Error: rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
File:                     gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft (raw, json)
Hash identifier:          ai4DndfZDL7bBTvCWEfSri+GD7ROaWva7YRo62Vv8vY=
Subject key identifier:   79:6A:F4:C6:05:27:CC:C1:BB:04:10:58:3D:8C:66:83:1F:15:9B:4A
Authority key identifier: 80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Certificate issuer:       /CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Certificate serial:       05CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
Manifest number:          05C6
Signing time:             Mon 26 Oct 2026 03:05:34 +0000
Manifest this update:     Mon 26 Oct 2026 03:05:33 +0000
Manifest next update:     Wed 28 Oct 2026 03:05:33 +0000
Files and hashes:         1: gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl (hash: Nubi2hIsIbV9O2v+c6iOyEQy7E8l+ezmwjvkQNf+hDM=)
                          2: 4BA72CDE8D8611F188BA33FFCE1D38B0.roa (hash: cw9g2s04/COrl+LRO4OYoMGslSquNMRf6PN6a84xlKA=)
                          3: FEC946868D8511F180501CFFCE1D38B0.roa (hash: CWipig5AzHYUxKIbL/YPjyYHhWXTpViUaZtjKOq5MX4=)
                          4: 42D1AB66708F11F19031F516CF1D38B0.roa (hash: Zb1p98m0ViAkNrzIFyuvBX8Z2Ph7xSavwuUeOgVqSLg=)
                          5: 841819848D8611F1978B1301CF1D38B0.roa (hash: TNRh/dYQgKFiO+EhvFiULYhPkysHWF/ny2EXt6klxvI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486 (0x5ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36406B8AF, serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
        Validity
            Not Before: Oct 26 03:05:33 2026 GMT
            Not After : Oct 28 03:05:33 2026 GMT
        Subject: CN=6adec37e-5453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:ae:2e:fc:e0:2c:96:0a:ff:af:7b:ef:98:
                    a5:6d:4f:3d:e8:1c:f1:dc:66:f0:d4:ac:44:f0:68:
                    64:78:6f:5f:6a:22:67:17:f6:e3:63:86:60:c7:c5:
                    5f:ef:bd:80:60:cf:ff:fb:de:48:ba:43:7d:c9:3c:
                    47:0c:4f:fe:25:c5:ed:9c:18:76:93:a5:22:64:57:
                    ea:98:f5:7a:5b:54:90:00:24:ae:fd:04:09:5d:ee:
                    56:d6:61:28:44:ce:9f:c0:32:2b:81:b6:d8:b6:18:
                    8c:81:8c:59:f1:be:94:74:09:97:cd:bc:65:ea:59:
                    ba:1d:71:0f:77:95:a2:a1:e2:8c:e3:2f:a2:1e:c4:
                    5c:90:7c:e6:03:de:75:76:51:7d:6b:21:48:5e:b7:
                    32:5e:50:24:96:b8:62:5c:12:f4:c4:e8:b3:2d:93:
                    c8:e0:2e:5b:b4:43:a3:6e:47:05:b3:07:ca:7c:9c:
                    1a:92:c4:f7:f9:52:fb:83:c6:0a:1d:48:da:56:0f:
                    30:83:21:95:2c:96:18:9c:ca:c7:69:38:3b:f3:7f:
                    cf:fc:8a:95:92:59:97:9b:99:06:b5:43:fd:c4:d4:
                    62:6a:b4:cc:e4:b6:f5:a7:85:ea:de:c0:50:55:42:
                    3d:1b:88:42:6c:aa:19:45:86:76:d2:1d:42:bb:56:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:F4:C6:05:27:CC:C1:BB:04:10:58:3D:8C:66:83:1F:15:9B:4A
            X509v3 Authority Key Identifier:
                keyid:80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:87:9b:cd:d2:76:d9:1d:e4:5c:46:11:05:84:7d:45:64:3e:
         d4:84:d8:c7:d9:4d:79:b1:a8:e9:46:0e:8e:21:ab:64:eb:78:
         b4:32:10:87:77:10:01:d8:e2:2d:77:87:00:8f:95:09:1e:31:
         7c:b3:a7:7f:3f:b8:3e:66:fe:00:c9:b5:42:0a:7c:23:94:db:
         af:35:56:d5:4b:03:78:4d:42:7c:1b:2c:3b:91:1b:b2:94:32:
         97:38:30:21:07:e6:cb:b5:40:e8:6b:68:f2:74:87:78:53:a3:
         12:83:b2:e8:2b:0a:6e:a9:df:4e:96:5b:51:85:84:f5:9d:b6:
         ea:1b:6a:52:40:0b:41:28:2b:56:da:aa:a0:a1:ee:00:ff:d8:
         c5:54:06:b6:bd:72:7b:45:20:3e:72:5f:ce:eb:f1:3f:a3:d9:
         cf:d6:92:bd:6c:af:d5:50:59:31:d4:19:34:6d:15:1e:56:af:
         66:cb:af:0a:bb:35:e7:fb:12:b6:79:6e:20:26:3c:d9:bb:4f:
         23:f0:14:0c:2d:a8:f8:96:6e:8f:f5:57:24:f0:ad:54:3b:33:
         74:cb:7e:73:14:3d:1c:d7:97:c2:64:ac:26:28:24:06:95:85:
         a9:62:94:82:4e:83:f3:c6:6a:c2:12:af:08:84:9d:68:d7:c9:
         d7:d1:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:58:38 2026 by rpki-client