Error: rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
File:                     Ic9mCQ8NCPeTru46mq74zw9BMAs.mft (raw, json)
Hash identifier:          EkCsJqc84S8ZO+TWMsXhVOlWA09mXhID9bQSkEETUj4=
Subject key identifier:   83:83:54:38:2A:0A:C0:47:B2:87:01:B1:1C:A9:96:10:F3:83:99:69
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Certificate issuer:       /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial:       07A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
Manifest number:          079E
Signing time:             Mon 26 Oct 2026 02:12:33 +0000
Manifest this update:     Mon 26 Oct 2026 02:12:32 +0000
Manifest next update:     Wed 28 Oct 2026 02:12:32 +0000
Files and hashes:         1: Ic9mCQ8NCPeTru46mq74zw9BMAs.crl (hash: lJR5x5iYoYainE8Mn2DqfBR6xjqh4C0IwnKEKIf5Q+k=)
                          2: E0505504C53611F09BAB2BC1DAE4EC9C.roa (hash: quGCMeMgrGs/I61IGIUq5ARCX8eAFzJjwoxXSU6rXcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1953 (0x7a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36818C8AF, serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
        Validity
            Not Before: Oct 26 02:12:32 2026 GMT
            Not After : Oct 28 02:12:32 2026 GMT
        Subject: CN=6adeb711-a715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:e2:05:98:66:d7:1b:21:39:e2:61:d0:ab:
                    4a:e2:d7:24:fe:06:8a:fa:7e:68:3f:ab:c0:af:53:
                    a0:ed:be:b5:c6:82:f2:80:c8:49:d9:eb:c0:0e:52:
                    c2:1f:7c:4d:38:9c:e4:f7:63:87:f1:84:ac:f2:93:
                    b5:6a:1a:2c:7f:9a:07:5c:70:1d:0a:b4:01:4f:7b:
                    f4:36:c0:ff:c5:d5:f3:3c:3d:0e:cb:03:ef:05:ea:
                    b3:71:34:7e:e2:22:c8:ee:a9:ce:ce:90:39:03:15:
                    16:28:d7:a8:b2:48:0a:c8:b2:d9:95:7e:a0:60:a1:
                    a2:e1:6f:51:83:65:af:a1:5c:ef:24:11:8d:7b:38:
                    3c:cd:9d:c7:89:c2:6c:f5:14:71:61:3d:e2:24:d0:
                    68:38:2c:c0:dd:b4:c2:73:ea:8b:58:bb:54:20:37:
                    78:b1:68:21:88:bd:3c:f2:9c:0a:e9:27:ef:3e:a5:
                    c5:39:8f:2a:ab:73:ae:c0:e6:c5:3d:ec:cf:d1:16:
                    26:63:f6:83:5d:da:56:84:c1:63:ba:a0:50:23:d6:
                    7b:96:e1:cd:c9:c8:4d:f6:6d:db:a1:17:f8:b9:ec:
                    6e:51:fe:b1:0e:95:bc:66:cb:48:20:3b:f7:92:d3:
                    f7:41:e1:74:79:ad:52:69:71:13:cd:b8:ac:2f:f4:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:54:38:2A:0A:C0:47:B2:87:01:B1:1C:A9:96:10:F3:83:99:69
            X509v3 Authority Key Identifier:
                keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:72:60:5b:df:ae:b4:ee:5d:f4:e0:45:39:f2:8e:12:20:80:
         a6:e0:66:59:68:d1:25:4f:e9:f8:e9:6e:d4:25:dd:8a:62:07:
         fe:52:f8:79:3d:fe:bf:69:bc:85:40:ca:3c:16:cc:b1:26:c4:
         b8:82:f0:ad:9e:d2:b2:b4:f5:19:cf:98:2c:4e:6c:71:32:8e:
         ec:e7:b0:d6:e5:db:89:bb:fb:46:ee:4c:25:87:4e:ff:c1:91:
         84:8e:1c:40:12:50:e0:04:66:ee:ad:a0:41:e5:56:bd:3a:e4:
         7a:9a:49:e3:61:69:0b:4b:70:be:7e:85:7b:b4:ed:7a:96:68:
         e3:14:cb:65:2a:1b:9f:8d:e1:bf:a3:80:b0:7f:2a:2c:b7:4c:
         db:7f:30:d2:a8:53:ac:1e:36:8c:b4:21:d2:a5:61:93:e8:34:
         c1:31:d7:ad:26:36:12:9e:8e:4b:27:8a:a0:42:6a:18:2a:7a:
         62:b7:bb:76:cf:10:cd:e1:2b:d6:7c:e4:64:45:f9:00:68:97:
         98:ae:09:b3:8b:83:30:8a:14:54:e9:90:fc:b1:b4:a2:5a:47:
         c9:b3:15:61:30:29:f4:9a:74:62:a2:f5:70:2f:2f:1d:f0:d5:
         d9:d0:62:65:97:69:90:d9:85:63:8c:17:fe:ac:4e:72:1d:2e:
         50:9a:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:03:22 2026 by rpki-client