9c:2d:c7:
                    ce:79:ae:e9:01:a1:19:6e:58:9f:2c:6c:59:fc:ed:
                    63:81:fc:a5:73:47:ab:1a:5d:5a:74:7f:27:cc:6a:
                    a2:9d:fe:9d:eb:44:6d:e2:b5:1b:9a:0e:11:76:80:
                    a3:5f:30:e7:31:34:dc:eb:3d:80:50:52:8e:8c:4b:
                    80:0a:4e:ec:23:ec:49:f5:f5:96:01:8c:cf:a5:a1:
                    ae:a4:5f:17:68:1a:1b:2c:82:b9:53:59:89:ca:87:
                    9a:85:c0:e1:1b:dc:0c:8b:04:03:58:61:68:a0:7a:
                    b5:9f:4b:8a:d9:3e:da:50:20:fa:53:d2:88:cb:6a:
                    db:cd:62:f9:c6:b8:8f:c4:0c:57:f3:bf:c5:78:5c:
                    24:90:5c:4c:d7:87:d5:5d:52:66:d7:e5:18:05:4d:
                    a4:c5:06:0e:fe:a6:55:ce:fa:c8:d1:f0:79:20:79:
                    21:74:e8:5d:09:fc:80:a2:e2:5d:1f:6a:2b:34:21:
                    d8:9f:c4:da:0b:5c:29:d8:5a:23:da:e2:9e:d5:a7:
                    eb:d6:1b:63:f5:68:7c:61:b2:d1:67:42:ad:87:21:
                    b0:18:22:68:77:04:c5:7f:4d:a5:27:c4:9d:e8:c2:
                    37:1d:56:44:e2:9d:43:d1:93:5d:15:54:39:78:14:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AA:84:65:11:E5:E6:84:5B:69:67:08:9F:9E:62:EF:20:FF:C1:8E
            X509v3 Authority Key Identifier:
                keyid:7A:47:B6:D2:31:A1:1D:4A:66:9A:25:F2:2C:DD:10:66:82:10:F1:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/eke20jGhHUpmmiXyLN0QZoIQ8RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eke20jGhHUpmmiXyLN0QZoIQ8RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/eke20jGhHUpmmiXyLN0QZoIQ8RQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:cc:57:58:a5:85:12:f5:9c:3d:a1:dd:30:79:0c:27:ab:8e:
         97:b0:b7:b5:6e:f4:b8:d8:5d:d9:8b:d0:fe:24:2a:40:18:0e:
         7c:1a:18:ab:72:b7:27:85:26:28:d8:7a:ba:10:fb:25:89:05:
         34:72:63:70:e8:ec:49:db:7f:01:8c:52:e4:1b:c5:3c:e2:2e:
         c6:47:d2:9c:34:81:4e:bb:d6:f5:20:69:85:bd:e6:a4:58:04:
         46:a7:fa:7d:60:07:56:93:d2:e1:29:c7:90:0e:0e:0c:2c:c3:
         7e:ae:0e:b0:b4:d8:40:c7:8d:cf:fe:5c:29:17:b9:8b:c2:1f:
         3d:4d:d8:70:ed:df:ff:96:54:8c:78:d7:87:ea:44:e8:5a:5e:
         47:86:8a:6f:49:97:15:b4:22:24:67:bb:be:c8:92:2c:68:94:
         c4:d9:04:b3:e0:27:7a:b0:45:15:db:8d:c3:d5:3f:cb:4f:3b:
         81:89:47:03:39:98:40:23:c8:b9:4b:27:4f:fe:9c:c3:d7:e4:
         d2:9a:27:80:62:c3:63:46:57:2f:e3:46:63:34:85:ec:d1:67:
         32:cc:8d:90:a5:cd:12:8a:d6:a2:79:87:da:1c:1c:5b:6e:eb:
         b3:6e:15:4f:b4:30:1b:4b:e0:46:db:7c:53:11:fe:fb:5b:59:
         13:19:a6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:37:20 2026 by rpki-client