Error: rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
File:                     EQYAxu67aMpSEon5sYeaJnpW4_w.mft (raw, json)
Hash identifier:          S+Sc5ucoKrs72wurMGPE1Apvtq1o6XiCck4JzeG12JE=
Subject key identifier:   B5:2B:6F:93:1F:09:D3:DF:C5:E3:A1:D8:84:B1:40:89:07:39:63:46
Authority key identifier: 11:06:00:C6:EE:BB:68:CA:52:12:89:F9:B1:87:9A:26:7A:56:E3:FC
Certificate issuer:       /CN=F367B9AEAF/serialNumber=110600C6EEBB68CA521289F9B1879A267A56E3FC
Certificate serial:       0113
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
Manifest number:          0112
Signing time:             Mon 26 Oct 2026 05:26:54 +0000
Manifest this update:     Mon 26 Oct 2026 05:26:53 +0000
Manifest next update:     Wed 28 Oct 2026 05:26:53 +0000
Files and hashes:         1: EQYAxu67aMpSEon5sYeaJnpW4_w.crl (hash: We24RH0T8jSJ9+vb01fQ74DN7+/yeUobUyAVe2GJ+JU=)
                          2: 5DAE53C8FC4311F089F0909ADAE4EC9C.roa (hash: pMAftOKK+E+y6h4RLSrb4pd1uKoP1x/UJyyr/pqc+Bk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B9AEAF, serialNumber=110600C6EEBB68CA521289F9B1879A267A56E3FC
        Validity
            Not Before: Oct 26 05:26:53 2026 GMT
            Not After : Oct 28 05:26:53 2026 GMT
        Subject: CN=6adee49e-9c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:be:fd:2f:c8:a8:7b:38:03:13:4a:bd:b5:
                    12:91:96:07:25:d1:b8:f3:dc:03:9b:87:8d:a3:13:
                    0b:ff:72:a4:10:7c:c6:ea:7e:b0:39:d6:00:3a:3a:
                    a2:33:a4:17:a9:20:6b:65:d6:44:87:c7:7a:a7:e7:
                    3b:db:d6:74:f3:e7:3d:db:3b:14:43:88:46:d3:3c:
                    e3:7b:0c:26:a5:63:65:3c:9b:af:67:c5:b8:e2:48:
                    20:f1:cb:59:3e:21:96:45:9b:85:53:de:a3:40:ef:
                    0b:22:66:f6:92:db:8e:0b:07:27:50:bc:fe:a7:4f:
                    5f:8f:46:43:18:6e:62:2a:ca:7b:f0:e7:d2:14:16:
                    27:d1:90:eb:1c:70:10:51:29:12:ff:ee:dc:4b:ca:
                    5e:ee:8b:2e:1c:17:41:ab:dc:11:5f:c5:ed:08:bb:
                    fc:31:7a:60:f1:26:7c:5e:21:d4:08:d8:47:0b:31:
                    8e:5c:64:5c:f6:57:52:f7:a6:75:3b:d1:d6:47:5f:
                    74:67:26:2f:42:59:ec:f4:d6:d2:4b:1b:ae:55:a8:
                    9f:1a:44:56:d9:42:65:8e:60:c2:0e:e3:de:21:d8:
                    cb:e9:c6:c5:4a:e9:33:5a:94:0a:60:71:c0:05:0a:
                    7c:09:2a:9f:cb:74:33:55:f9:48:9f:7c:39:8b:9c:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2B:6F:93:1F:09:D3:DF:C5:E3:A1:D8:84:B1:40:89:07:39:63:46
            X509v3 Authority Key Identifier:
                keyid:11:06:00:C6:EE:BB:68:CA:52:12:89:F9:B1:87:9A:26:7A:56:E3:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:6b:6e:63:a6:43:10:5a:b4:76:a0:54:e5:33:bb:af:df:
         da:2f:ad:47:46:8e:8a:e9:f0:e8:1c:7e:4a:88:a4:80:01:e6:
         9d:85:5d:f2:20:18:d0:3f:1c:be:be:5c:58:42:65:14:09:6d:
         6e:96:60:e6:8e:09:df:f2:59:82:85:05:cd:4a:ba:4f:ca:56:
         3d:ee:0f:c1:e2:ae:5e:4d:a6:49:78:b7:47:97:1c:12:d3:b7:
         49:8b:e6:2f:44:54:bc:70:aa:89:f7:1d:5d:5d:9b:e7:b6:b8:
         d0:1d:7c:a7:6b:e6:3f:4a:7c:37:d6:54:a1:0e:14:4d:e7:8f:
         3c:73:11:bb:b7:59:5c:bf:c9:9a:cc:66:b3:12:7d:53:48:20:
         04:89:a1:6b:7e:90:3e:d9:f5:eb:34:11:69:69:74:92:43:70:
         ed:fb:a7:78:57:ae:1a:46:76:66:82:05:90:dc:fb:24:3a:8b:
         de:46:ce:88:f4:d5:72:8e:39:16:a8:f2:e0:9f:9a:8e:32:03:
         82:c4:a0:d9:95:db:5d:e7:32:a1:a1:c9:e3:9b:4a:13:79:cd:
         57:ca:e3:49:6b:74:74:eb:95:c8:63:69:e5:d0:55:aa:b8:ed:
         c3:1f:93:f7:9a:6a:f8:05:ca:7f:1f:ad:41:7d:98:3b:6c:dd:
         13:4c:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:28:08 2026 by rpki-client