Error: rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File:                     qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier:          N2V6cWa4f+6m6lrBXMyy/ILTMrEugGg4iTPHyXzHk4I=
Subject key identifier:   33:6C:CC:DC:F3:7D:3C:FE:A0:64:E2:90:9E:EA:F7:FF:82:83:80:C0
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer:       /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial:       06C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number:          06BF
Signing time:             Thu 10 Sep 2026 02:35:39 +0000
Manifest this update:     Thu 10 Sep 2026 02:35:38 +0000
Manifest next update:     Sat 12 Sep 2026 02:35:38 +0000
Files and hashes:         1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: +hqAX0OtY9zDGMrNMf81zcDrSWSSTdJPmUI/YmQPTtk=)
                          2: 7171857C898A11F1975FC0A7CE1D38B0.roa (hash: aIWaULOciWlOFlIItS1L2/uFnskyMEc00BLY1a7EVWk=)
                          3: B4CDDFBA096511F09EE29CA4762E951A.roa (hash: AGjlXws4tctUuB4WUyHecSclAJY+HCC3k/CqmlHphvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 02:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730 (0x6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
        Validity
            Not Before: Sep 10 02:35:38 2026 GMT
            Not After : Sep 12 02:35:38 2026 GMT
        Subject: CN=6aa2177a-c911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:b7:2b:0e:83:5d:b7:6e:f4:5c:d3:d8:e3:
                    22:fc:9d:a6:1e:b0:7a:8e:4b:73:3f:37:27:b4:94:
                    68:11:a5:c8:05:ab:1f:b6:0e:93:c9:95:e6:ea:d8:
                    4f:d1:81:6a:e3:89:2a:0b:e5:bb:52:a8:d8:09:e5:
                    85:ba:d5:f7:ff:9c:49:c4:24:d6:e6:ff:79:6f:c0:
                    10:ad:3b:1d:26:e1:0f:04:7f:4f:89:49:e1:e2:9c:
                    16:3a:37:de:26:d0:b9:cd:3b:c0:4f:c6:86:12:cd:
                    d2:17:78:79:27:70:4b:f5:f5:ef:95:c9:33:17:a0:
                    69:63:97:2d:a0:85:67:0d:d5:a6:e2:56:46:bb:c6:
                    21:f3:86:16:8d:27:46:03:d5:bc:1a:06:d9:9c:44:
                    9b:00:d2:af:27:92:46:7b:01:66:8e:89:71:c0:27:
                    9c:4a:63:b4:3a:dd:49:77:46:9d:e1:db:1e:ef:87:
                    bc:63:d4:78:80:28:5c:d9:07:77:23:6e:d6:c1:a1:
                    7c:77:2a:a2:3f:dc:c1:11:65:6a:8d:11:00:b2:7b:
                    69:8c:90:95:66:1f:73:fe:00:97:e1:ff:ef:bc:b4:
                    79:33:04:09:6c:6d:9b:7f:d8:78:44:16:40:53:65:
                    10:d1:70:7f:b6:fb:f5:5b:3c:29:6e:5b:94:87:9b:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6C:CC:DC:F3:7D:3C:FE:A0:64:E2:90:9E:EA:F7:FF:82:83:80:C0
            X509v3 Authority Key Identifier:
                keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:fa:9a:a8:df:2b:ae:ce:1d:4c:cf:9d:5c:1f:49:f0:97:8d:
         5c:b7:12:a5:cd:5c:76:d7:0a:48:95:75:78:9c:fa:e7:60:09:
         51:f1:6c:23:58:ca:37:bb:37:76:5a:29:e1:2d:4c:78:44:c2:
         d6:3d:61:d3:4b:f5:21:f3:88:80:ab:f9:46:f7:bc:97:22:b6:
         a0:67:ca:e2:33:77:5e:50:b0:ba:37:47:3d:cb:d3:8a:3d:6c:
         28:da:19:bf:e4:a9:cd:ba:b1:de:76:a6:c9:6c:30:41:77:c6:
         de:4f:00:9a:00:6f:84:21:c8:d3:dc:28:f9:64:35:47:51:b8:
         13:5d:69:e0:af:36:48:db:b2:f9:f8:9c:bd:26:65:fa:9d:ef:
         89:70:75:a7:40:c3:3f:c2:39:e5:3e:14:29:f5:3e:34:a7:13:
         76:ab:b3:d7:29:3e:9a:93:3d:5f:f8:5a:ff:fd:ca:df:56:83:
         f3:da:a1:6e:3e:eb:79:6f:9d:ed:18:86:fa:c6:1a:86:07:af:
         58:e4:fc:65:f7:e8:6e:fb:5f:87:dd:4c:5e:b1:ca:a7:c5:7f:
         9e:d7:79:9d:6c:14:5a:8a:45:8e:63:fb:82:b5:1c:ce:73:ea:
         32:3b:e6:4c:d1:f2:e1:1b:7e:98:bd:51:e6:e1:15:47:cc:67:
         dd:1a:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:41:17 2026 by rpki-client