Error: rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.mft
File:                     2cxFzcT8X4IbC1cESEGQPpzNC6A.mft (raw, json)
Hash identifier:          A468R97fvJSawRQDVoO59Z78ErL/YvTZl4SUUkX1GgE=
Subject key identifier:   E2:55:69:DC:CA:04:90:DC:95:DD:D6:24:C8:87:21:A6:8A:63:7A:CE
Authority key identifier: D9:CC:45:CD:C4:FC:5F:82:1B:0B:57:04:48:41:90:3E:9C:CD:0B:A0
Certificate issuer:       /CN=F36D6F5DAF/serialNumber=D9CC45CDC4FC5F821B0B57044841903E9CCD0BA0
Certificate serial:       09
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2cxFzcT8X4IbC1cESEGQPpzNC6A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.mft
Manifest number:          08
Signing time:             Wed 04 Nov 2026 06:06:53 +0000
Manifest this update:     Wed 04 Nov 2026 06:06:53 +0000
Manifest next update:     Fri 06 Nov 2026 06:06:53 +0000
Files and hashes:         1: 2cxFzcT8X4IbC1cESEGQPpzNC6A.crl (hash: Y+c9Z7O2mkkZDD+4MBZcRIIX+yRR8TFTNuDjz1DkGZU=)
                          2: E2B930CCD3A411F1A36E30A0CE1D38B0.roa (hash: xjZeLSc3uisxg+D8uQ15NcqO1rTsygCsEgtwv1cTigg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2cxFzcT8X4IbC1cESEGQPpzNC6A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D6F5DAF, serialNumber=D9CC45CDC4FC5F821B0B57044841903E9CCD0BA0
        Validity
            Not Before: Nov  4 06:06:53 2026 GMT
            Not After : Nov  6 06:06:53 2026 GMT
        Subject: CN=6aeacb7d-b9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b4:b7:e3:b5:ef:ab:59:9f:71:3d:71:6b:7e:
                    b9:58:b0:71:1f:71:0d:e0:4e:59:dc:0f:e2:33:d7:
                    5c:f3:ed:4c:3b:83:9a:a5:bb:c3:99:40:0b:44:b0:
                    ba:1d:4f:e6:41:1e:83:87:62:97:3e:12:51:2d:98:
                    bd:96:2b:bc:b7:21:1a:53:d5:68:0a:d4:1c:b0:f2:
                    6a:e8:d3:42:ec:05:1e:5d:ea:6f:d7:cd:63:f4:c7:
                    b2:5a:4c:d2:61:36:ec:be:b1:4f:83:bf:04:a2:79:
                    93:0d:d6:c3:23:6e:f4:da:65:b4:74:a7:ca:5b:07:
                    ad:d2:94:3c:88:0e:85:cd:ac:85:74:7b:c6:a5:0f:
                    15:50:cf:ba:2a:9b:ca:f1:73:ff:aa:9d:92:6b:43:
                    ee:49:7e:e7:52:c3:3e:36:8c:51:64:8a:c5:8a:1a:
                    68:e5:a3:f0:ff:6c:38:d4:ac:df:82:29:01:28:ad:
                    a1:cd:5b:7a:0a:26:6f:0d:2b:bf:2d:f8:b0:f8:ef:
                    80:37:e9:74:fb:53:ef:13:9b:db:83:01:f5:a3:d2:
                    68:aa:b7:4b:f4:81:66:05:b4:48:cc:a2:ac:1f:58:
                    40:5a:16:75:98:b6:c9:e7:1b:33:d6:49:f3:7d:bd:
                    f3:41:e9:ba:62:29:b5:b8:02:10:50:54:ec:05:b8:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:55:69:DC:CA:04:90:DC:95:DD:D6:24:C8:87:21:A6:8A:63:7A:CE
            X509v3 Authority Key Identifier:
                keyid:D9:CC:45:CD:C4:FC:5F:82:1B:0B:57:04:48:41:90:3E:9C:CD:0B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2cxFzcT8X4IbC1cESEGQPpzNC6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:1c:db:33:eb:02:e2:d9:1b:1b:a0:56:43:60:9d:e6:57:
         a0:e2:f0:0e:01:32:be:d3:8e:7d:fc:4a:43:6e:a6:80:55:f7:
         a7:12:92:dd:02:f4:b3:9f:7d:8c:f7:e6:1d:d7:c9:78:6c:5c:
         e9:ae:7e:16:c3:11:c5:0e:0c:f8:bd:62:84:e4:98:4c:74:a6:
         fe:12:32:67:79:36:dc:38:92:94:d3:77:1b:15:d4:7e:27:f8:
         39:94:b0:88:3a:ce:e4:e4:22:c2:28:67:13:89:09:fe:78:eb:
         7a:e5:0b:25:f9:0a:39:8f:4e:c6:56:c5:3f:e9:d6:1d:63:af:
         0a:cf:10:dc:13:c5:57:8a:d3:e8:86:13:9a:79:27:b6:3b:18:
         9a:9c:7c:5e:62:72:4b:26:dd:85:bc:2b:18:cb:f6:3b:17:37:
         bf:8d:27:80:cc:05:62:b4:0f:f3:6a:58:08:33:7d:4e:71:22:
         93:4a:78:86:ca:37:07:f7:9e:27:fa:ed:08:87:e0:ad:85:08:
         a9:13:fc:39:75:2e:ea:2b:5c:2d:85:3c:d8:b4:d3:ed:36:7e:
         da:1f:80:92:c4:20:8a:ba:74:24:af:56:57:85:8c:c3:64:1f:
         e6:36:3b:02:6e:3d:a7:03:f5:c7:f3:38:af:5e:b2:a8:fc:77:
         3d:27:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:29:29 2026 by rpki-client