Error: rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
File:                     KxftsiWoqa1OodSC-tfzt4JwvaQ.mft (raw, json)
Hash identifier:          xuX8g6Fr3aZ+erYN8MV085a7whWvnzK7yd6d5avOHEM=
Subject key identifier:   0B:73:98:7D:D3:8D:09:8E:20:29:54:43:C7:BD:C8:81:EE:E0:11:AB
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Certificate issuer:       /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial:       071D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
Manifest number:          071B
Signing time:             Sun 25 Oct 2026 02:33:20 +0000
Manifest this update:     Sun 25 Oct 2026 02:33:19 +0000
Manifest next update:     Tue 27 Oct 2026 02:33:19 +0000
Files and hashes:         1: KxftsiWoqa1OodSC-tfzt4JwvaQ.crl (hash: HjyVvXfmX+3D4WWTiLT07FyzyKCN/clQbYQTxvgUqaE=)
                          2: 50EE860C89D411F1BC8148E0CE1D38B0.roa (hash: BNEjT+IAIoFe9htz0QXTgR9t7EbvGjjHJq8r7GRqrIg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 02:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36746EBAF, serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
        Validity
            Not Before: Oct 25 02:33:19 2026 GMT
            Not After : Oct 27 02:33:19 2026 GMT
        Subject: CN=6add6a6f-8d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:f3:5b:b0:58:20:61:2f:8c:04:fc:a3:33:
                    b8:8c:c4:89:99:98:9d:e7:81:b4:18:2e:16:88:61:
                    1d:3d:8c:b9:46:38:07:83:2b:5c:ea:9f:24:82:a0:
                    87:09:bc:96:22:28:85:4a:09:ee:57:da:28:fd:fd:
                    9f:87:86:d4:c3:3b:97:96:af:a3:bb:04:9d:59:ac:
                    52:28:7a:65:60:53:ba:9d:f9:00:71:f4:d6:ea:2d:
                    3e:bf:b0:4c:a7:2d:6e:1a:37:8e:fd:88:4c:36:ee:
                    30:7e:99:ef:7d:9d:8f:b6:9a:c1:a9:fa:7b:95:1e:
                    72:d7:2e:b8:65:5c:25:7a:d6:1c:ae:48:7c:a2:bb:
                    a6:5f:a8:69:9b:7f:cb:df:79:11:b4:c6:31:17:c0:
                    04:a7:31:4d:3b:4d:9f:da:8b:2e:7b:4b:6e:e5:94:
                    d4:b6:04:de:96:bf:44:11:b6:96:e9:b4:fc:48:de:
                    3a:fe:1b:fc:fc:9b:43:89:a7:c5:65:3f:49:78:4b:
                    04:56:d2:02:45:a1:14:35:84:9f:a0:9f:57:41:af:
                    3c:0c:15:a5:31:c9:59:88:2f:f8:3c:b1:e9:dd:bc:
                    8b:31:a7:ca:bd:b0:c9:e2:29:6e:9f:96:a2:95:5e:
                    f8:fc:0c:63:05:f0:66:d9:06:c2:1f:6e:57:01:36:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:98:7D:D3:8D:09:8E:20:29:54:43:C7:BD:C8:81:EE:E0:11:AB
            X509v3 Authority Key Identifier:
                keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6f:c9:18:0e:ef:ce:ef:1d:c4:e4:cd:30:fd:18:60:7d:14:
         b1:35:00:63:8b:0f:17:ad:ce:46:74:8f:79:57:01:ea:94:a4:
         ca:ac:97:c9:25:93:e2:f1:2e:25:b0:3e:2c:14:5e:c8:9a:af:
         17:ed:51:01:5c:60:b2:b9:36:02:74:d5:f3:a4:db:2b:4a:c7:
         b2:bf:22:78:6a:29:fd:1c:23:d6:f6:e4:6a:6d:b9:8c:90:bc:
         7e:cb:43:fb:dd:3d:93:07:dc:84:97:0d:cd:b3:b3:b9:61:b9:
         56:6b:93:c6:20:5d:4a:06:e7:9b:65:9c:cb:01:df:d9:43:b4:
         14:6f:ba:90:68:66:d9:ab:af:ae:ea:40:30:67:bd:bd:8d:b6:
         e8:f1:36:3a:56:97:e2:15:61:5a:c5:06:f4:6e:f8:bd:8a:0a:
         e8:80:90:ac:b3:54:48:84:35:77:3f:92:bd:69:5c:90:b7:e8:
         d3:8b:b1:f6:78:ba:b2:a0:18:32:e8:4d:35:be:ec:c0:98:d9:
         a6:0a:24:cb:53:80:20:f1:5f:a3:8e:9b:8c:3b:d6:77:75:61:
         d2:be:f3:ae:31:8b:3b:01:ca:02:b5:d4:2e:aa:af:bf:e7:cc:
         8e:e4:a5:f6:7f:65:ae:f9:f6:40:30:ed:ed:6b:20:1a:12:57:
         2d:fb:ff:70
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQ2RUJBRjExMC8GA1UEBRMoMkIxN0VEQjIyNUE4QTlBRDRFQTFENDgyRkFEN0Yz
Qjc4MjcwQkRBNDAeFw0yNjEwMjUwMjMzMTlaFw0yNjEwMjcwMjMzMTlaMBgxFjAU
BgNVBAMTDTZhZGQ2YTZmLThkMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5QvNbsFggYS+MBPyjM7iMxImZmJ3ngbQYLhaIYR09jLlGOAeDK1zqnySC
oIcJvJYiKIVKCe5X2ij9/Z+HhtTDO5eWr6O7BJ1ZrFIoemVgU7qd+QBx9NbqLT6/
sEynLW4aN479iEw27jB+me99nY+2msGp+nuVHnLXLrhlXCV61hyuSHyiu6ZfqGmb
f8vfeRG0xjEXwASnMU07TZ/aiy57S27llNS2BN6Wv0QRtpbptPxI3jr+G/z8m0OJ
p8VlP0l4SwRW0gJFoRQ1hJ+gn1dBrzwMFaUxyVmIL/g8sendvIsxp8q9sMniKW6f
lqKVXvj8DGMF8GbZBsIfblcBNhV3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUC3OY
fdONCY4gKVRDx73Ige7gEaswHwYDVR0jBBgwFoAUKxftsiWoqa1OodSC+tfzt4Jw
vaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0NkVCLzBDNTY0QzVFNUU0NzExRUNCOUExQUVEOTVBNDBENTc3L0t4ZnRz
aVdvcWExT29kU0MtdGZ6dDRKd3ZhUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0t4ZnRzaVdvcWExT29kU0MtdGZ6dDRKd3ZhUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzQ2RUIvMEM1NjRDNUU1RTQ3MTFFQ0I5QTFBRUQ5NUE0
MEQ1NzcvS3hmdHNpV29xYTFPb2RTQy10Znp0NEp3dmFRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwb8kYDu/O7x3E5M0w/RhgfRSxNQBj
iw8Xrc5GdI95VwHqlKTKrJfJJZPi8S4lsD4sFF7Imq8X7VEBXGCyuTYCdNXzpNsr
SseyvyJ4ain9HCPW9uRqbbmMkLx+y0P73T2TB9yElw3Ns7O5YblWa5PGIF1KBueb
ZZzLAd/ZQ7QUb7qQaGbZq6+u6kAwZ729jbbo8TY6VpfiFWFaxQb0bvi9igrogJCs
s1RIhDV3P5K9aVyQt+jTi7H2eLqyoBgy6E01vuzAmNmmCiTLU4Ag8V+jjpuMO9Z3
dWHSvvOuMYs7AcoCtdQuqq+/58yO5KX2f2Wu+fZAMO3tayAaElct+/9w
-----END CERTIFICATE-----
Generated at Mon Oct 26 01:45:14 2026 by rpki-client