Error: rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
File:                     RtQFVYABqLApuWqxNAbWmh3XQEU.mft (raw, json)
Hash identifier:          8/2cpu1Ubu8/boH8El21fQijnNLcTSERGetJEZhWLSo=
Subject key identifier:   F3:97:1E:22:BA:BE:99:17:6D:53:6A:C1:0C:F5:7E:3E:9F:3A:D0:D4
Authority key identifier: 46:D4:05:55:80:01:A8:B0:29:B9:6A:B1:34:06:D6:9A:1D:D7:40:45
Certificate issuer:       /CN=F3619C8CAF/serialNumber=46D405558001A8B029B96AB13406D69A1DD74045
Certificate serial:       0340
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
Manifest number:          033A
Signing time:             Sat 31 Oct 2026 04:24:58 +0000
Manifest this update:     Sat 31 Oct 2026 04:24:57 +0000
Manifest next update:     Mon 02 Nov 2026 04:24:57 +0000
Files and hashes:         1: RtQFVYABqLApuWqxNAbWmh3XQEU.crl (hash: swwj7dtrxr9e1PX24cb4TvtLPQ8f2UszxdLGjsGefQk=)
                          2: 1B05F788A4FA11F0885D037BDAE4EC9C.roa (hash: GjkulRsKKJbZVrp77ugYgp/kqLitaMudIz+NNcc4dbE=)
                          3: F71D77E2AA8611EF98B0D05E762E951A.roa (hash: Ihj2mACjaGHf96/o4yy3js68n256Vu9f7Bim7nWvWLM=)
                          4: 3EAC507A5FFE11EFA5993885762E951A.roa (hash: 4mY/TWC9DuCZsuGXVqoat7c6bUR73636kXTYSKoNoxk=)
                          5: DE5116B4609011EF8D12C1B3762E951A.roa (hash: 9S7+mdx2DKBgrgKmUfkV+mK4JJ+yxtDU858vKwTfcjs=)
                          6: 647FC9285FFC11EFBB5ADB78762E951A.roa (hash: H2q1fmOzE7jtNl9AE16ng8aqC1lbAw9rIP10pKwdV+Y=)
                          7: 522D5DA65FEA11EFAF87018A762E951A.roa (hash: UJHI6TLE0pysd9O5tp5SxgrLxypzmdtkRQHX43GWISE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 02 Nov 2026 00:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAF, serialNumber=46D405558001A8B029B96AB13406D69A1DD74045
        Validity
            Not Before: Oct 31 04:24:57 2026 GMT
            Not After : Nov  2 04:24:57 2026 GMT
        Subject: CN=6ae56d9a-11a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:c7:82:05:bc:d2:d9:d7:20:2c:99:e5:fe:
                    16:e6:e8:46:b9:8e:b9:88:e5:ac:a0:92:37:1b:48:
                    f6:24:e1:92:ab:9d:e2:01:74:92:b1:fc:78:43:42:
                    a3:9d:92:c2:bb:19:f3:00:89:88:bf:b2:66:48:93:
                    fc:74:a2:21:d1:14:4a:a6:ce:ce:31:d6:73:fe:b9:
                    2e:ee:0b:9a:8c:95:a4:49:af:8c:f5:c6:82:cb:fa:
                    3e:10:2a:07:e2:67:44:73:0d:db:2b:52:05:08:3c:
                    23:c3:32:88:1c:4e:fd:4b:33:bf:63:26:3d:b8:ce:
                    1e:4d:3b:af:2b:44:48:91:52:a0:b3:f5:ed:27:3b:
                    7a:d7:a3:81:13:bb:62:05:78:52:bb:d2:8f:a1:a3:
                    70:46:88:43:9e:26:65:f1:2d:89:d3:d1:e1:6e:0d:
                    6b:53:73:52:c7:4f:77:6f:92:cf:da:8c:39:5d:de:
                    9b:c8:f5:5a:89:15:8c:25:88:56:7f:2d:43:21:87:
                    bf:56:ec:b2:13:9c:ff:48:3d:cf:ee:ff:0f:0d:e6:
                    02:aa:4b:27:a7:56:c8:fc:40:06:ad:4f:6e:9a:96:
                    bf:88:b9:79:dc:d9:21:1a:a7:45:f0:b5:d4:ef:b7:
                    ff:68:de:56:98:7f:28:3d:ad:29:b6:db:40:ec:1c:
                    b2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:97:1E:22:BA:BE:99:17:6D:53:6A:C1:0C:F5:7E:3E:9F:3A:D0:D4
            X509v3 Authority Key Identifier:
                keyid:46:D4:05:55:80:01:A8:B0:29:B9:6A:B1:34:06:D6:9A:1D:D7:40:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:32:d4:08:48:81:ec:a0:46:ab:a4:c8:f9:19:31:f4:6c:13:
         91:c5:93:49:dd:ee:bf:cb:38:9a:9d:46:0d:f6:04:c9:34:35:
         70:1f:7c:e6:31:31:28:34:e5:aa:2a:aa:a8:df:9b:95:ee:ae:
         29:fa:16:fa:19:ef:d3:29:db:a8:cc:7f:4c:ff:4c:0f:4c:6b:
         35:cb:b2:24:e8:19:92:7d:00:91:61:2c:b7:c3:1b:61:67:27:
         36:e0:42:b7:69:03:63:f4:c8:66:2e:10:cb:51:43:5d:4e:8e:
         bc:7e:e2:78:d0:4a:68:33:cd:e6:00:17:66:25:3e:a9:23:35:
         23:0e:60:5e:22:94:aa:aa:c8:eb:e1:8a:df:dc:47:7d:c7:6d:
         4a:9b:f1:73:a7:67:45:af:56:16:f6:87:8b:9f:0f:b2:ee:4e:
         7e:d9:7b:57:24:3a:64:0c:a7:c0:ee:9b:45:39:d8:26:ec:fc:
         a3:92:a9:2f:e4:ec:37:77:29:60:d7:c3:4f:cf:9a:b6:d8:65:
         1e:fd:0b:b3:c7:9a:f1:eb:77:90:e1:f9:96:04:95:22:7e:a4:
         d7:81:68:cc:bd:f0:31:23:6b:cf:5e:5e:0f:1c:e8:60:ec:22:
         75:88:dd:b2:eb:fc:d1:2c:da:05:11:43:05:37:bf:33:94:b4:
         40:7a:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 18:03:25 2026 by rpki-client