Error: rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
File:                     DG5701tCYU_PjSJN2I63sPfvwYI.mft (raw, json)
Hash identifier:          niw8KWC5HoQRglgptV2ooR1pdB0aeXgXvxi8vXqCANQ=
Subject key identifier:   82:A4:2B:BB:87:0C:91:9F:DD:0F:7D:B0:3C:2F:6B:CD:F2:8A:44:5A
Authority key identifier: 0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
Certificate issuer:       /CN=F365BA89AF/serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Certificate serial:       01D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
Manifest number:          01CA
Signing time:             Sat 24 Oct 2026 05:08:03 +0000
Manifest this update:     Sat 24 Oct 2026 05:08:02 +0000
Manifest next update:     Mon 26 Oct 2026 05:08:02 +0000
Files and hashes:         1: DG5701tCYU_PjSJN2I63sPfvwYI.crl (hash: wvh0PjbtNOX9JzM/2y/ue4pss0+i0qShYaQsV6Q1FIg=)
                          2: B3B9441AB4AB11F0AB1503F2DAE4EC9C.roa (hash: RwHD+Trhxws3zYvrFRwgdKof2CblxIDy9QFXW4Tleeg=)
                          3: BCC19C20802A11F08F97F0E7DAE4EC9C.roa (hash: oc0j3RlYEgdI4U0HFrR3Y7CfmN04fsE2aq4oX+gpdNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 05:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BA89AF, serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
        Validity
            Not Before: Oct 24 05:08:02 2026 GMT
            Not After : Oct 26 05:08:02 2026 GMT
        Subject: CN=6adc3d33-6356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:b9:00:71:21:d0:28:46:09:a3:ba:b7:04:
                    3d:27:f7:30:01:70:f8:44:c3:cb:aa:aa:94:d0:f4:
                    5f:48:7c:82:af:62:b8:c9:b3:e3:2a:39:fe:68:77:
                    a2:7f:71:58:cd:0a:25:fd:28:00:c8:aa:f4:21:39:
                    1a:fd:8d:84:f7:5f:60:8a:9b:d4:fd:5c:66:ff:cc:
                    41:05:be:5f:65:17:8f:23:65:ea:c0:ed:b4:a1:d2:
                    d7:1b:7f:1b:6a:9c:39:58:ba:66:74:59:ca:49:d8:
                    4a:89:f9:85:00:96:41:b1:21:c0:86:60:f0:c6:42:
                    70:2d:6a:34:b7:0a:38:04:83:7e:62:6e:7d:34:96:
                    e3:d0:bb:2b:21:96:50:6c:85:5e:da:e4:62:41:a4:
                    c6:b8:94:20:10:59:23:99:39:b0:bc:75:72:fd:97:
                    c6:8b:f6:8c:93:ee:67:a3:da:65:c8:b4:a0:9c:b1:
                    d3:0e:65:e1:a0:4d:fb:ba:d7:b6:84:a8:b7:30:96:
                    37:16:03:93:bc:45:4d:33:80:23:c8:73:2a:5e:bf:
                    07:d1:dc:bd:ae:ab:5d:8c:59:b5:5f:81:24:eb:15:
                    43:98:2a:09:47:fe:8f:eb:2a:1e:80:6d:77:da:be:
                    51:5b:ac:b0:86:54:5a:a9:b3:83:c2:76:b4:45:fb:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:2B:BB:87:0C:91:9F:DD:0F:7D:B0:3C:2F:6B:CD:F2:8A:44:5A
            X509v3 Authority Key Identifier:
                keyid:0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:09:8b:e3:56:aa:d5:c2:82:32:03:51:e0:99:8c:21:21:ad:
         ae:f1:72:86:fe:30:e6:c7:eb:04:fc:8a:31:03:6a:e8:20:13:
         28:1e:b6:c8:89:8d:f0:c2:01:3d:92:68:90:2b:28:93:13:3a:
         db:5b:74:d9:04:43:4e:47:e6:b6:cf:9c:a7:e0:ba:df:80:1d:
         38:d4:98:9d:d1:0d:bc:bd:74:31:80:32:31:4e:39:67:95:92:
         9c:83:3a:21:ff:b5:f2:d1:93:e1:95:dd:d7:30:a4:f8:43:62:
         75:8b:a6:73:94:5e:da:73:51:b0:5a:22:f2:1d:fe:f4:b5:3e:
         3a:68:83:8d:e7:98:e3:de:cb:21:ad:4a:6b:3b:ba:c5:b7:dd:
         20:38:4a:55:53:d5:6e:84:16:ca:83:82:a3:7b:4a:85:ed:66:
         e5:79:b4:b7:04:be:bd:4d:dd:17:84:e9:f4:ab:09:44:63:de:
         02:bd:70:a1:2d:77:85:65:e1:a6:fe:91:5b:7b:3b:0f:f6:9a:
         98:d1:14:04:4f:d7:08:4b:ed:f4:f2:44:e5:19:48:ef:61:68:
         4e:96:9a:67:b1:84:86:c2:9f:3a:79:82:f1:cb:a5:ed:64:ad:
         53:49:57:f5:f6:0b:bb:64:d6:49:1b:34:c9:dd:7c:75:07:02:
         d0:4c:d0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:09:32 2026 by rpki-client