Error: rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft
File:                     Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft (raw, json)
Hash identifier:          a57dqM56i7Pu84IgUzPpqeLKd7/EsYNcgP+dte6TEgc=
Subject key identifier:   7E:49:7C:9C:38:F5:71:74:57:5F:E9:41:6E:69:7D:99:59:7D:20:55
Authority key identifier: 63:A0:46:5E:1A:B1:8B:AA:15:DE:07:F6:27:D9:F8:5C:C2:0C:94:2E
Certificate issuer:       /CN=F3627134AF/serialNumber=63A0465E1AB18BAA15DE07F627D9F85CC20C942E
Certificate serial:       F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft
Manifest number:          EE
Signing time:             Sun 25 Oct 2026 05:29:46 +0000
Manifest this update:     Sun 25 Oct 2026 05:29:45 +0000
Manifest next update:     Tue 27 Oct 2026 05:29:45 +0000
Files and hashes:         1: Y6BGXhqxi6oV3gf2J9n4XMIMlC4.crl (hash: vAmCMMlkBdnyXM06+u3G04NGh2iVNrk4oZ1dxmUZjMI=)
                          2: 983C4B5A1FB411F1812591A5DAE4EC9C.roa (hash: KTS5NXcJqrcHx2Os0cQ+8xYZ5R43eh886qLWcXd28MU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627134AF, serialNumber=63A0465E1AB18BAA15DE07F627D9F85CC20C942E
        Validity
            Not Before: Oct 25 05:29:45 2026 GMT
            Not After : Oct 27 05:29:45 2026 GMT
        Subject: CN=6add93c9-9202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:73:12:39:23:98:89:0c:fb:2c:53:20:67:
                    f7:33:fa:d6:72:de:6f:09:da:96:ab:10:7a:25:54:
                    75:74:2a:8f:42:8f:76:62:ca:24:23:13:cb:ec:8d:
                    69:da:e6:41:02:8c:df:0b:e3:b1:f8:56:15:d4:17:
                    85:d3:3b:69:37:05:6a:18:f9:ba:94:50:72:f8:b1:
                    a8:f2:4d:78:86:4e:b5:11:46:7f:cf:01:03:19:6e:
                    69:a2:c1:01:ee:8c:67:8f:22:c6:43:c7:a7:a2:87:
                    c3:84:26:26:5a:59:40:36:d7:51:63:b2:ea:61:11:
                    90:ea:a9:ac:04:cc:27:47:b8:23:31:7a:e9:ab:2d:
                    f5:8b:c3:e6:e8:99:52:11:59:f3:0b:8e:ed:f1:c9:
                    d3:ed:fa:32:3c:2a:16:c8:da:95:17:5e:65:e1:cc:
                    9e:eb:a6:c4:ae:07:42:83:4e:fc:d9:5c:bd:3d:a5:
                    9b:03:79:11:7d:14:a0:60:e6:43:b9:df:5d:e0:92:
                    79:0c:92:50:4d:87:8e:d4:de:36:20:64:5a:05:35:
                    29:1c:d8:9e:64:2c:2d:bf:09:53:f3:e8:0a:78:11:
                    91:50:79:42:d4:ec:0e:b4:ba:77:d8:10:3b:ce:bf:
                    3f:11:01:8a:c6:a4:f5:cd:23:67:76:5b:11:b3:22:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:49:7C:9C:38:F5:71:74:57:5F:E9:41:6E:69:7D:99:59:7D:20:55
            X509v3 Authority Key Identifier:
                keyid:63:A0:46:5E:1A:B1:8B:AA:15:DE:07:F6:27:D9:F8:5C:C2:0C:94:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a7:83:53:2f:2c:6c:4b:ad:86:77:fa:38:84:6a:6f:3a:d7:
         7b:ba:10:e7:fd:c0:ab:fc:ca:27:be:8e:ca:90:1d:cc:6e:a4:
         56:17:b9:57:30:d0:41:eb:a9:0b:eb:e5:30:42:bb:2e:c5:4e:
         65:c3:41:35:29:fe:62:98:21:46:d6:7c:da:85:b4:18:88:6f:
         24:c6:f1:b0:22:58:a7:71:ee:61:d2:0f:10:06:69:ed:63:2c:
         4b:1d:1e:6a:48:7f:97:7e:90:08:c3:7e:ed:b0:8f:c1:da:2c:
         b4:1e:53:44:c4:7b:5f:eb:04:3d:ba:f2:fe:42:94:19:40:e9:
         4b:50:b5:61:0b:11:0e:4d:98:51:6e:46:23:16:33:02:8c:64:
         84:10:fb:58:0f:ec:70:69:f9:49:4d:d4:9e:44:cb:63:48:1c:
         36:51:ee:07:d7:6c:b1:f7:06:e3:8c:0d:20:61:64:b7:30:0b:
         81:23:04:ba:33:8b:9b:da:aa:2e:b9:bb:1c:39:6b:db:83:6d:
         ce:cf:80:92:4c:0a:e2:a9:69:e7:a2:ef:11:ed:2e:51:c5:78:
         24:e0:81:b1:83:6f:79:43:93:48:9a:76:77:32:0a:e2:be:97:
         68:51:68:f1:24:c3:72:87:be:ab:5a:04:ba:25:10:12:94:6a:
         aa:93:c6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:35:33 2026 by rpki-client