Error: rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft
File:                     EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft (raw, json)
Hash identifier:          3rDGSf+FETF2cPxbdQ4o6gL8Bd1chQhsIr0H7Ta2OIs=
Subject key identifier:   D4:F2:19:1B:C9:88:F8:5A:01:CE:F3:4A:AB:0D:9E:25:45:37:DB:F1
Authority key identifier: 10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9
Certificate issuer:       /CN=F36232DEAF/serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
Certificate serial:       0549
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft
Manifest number:          0541
Signing time:             Sun 25 Oct 2026 03:22:08 +0000
Manifest this update:     Sun 25 Oct 2026 03:22:07 +0000
Manifest next update:     Tue 27 Oct 2026 03:22:07 +0000
Files and hashes:         1: EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl (hash: zLFMLMiseDB9yg+NJpL9h20cnuNnyV/puvG936ZUbm8=)
                          2: 86281B2AB36F11F1B87A2DEDCE1D38B0.roa (hash: cbXPI0FUv0xCXJS63OK4UgyAStuoTapolhCTnDvwKAM=)
                          3: 69B0889231CA11F09BDEC58DDAE4EC9C.roa (hash: 77yOBtNOkAqIpYkHbVXR0+hEPUSWHxx/HR9IjT63+54=)
                          4: 5B69B990B47B11F1A514E7EACE1D38B0.roa (hash: jyhWV3yVnIyiih29CT+rQi3HJtjz49jmrMNSTlCIlBg=)
                          5: 79332DB2B47111F1A0C7E5AACE1D38B0.roa (hash: V+qF8Bs+f3rYvFL4MowkNDzEgkH+q/QCdxPuGsficzw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36232DEAF, serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
        Validity
            Not Before: Oct 25 03:22:07 2026 GMT
            Not After : Oct 27 03:22:07 2026 GMT
        Subject: CN=6add75e0-2b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:dd:3a:ec:cf:9b:74:06:54:17:29:30:8c:
                    67:9e:e4:72:8a:de:5b:45:90:fe:1d:e1:4a:a7:8e:
                    3d:7b:59:91:7b:04:54:5d:fc:60:b2:5c:ab:f4:dc:
                    2b:c1:ad:ee:35:a0:a6:24:0c:7d:58:44:5f:27:48:
                    01:17:66:0c:13:1c:5c:8b:08:fd:65:d0:14:46:87:
                    de:19:58:f0:dd:1f:f9:a0:c7:00:00:49:54:bf:0f:
                    cc:76:28:04:af:5f:6d:9b:71:f4:3b:3d:4e:97:08:
                    80:75:75:03:11:24:4f:11:ab:2b:03:3c:b8:36:a9:
                    d0:d2:1b:3c:66:de:e8:9d:2a:34:03:3d:25:2b:71:
                    8a:73:48:e4:e4:66:15:13:c6:dc:81:2f:e9:2f:95:
                    64:75:d6:a0:56:0a:bf:fe:3a:7d:1a:90:99:1b:3d:
                    20:e6:d0:64:60:e0:1e:f1:a8:9b:95:39:df:f8:df:
                    d0:26:72:b5:b0:6b:ed:58:7f:c2:64:bf:dc:65:bd:
                    f1:28:0b:02:36:82:a6:bf:5b:a0:08:0b:f5:51:30:
                    2d:46:0a:00:76:af:d9:61:45:0a:53:0a:10:22:a7:
                    56:59:8f:ac:7e:01:8f:f7:f4:c0:a4:f7:17:44:66:
                    4e:18:8f:07:02:7d:f2:d1:c6:4f:83:80:91:24:c5:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F2:19:1B:C9:88:F8:5A:01:CE:F3:4A:AB:0D:9E:25:45:37:DB:F1
            X509v3 Authority Key Identifier:
                keyid:10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4f:23:21:f0:02:b5:36:d6:02:c2:0f:db:d1:09:f9:92:1f:
         97:fd:d6:50:7f:f7:e5:8f:59:d5:05:e7:f8:fe:e3:28:83:b5:
         69:3c:15:62:79:b2:7a:13:4d:f9:51:ee:1c:b8:b5:dd:8d:c8:
         ee:94:d8:7e:8b:ef:78:b4:94:7d:4c:c7:bc:0b:21:03:9f:6e:
         1b:bd:89:3c:b6:c6:c6:92:c8:b7:03:8f:df:14:54:6e:07:87:
         1e:87:39:66:16:d6:91:d9:48:4c:07:14:93:91:63:4d:68:6e:
         62:e5:70:65:54:4f:9a:b6:29:5a:6e:c9:90:10:b0:61:cb:88:
         4a:69:a8:23:39:06:b8:ef:cd:ec:fe:94:5e:c8:c4:e9:8b:53:
         9a:65:23:33:d5:92:66:d8:34:b1:fd:e0:79:fe:72:a3:2c:da:
         cc:54:15:0e:47:33:fb:24:18:60:0c:8b:9a:af:72:9e:c4:2d:
         b8:c5:03:57:d2:75:4e:58:65:e8:b6:e1:71:00:84:c8:9d:43:
         a9:d6:2b:9f:9c:7f:ad:74:ce:61:06:81:96:36:74:8d:4d:6e:
         fb:70:16:08:d8:d3:a6:41:90:d5:7f:a4:ff:77:ee:db:57:da:
         fd:6d:13:d9:2a:a2:8f:7c:16:5b:2c:79:7d:33:aa:0d:f1:c1:
         8b:4d:a6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 10:41:59 2026 by rpki-client