Error: rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
File:                     74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft (raw, json)
Hash identifier:          pcKTiXW/ngvHikzAF3pikwLCLL4LkoVCBQsB2LO32q0=
Subject key identifier:   6A:37:AD:8E:2E:20:41:0C:05:83:EA:00:2E:32:69:03:B0:9C:79:35
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Certificate issuer:       /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial:       077C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
Manifest number:          076C
Signing time:             Wed 21 Oct 2026 02:28:28 +0000
Manifest this update:     Wed 21 Oct 2026 02:28:27 +0000
Manifest next update:     Fri 23 Oct 2026 02:28:27 +0000
Files and hashes:         1: 74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl (hash: pIk9a0lPsNsL9GX2zJbgQsKZBWOAjGr2XgdBMhfqL7E=)
                          2: 945E7DD6C09411EEB7EE3CB6775412E6.roa (hash: tYOnT9BqjQytDTUPG0XkVhwFzA0iw870t7nSn78qeKY=)
                          3: FCC2B53CC09311EE973207B5775412E6.roa (hash: nXq9HLYp0GlNmQIEUdb1IZ99wB3H3x5IMG8Jb1p7VY4=)
                          4: 8569FFFEC09311EE82CC19B4775412E6.roa (hash: qk3Riga7xUPf3FLu17cWPMbk3RmFvo1KiRk9xRM0fy8=)
                          5: 53A66100C09411EEA90F91B5775412E6.roa (hash: +3UIXUyKPa3bDPDxQDj5kfU3yXkutIrwCuUhyp487Lg=)
                          6: D675B9C4C09311EE81BFE4B4775412E6.roa (hash: yeVSsCWEbMjwZK7TCJavELf3uC42giGMll3LnNn7b1U=)
                          7: 3029805EC09411EE8A964BB5775412E6.roa (hash: 1o3m2JRCddBtFM+D9ve2QUFy2WmECuUP1FMBaEt3CSw=)
                          8: A7408026C09311EE8AB05AB4775412E6.roa (hash: kQaIIUytQg6HwRLvbfsqiwa0mQhtFpbPcLNYzRGCaPQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
                          rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Oct 2026 02:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636185AF, serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
        Validity
            Not Before: Oct 21 02:28:27 2026 GMT
            Not After : Oct 23 02:28:27 2026 GMT
        Subject: CN=6ad8234c-ed70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:97:56:e8:92:4e:be:72:7d:10:b3:b2:d3:
                    ae:8e:6d:98:63:77:e9:10:86:ca:1a:4a:c1:02:0b:
                    11:33:5f:0d:ba:f4:92:d5:e2:11:52:a4:34:2d:c7:
                    39:f8:cd:9d:4e:b3:20:ea:3f:ce:8c:1f:ea:b0:5b:
                    5f:4f:6f:78:9a:5a:67:b3:67:19:55:9e:98:29:91:
                    76:99:87:70:5d:94:fd:f6:04:4d:96:ad:69:e9:44:
                    26:02:67:d4:e0:30:96:be:48:ce:e6:bf:14:4e:12:
                    b7:74:c7:bf:7c:c6:4d:f4:aa:bf:44:99:ea:cc:f0:
                    cb:a0:11:19:ae:5c:a0:61:b5:3b:3f:48:49:a8:58:
                    19:a0:d3:1c:e6:78:01:be:76:e1:8e:f3:0b:ec:7c:
                    f0:29:58:f5:62:3b:ce:e7:ab:70:fa:66:eb:1c:e4:
                    6a:d2:b1:5f:af:f9:4e:3d:c8:2d:44:df:6d:d2:8c:
                    1d:b5:16:22:1d:6f:c0:af:3f:86:04:9e:04:44:5e:
                    27:d3:88:3e:59:36:40:b9:29:20:ca:25:ed:31:06:
                    37:10:39:d0:20:44:3c:5f:1a:1f:0f:b8:44:ac:f6:
                    08:ae:2e:89:99:c8:a5:a9:91:35:c9:a1:e4:fc:27:
                    8e:a3:3c:fa:23:69:91:00:11:a1:4f:98:a6:78:f7:
                    c1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:AD:8E:2E:20:41:0C:05:83:EA:00:2E:32:69:03:B0:9C:79:35
            X509v3 Authority Key Identifier:
                keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:53:52:6b:9c:79:27:a2:d9:5b:22:d2:24:b0:d3:55:4f:2c:
         0d:b9:f6:e8:33:11:4c:4e:10:b2:c5:d8:30:55:a1:5d:2a:8f:
         49:87:b6:d5:f5:72:ca:1e:5e:04:a0:35:0f:e8:bd:3a:53:57:
         59:1e:ed:37:34:1f:df:fc:39:be:9b:14:36:40:5f:fb:d2:7e:
         a2:bc:7c:9b:90:0b:9f:37:cd:8a:db:77:54:d8:a5:51:89:19:
         60:26:21:ec:7d:12:49:19:0a:39:db:93:ee:7c:8c:7e:dc:09:
         55:fb:d6:41:4a:23:bd:65:54:37:be:46:55:35:48:df:3d:56:
         cb:d2:ce:22:d2:2d:50:ec:11:10:dd:91:b5:d0:b7:b7:a7:d8:
         b2:95:3a:44:a5:2a:00:e9:6e:70:5e:ce:b0:2f:a0:23:3e:40:
         59:78:29:09:28:74:f1:7c:aa:2b:31:30:92:a5:e9:aa:67:15:
         64:23:e3:1d:5f:16:8e:65:a4:58:21:d1:95:5b:ab:73:7e:84:
         90:0e:d2:f3:19:a4:f9:bf:d6:28:bb:fe:f8:cb:78:9b:77:4b:
         81:dd:a1:d5:76:b4:af:79:a7:ef:a9:69:cd:46:4a:84:87:4d:
         b1:ba:2c:1d:19:83:6b:4e:3d:fb:c7:2e:bf:4e:0f:82:7c:7c:
         35:18:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:07:29 2026 by rpki-client