Error: rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
File:                     qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft (raw, json)
Hash identifier:          UUu9lrvRvniXFzlLCWty0neJwqLyqIp0wSiz2shSnEM=
Subject key identifier:   B8:6E:A1:D1:CB:D1:E4:55:EB:D0:29:7B:6C:E4:07:F0:34:1E:2E:1A
Authority key identifier: A9:CB:76:AF:6B:C2:B4:86:D5:81:AF:29:A1:9E:59:5D:9C:04:CD:04
Certificate issuer:       /CN=F363CC24AR/serialNumber=A9CB76AF6BC2B486D581AF29A19E595D9C04CD04
Certificate serial:       05C9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
Manifest number:          05C5
Signing time:             Mon 26 Oct 2026 03:05:18 +0000
Manifest this update:     Mon 26 Oct 2026 03:05:17 +0000
Manifest next update:     Wed 28 Oct 2026 03:05:17 +0000
Files and hashes:         1: qct2r2vCtIbVga8poZ5ZXZwEzQQ.crl (hash: JDMSpWymHAPW+WiKPM9Oe0GUAOWTue6q8cUAzB2LK40=)
                          2: 55CCADD2846D11F19B6D63E3CE1D38B0.roa (hash: Co4M2YUZIIMwZ/Mjl/UOCazGGG1y5Ehn76wqFaDQ03I=)
                          3: B7F1EC52846D11F1B4DC25E7CE1D38B0.roa (hash: pUoFImh8Ep/RuhTM4liWeLDhNF5TjcefT41B9dSq2Yo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
                          rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AR, serialNumber=A9CB76AF6BC2B486D581AF29A19E595D9C04CD04
        Validity
            Not Before: Oct 26 03:05:17 2026 GMT
            Not After : Oct 28 03:05:17 2026 GMT
        Subject: CN=6adec36e-a34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:eb:d1:81:18:dc:99:da:87:ff:bb:79:c3:
                    6e:53:6a:75:3b:2b:43:d9:2e:ab:e9:16:ba:78:e1:
                    78:c3:83:38:e5:60:50:5b:15:88:76:3e:65:89:a9:
                    53:62:6f:96:12:31:a7:05:8a:61:13:49:18:eb:86:
                    6e:0c:ae:fe:d7:ba:c5:ef:07:e4:e1:bc:b1:43:6f:
                    36:7c:85:c6:e3:94:76:21:ce:e2:a5:b8:6a:66:25:
                    90:b7:84:fe:30:cf:36:e3:85:35:14:b0:8c:54:47:
                    9a:87:7f:c6:2e:83:ad:a8:04:dc:59:df:13:e6:15:
                    59:b1:71:64:bd:4f:7b:d6:05:4b:32:7a:90:50:3f:
                    cd:10:63:0f:fa:04:d3:5e:f3:14:f1:60:c2:35:22:
                    d8:8a:64:c7:a2:ac:3e:4e:e7:0f:15:9a:73:a5:1c:
                    7f:ec:9d:95:2d:f5:5c:52:ab:47:ee:a8:d5:22:73:
                    f9:15:28:c6:04:74:dc:3a:b5:e9:4c:e3:6d:37:88:
                    f4:1c:4e:3a:41:0b:c9:c2:68:e9:b4:c7:f7:3b:99:
                    87:88:87:4b:bb:a0:5a:ad:d3:49:34:71:2f:c7:c5:
                    74:62:a4:2c:89:1a:af:35:2f:46:d2:cc:87:54:6f:
                    4c:48:37:0c:2f:99:96:d1:39:0d:be:8c:9f:ee:99:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6E:A1:D1:CB:D1:E4:55:EB:D0:29:7B:6C:E4:07:F0:34:1E:2E:1A
            X509v3 Authority Key Identifier:
                keyid:A9:CB:76:AF:6B:C2:B4:86:D5:81:AF:29:A1:9E:59:5D:9C:04:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ef:19:04:1e:a0:08:b9:6d:92:bd:f5:63:77:b1:e5:b8:dc:
         e1:76:26:be:0b:ad:7b:9d:12:59:9b:cf:44:58:54:59:47:6a:
         e6:2d:77:53:a5:e2:f7:9d:f5:12:91:56:9c:f6:e4:b9:2c:d4:
         c2:7f:56:7c:28:26:a0:91:d7:21:58:50:75:cf:ca:d5:d0:66:
         fb:0d:c1:1c:31:44:28:8c:8c:8e:d0:27:5a:1d:71:ea:bd:41:
         0c:44:2d:93:f3:c1:b3:c6:bd:76:9c:d8:fa:8f:25:8d:b5:4e:
         d5:d6:ca:71:56:c5:e0:95:1a:47:ea:b1:16:80:a9:17:6f:de:
         1c:d1:94:0f:af:a1:c5:a8:07:98:57:bd:64:0c:9f:f6:2f:ff:
         ef:d2:f1:6c:a8:a3:96:a4:d0:27:65:22:31:a3:55:d2:48:46:
         39:cc:1d:03:13:a2:c3:af:b4:81:09:41:5c:9b:1c:81:13:da:
         af:be:43:da:92:66:56:d4:f8:2e:60:68:49:45:f5:fa:42:b3:
         e1:9b:8e:a7:ce:5e:1a:06:b6:f5:65:ae:a1:f7:f0:c4:f4:28:
         51:9a:32:1d:4d:0b:38:3e:d9:8a:40:32:2c:02:8c:39:6e:36:
         e0:72:70:0c:89:24:5c:86:be:f9:21:c7:79:72:ff:49:20:dc:
         61:4c:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 03:00:10 2026 by rpki-client