Error: rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft
File:                     06vZVvRTcf4p_JKYqVr8svm4PS0.mft (raw, json)
Hash identifier:          3MR6oQdTo5KltDnszkCWIbdGkmlNhQhDn6JmWFVk8IE=
Subject key identifier:   9B:29:89:BB:1E:AE:2C:18:7C:5F:6A:7C:AD:4F:CE:A8:47:25:04:DE
Authority key identifier: D3:AB:D9:56:F4:53:71:FE:29:FC:92:98:A9:5A:FC:B2:F9:B8:3D:2D
Certificate issuer:       /CN=F367917CAF/serialNumber=D3ABD956F45371FE29FC9298A95AFCB2F9B83D2D
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft
Manifest number:          25
Signing time:             Sat 24 Oct 2026 05:59:27 +0000
Manifest this update:     Sat 24 Oct 2026 05:59:27 +0000
Manifest next update:     Mon 26 Oct 2026 05:59:27 +0000
Files and hashes:         1: 06vZVvRTcf4p_JKYqVr8svm4PS0.crl (hash: n3+vnc8JS/eLwPIYn+EFS8nxurnZZUSRGz71xdabAqI=)
                          2: 5D4B6218C6F511F1950F261DCF1D38B0.roa (hash: rktVVLf+yQbgxvwZ2kSXxsvbPxg9nymdrXaWE4er4ek=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367917CAF, serialNumber=D3ABD956F45371FE29FC9298A95AFCB2F9B83D2D
        Validity
            Not Before: Oct 24 05:59:27 2026 GMT
            Not After : Oct 26 05:59:27 2026 GMT
        Subject: CN=6adc493f-0302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:93:ae:20:2c:21:f6:87:27:d6:92:14:a4:cf:
                    a3:2d:a7:d0:c5:21:64:58:32:a6:62:44:50:a7:1d:
                    a4:26:fe:46:98:aa:37:cb:28:f6:9b:ef:1c:c9:5e:
                    41:1e:e6:88:df:f6:b4:b0:db:fa:3d:0d:9f:26:a7:
                    17:28:2a:41:ff:e3:e3:64:5f:98:43:c4:bb:f1:fb:
                    f6:46:33:5d:0e:49:c5:99:da:6a:ef:3c:2f:d9:31:
                    15:96:ea:4f:bf:e1:d1:eb:00:b7:c7:d3:16:fe:ab:
                    11:01:ee:7b:25:26:7d:f1:2a:fe:78:65:01:ff:79:
                    86:0c:66:84:89:37:57:06:ff:32:e1:40:49:85:71:
                    3e:ba:51:42:88:18:31:03:b5:b1:bf:c8:ee:c9:9b:
                    9f:06:81:a4:e3:47:93:a8:23:99:b6:38:93:2c:75:
                    39:1a:4a:d2:13:1e:89:87:02:79:fb:74:1c:ea:46:
                    3b:7c:2e:17:ee:b4:dd:b2:c8:a0:b9:3e:fd:85:0e:
                    31:b5:7b:29:95:6a:a6:cf:ed:49:dc:f7:cf:dd:de:
                    ad:d0:a0:7b:2f:cf:09:d8:e6:07:9a:07:2d:19:b1:
                    a3:d4:a8:a5:52:7c:6a:de:e0:17:65:53:b3:c7:e9:
                    a3:96:62:e8:18:88:ac:8c:69:bf:8c:e8:8e:62:49:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:29:89:BB:1E:AE:2C:18:7C:5F:6A:7C:AD:4F:CE:A8:47:25:04:DE
            X509v3 Authority Key Identifier:
                keyid:D3:AB:D9:56:F4:53:71:FE:29:FC:92:98:A9:5A:FC:B2:F9:B8:3D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a3:b0:51:a7:d3:b5:1e:b9:06:1a:9c:a7:a9:1d:31:e0:30:
         7a:19:8a:be:ed:5e:90:83:2d:52:ba:1c:82:86:73:91:50:7a:
         68:ca:d2:79:6f:e7:9a:0a:05:73:d3:e0:a2:6e:9a:4f:ef:3b:
         61:87:b0:21:a0:e3:40:55:9b:d9:4d:d4:cf:60:cd:6f:0e:f9:
         30:53:aa:0d:5d:11:4d:61:20:4b:2f:b8:1f:87:85:1f:a5:4b:
         ba:f4:0f:ca:7e:64:f7:61:b3:61:ba:c9:06:de:f1:f3:6b:19:
         ac:8b:de:bf:c8:9c:59:e9:45:d0:d0:88:53:53:71:78:df:4f:
         13:95:52:98:b4:03:2a:38:32:33:e4:9a:5d:1f:85:4f:39:fc:
         a8:2b:15:c7:66:ed:fb:ab:fc:15:5a:9f:20:62:b0:bc:e3:25:
         35:57:35:92:db:aa:f1:a3:12:b9:3a:76:07:3c:f4:2e:e6:95:
         4a:fe:d5:ea:3f:29:c2:d4:88:8b:e7:98:34:06:c5:72:3f:af:
         53:3a:31:8d:09:26:84:aa:a1:72:db:fd:98:62:b0:16:26:f8:
         f2:b3:b1:de:4d:66:c1:cc:0a:8a:e0:fb:6e:b3:99:f0:7e:2d:
         4d:2e:bc:d4:a3:b8:e5:7a:d5:8a:0e:48:cf:6d:26:a4:74:33:
         a2:e5:a2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:14:24 2026 by rpki-client