Error: rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
File:                     qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft (raw, json)
Hash identifier:          VwdP48symN0ol6rU0a6OYvVIgDSMDoqbw4Qt5ZejCjQ=
Subject key identifier:   B2:A1:63:2D:64:F7:0E:C1:38:94:14:91:79:A4:3C:7D:85:57:D0:DE
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Certificate issuer:       /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial:       0AF7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
Manifest number:          0AE0
Signing time:             Thu 10 Sep 2026 01:19:16 +0000
Manifest this update:     Thu 10 Sep 2026 01:19:16 +0000
Manifest next update:     Sat 12 Sep 2026 01:19:16 +0000
Files and hashes:         1: qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl (hash: rMLs0VPVhKq9FryPDBLuyooufzBviQOXFxhMKPac1nM=)
                          2: 7CFBEB4A8FA211F08D1E5FBCDAE4EC9C.roa (hash: f8ypJFzZi/+69BhBnv9bsOOJoTGmoh2yg/JFPVO+hyE=)
                          3: 60610198296211EF83AE3D3D7DDC24C2.roa (hash: UBGAw16NrChSPv8tNag0KqvL7//5uXFEiv/3dqV73Kw=)
                          4: D9AFC14C980311EE9C9EE232D25BE465.roa (hash: 3wIsUAj1b7QA8gDWmN43Tp1fe+wx4WBvqsu3o9Runpg=)
                          5: 0B265DAC188C11F182BD24E5DAE4EC9C.roa (hash: rPML4O6c9gJBf9ETeEWqZZUxyMsY3h9ZYfoknsJWcPg=)
                          6: 20289B309D8511EF8A56A467762E951A.roa (hash: G5InreV+s/mDjPnREuW/+fXZ42uW0S7SWpUVDZ23oTk=)
                          7: B9D9790A188D11F1A76C66F1DAE4EC9C.roa (hash: D3fxaNYXkOtJlbnpVPUhYfvM/B3R+LggxDLRf4MdM3s=)
                          8: DD377C8CECC311EE9147A3C0775412E6.roa (hash: NLvAngBkDWgdSocM3OP6MpCBbIBTpSnwK++fJeiXNgI=)
                          9: E44691A42F3211F09C2DD1BADAE4EC9C.roa (hash: lrbHcWPiIcB8N+/jAI7IqmQFwQtonM2D4rkcMKVtlnQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 01:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2807 (0xaf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DAF, serialNumber=AB19964619FF85343CC091180673A8AC528610F4
        Validity
            Not Before: Sep 10 01:19:16 2026 GMT
            Not After : Sep 12 01:19:16 2026 GMT
        Subject: CN=6aa20594-7fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:1b:2b:54:db:54:79:9b:32:35:bb:4a:bf:
                    70:79:8d:df:4b:b8:2a:76:af:c5:fc:f3:2d:26:3d:
                    82:dc:5b:f2:6c:d6:27:b8:3a:5a:c0:a4:cd:ed:48:
                    6c:64:32:f4:a7:40:8d:a4:58:ce:a7:a0:40:11:e1:
                    55:48:fd:df:0a:c9:1f:9b:72:57:7f:15:3b:d3:40:
                    39:82:b5:c9:d3:92:0a:e3:77:d7:4f:f0:b9:c9:49:
                    b5:83:1c:fd:97:8d:1e:84:8f:9a:e7:6d:ac:78:b5:
                    19:ec:d0:0d:8a:2b:a2:99:19:b5:32:99:a2:c8:98:
                    82:d5:28:f9:c7:f8:fe:0a:13:d7:19:cb:3f:ca:a8:
                    1e:41:a5:74:cc:23:a9:c1:f7:0e:b3:73:cb:23:99:
                    9b:5f:64:6f:92:b4:ff:b9:c5:be:12:80:21:d0:b3:
                    1d:79:67:f8:7d:ad:08:b3:f9:8b:9d:14:46:0b:68:
                    86:c0:0b:17:5d:95:c7:bc:18:2d:a7:26:0f:78:74:
                    15:78:35:f3:e8:b9:ea:a6:bc:48:65:0c:1a:3c:8e:
                    22:2d:6a:9f:9d:11:4f:b7:53:54:75:d2:4f:94:01:
                    da:41:73:c4:55:91:1b:d1:7a:61:b6:7b:50:bb:00:
                    df:c9:e8:63:91:55:e3:98:e3:38:1c:2b:49:32:96:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A1:63:2D:64:F7:0E:C1:38:94:14:91:79:A4:3C:7D:85:57:D0:DE
            X509v3 Authority Key Identifier:
                keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:58:08:bd:be:e8:5b:00:92:7a:b2:45:70:f3:5e:3a:55:db:
         9e:ce:75:1f:05:4d:9b:45:d4:36:8f:69:8e:09:3e:85:72:a0:
         b0:78:ca:33:5b:93:da:5b:73:3e:52:8e:e3:27:c2:a5:bd:b2:
         7a:64:1a:b2:6f:cc:64:9a:ed:9a:7c:d6:76:64:e9:f8:df:85:
         62:4a:a7:36:d1:a3:6b:b0:92:01:76:1e:5a:35:b5:8c:9c:1c:
         c5:f0:db:14:a6:3b:bd:06:37:1f:cf:0b:4b:f9:29:44:df:78:
         39:4a:e2:63:8d:a6:02:ba:81:96:3f:38:0d:81:c7:bb:d3:cd:
         dd:d0:55:09:3c:88:a7:ef:9b:b9:49:5d:f8:c3:46:83:6b:67:
         d7:40:76:e4:12:8f:85:24:ff:30:c9:5f:e1:40:43:26:c7:74:
         cf:1d:27:8b:4b:5e:33:9a:65:a3:93:4d:73:19:b2:96:32:2d:
         ed:05:e8:10:eb:ec:d3:23:48:53:a0:a4:57:3a:47:57:25:ba:
         9e:0a:ac:3b:dd:c9:7d:7a:07:49:96:cc:1d:cf:c0:67:f6:dc:
         7b:f3:69:84:f2:5a:20:30:8c:47:6f:4e:c1:82:b4:22:cb:a9:
         b7:f1:bd:13:f8:fe:b2:8f:77:1c:2f:77:07:1e:76:71:c1:bf:
         22:2a:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:20:12 2026 by rpki-client