Error: rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
File:                     AsRM7WthmrGkBPztNQKx2WhIMp4.mft (raw, json)
Hash identifier:          r/UhZt71sZU05+9XK24TBmPlpdBq7REP0tmcr05ue+0=
Subject key identifier:   FC:5B:DB:22:13:D6:12:0B:B3:1D:93:A0:D8:96:0A:14:FA:09:A1:ED
Authority key identifier: 02:C4:4C:ED:6B:61:9A:B1:A4:04:FC:ED:35:02:B1:D9:68:48:32:9E
Certificate issuer:       /CN=F365F086AF/serialNumber=02C44CED6B619AB1A404FCED3502B1D96848329E
Certificate serial:       0474
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
Manifest number:          046F
Signing time:             Sat 24 Oct 2026 03:47:11 +0000
Manifest this update:     Sat 24 Oct 2026 03:47:11 +0000
Manifest next update:     Mon 26 Oct 2026 03:47:11 +0000
Files and hashes:         1: AsRM7WthmrGkBPztNQKx2WhIMp4.crl (hash: WS1fhBd2+vdBqlollM+2FvOco8QCcmMjGbLPEoKJ+UU=)
                          2: 859462CC6CC311EE8EFBB4784AD9E6FC.roa (hash: sQU9LffxBvSsgmgcwizGIhPdQKBe5eoXX4AMZgFSru4=)
                          3: D16CB6506CC211EEAE1488764AD9E6FC.roa (hash: 8W8MLoaZGdQj+poYAqkXMgXc2YN4jz1pc8HUUsTYfXk=)
                          4: C831B8A6568511F1975CE414CF1D38B0.roa (hash: LZaxmQElUIK8uX2QSAti4xAiDPOSvSMl5rA5kzrCuuw=)
                          5: DD015D826CC111EE88677D734AD9E6FC.roa (hash: qWeL/3G03cESkK0lfpuTmBLiPLwBFByixPyVGD+RD2k=)
                          6: 2186DE04568611F1A2AD1617CF1D38B0.roa (hash: jncwXMCFbXN3M1ApRoH5qYoE6Oyeb0Gw7SPDapNHdwc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140 (0x474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F086AF, serialNumber=02C44CED6B619AB1A404FCED3502B1D96848329E
        Validity
            Not Before: Oct 24 03:47:11 2026 GMT
            Not After : Oct 26 03:47:11 2026 GMT
        Subject: CN=6adc2a3f-6cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:d7:79:98:2b:73:33:57:5f:11:d4:de:33:
                    ad:73:c0:d4:30:40:ab:f7:c9:be:ac:2c:fa:03:aa:
                    c1:9d:e7:cb:03:b1:77:e9:c0:a5:b9:ab:8a:d2:23:
                    1f:14:e6:2e:b6:ee:0d:b8:65:1d:1e:54:9b:60:6c:
                    21:3c:fc:d2:d4:3c:be:a1:ab:56:81:80:83:57:f5:
                    b7:49:00:27:04:6e:c9:26:dd:33:f5:85:68:1f:53:
                    c3:24:8a:6c:3c:3b:aa:ea:2e:6f:51:35:7e:c8:f0:
                    b0:fd:92:57:f8:f4:e7:e5:64:b7:13:ac:26:e9:ee:
                    c8:09:32:2c:88:83:0c:52:9c:80:dd:58:0f:2e:4d:
                    69:9a:db:53:a8:62:2d:bd:db:d0:e6:25:e6:75:08:
                    cf:9e:45:92:26:cc:43:65:7d:09:95:d2:7b:74:84:
                    3a:4e:e0:85:53:26:8e:8e:1a:2a:ca:12:52:84:05:
                    7d:89:78:1f:dd:c4:2b:33:3a:1b:d9:db:93:28:a3:
                    d8:a3:cb:4a:ba:45:fe:38:83:6f:7b:5c:dd:0b:45:
                    48:8e:c6:2f:04:58:7f:f4:2f:e4:5b:73:60:a2:36:
                    44:a7:a7:bf:62:4f:13:ba:bf:c3:e1:12:a4:f1:e7:
                    a5:43:53:de:3d:01:b9:6d:38:8a:ad:dc:a5:89:da:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5B:DB:22:13:D6:12:0B:B3:1D:93:A0:D8:96:0A:14:FA:09:A1:ED
            X509v3 Authority Key Identifier:
                keyid:02:C4:4C:ED:6B:61:9A:B1:A4:04:FC:ED:35:02:B1:D9:68:48:32:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a7:e1:ac:10:a1:6a:50:85:eb:bb:56:8d:98:3b:39:81:f1:
         cf:59:b3:d3:25:64:ae:b6:6c:7a:0b:d4:b1:cd:69:e5:0b:4a:
         96:63:0e:18:fe:e8:b7:3c:1c:08:dd:01:b4:d1:c6:77:fc:b4:
         4a:aa:b9:1b:5a:9f:8c:98:60:74:20:71:e4:c3:22:ad:5f:ae:
         6a:9d:1b:a8:22:8d:04:f7:72:db:93:09:51:df:74:ab:bb:76:
         f1:95:1c:a4:9e:20:0f:ce:18:82:de:15:b3:16:2f:2a:c0:46:
         ca:9e:38:44:d7:52:eb:f0:3e:8b:55:ee:5a:47:41:24:3e:65:
         cb:44:b4:80:ca:b1:ca:7d:26:77:20:e6:f3:3b:41:78:11:08:
         2e:5f:d3:31:8c:c3:6b:77:62:dc:64:99:49:f5:c0:64:d5:be:
         01:42:6c:33:7b:31:07:09:c0:e6:57:5a:da:ac:38:51:8d:c9:
         a7:47:cf:57:c3:15:e3:10:f1:db:bd:61:8f:6b:26:a2:5f:12:
         b1:c2:12:10:18:b0:07:54:ae:c4:8d:a6:f7:97:b2:4e:ef:30:
         c9:3e:1b:99:78:f2:1e:32:52:40:b6:6f:a9:46:db:d8:2d:1c:
         9f:af:6a:36:3c:37:c5:ca:b4:3e:cf:77:07:b9:2d:d9:de:4c:
         4b:44:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:10:21 2026 by rpki-client