Error: rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
File:                     AeYcP5ZGalkJmFR26IR5u31BEvY.mft (raw, json)
Hash identifier:          zNPceVFZJK5sffSYs2WIHuMIC4CImKT6dE9eCalt6Fg=
Subject key identifier:   FC:2C:01:5F:44:DF:12:A1:50:C5:E2:A1:F7:0F:B5:54:6B:1A:0F:38
Authority key identifier: 01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Certificate issuer:       /CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
Certificate serial:       0918
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
Manifest number:          090B
Signing time:             Sat 31 Oct 2026 01:53:33 +0000
Manifest this update:     Sat 31 Oct 2026 01:53:32 +0000
Manifest next update:     Mon 02 Nov 2026 01:53:32 +0000
Files and hashes:         1: AeYcP5ZGalkJmFR26IR5u31BEvY.crl (hash: YK5XGQjso6PyYRj+xTysSB9t9fiRrLFhQcyA40m8g3c=)
                          2: C323F44E8F1211F1864C84EBCE1D38B0.roa (hash: u8aZWfBecwJPZjVPWhv5T80Gv1rJfWADMc6DQmn/XnQ=)
                          3: 519333148F1011F1B1E433DBCE1D38B0.roa (hash: gFXsI352fWNCjc+UhMWjU0A4AjvsERl87+FqENAq/Io=)
                          4: DF656D788F1111F1847755E5CE1D38B0.roa (hash: 9QfEaLocVtLQcwnT06GsfncLumGQlEB7TDVUSo8k0UY=)
                          5: 1E1654C4EEAA11EA8289771CF8AEA228.roa (hash: Dm82340uA0C690wn7sH2AhL9e6hsAhiXi6CDcAUcav4=)
                          6: 2CA9C1788F1311F1984CADEBCE1D38B0.roa (hash: CEkCdE9UogyrJNiK1vhUEA97uIVs8t2fF8ZzQHmisfU=)
                          7: 0C51CC7A8F1011F1852E20DBCE1D38B0.roa (hash: bG2v6ttI2efHZhE3wMxM7riW0VDZ5M3p3+TQHnJRxmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 02 Nov 2026 00:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738AF, serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
        Validity
            Not Before: Oct 31 01:53:32 2026 GMT
            Not After : Nov  2 01:53:32 2026 GMT
        Subject: CN=6ae54a1d-5665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:b1:05:ac:cb:5d:d1:45:e6:ba:fe:c7:83:
                    8e:4e:02:9b:2c:2c:11:68:15:cc:09:51:2f:b4:47:
                    2d:10:5c:98:85:07:32:d7:72:48:a7:83:ef:74:0f:
                    fe:6e:13:62:9b:8e:08:93:91:5b:04:d9:68:b2:e2:
                    2e:8b:f9:50:a2:b5:cf:88:1a:40:04:23:ed:e9:bc:
                    38:c6:20:bc:22:f2:4d:33:16:89:03:2e:fe:3f:92:
                    69:16:ae:67:4c:d8:81:ca:84:03:ab:f2:3b:dc:5c:
                    02:48:a2:4d:34:e5:6e:ef:3d:ea:60:ff:dc:bb:7e:
                    de:a4:a7:a0:23:d8:8c:0e:24:64:6a:5e:d6:35:5b:
                    f4:60:18:72:42:1c:fa:b1:37:18:6d:90:1c:dc:1c:
                    c5:c7:3b:bf:58:e2:88:01:cf:32:70:f3:6a:28:78:
                    05:57:65:cb:69:89:b4:f2:04:e5:df:85:f3:0c:c4:
                    44:dc:cf:1b:dd:77:5f:3a:2d:3b:92:71:d5:6e:8a:
                    60:33:03:22:2c:c6:08:a7:61:10:75:57:9e:52:87:
                    10:92:47:00:92:1d:3b:15:0f:ce:24:c3:90:9c:54:
                    3c:4a:ee:28:b5:12:7e:4b:39:ff:a2:14:e6:84:e4:
                    a9:62:e8:26:93:67:e2:ff:c1:32:ff:f7:6d:a5:20:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2C:01:5F:44:DF:12:A1:50:C5:E2:A1:F7:0F:B5:54:6B:1A:0F:38
            X509v3 Authority Key Identifier:
                keyid:01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a1:8e:bd:d7:20:70:43:08:02:5a:b2:4e:c4:ac:9c:4b:84:
         3f:d7:ea:2b:1c:fb:29:59:e8:50:e8:ba:f2:bf:54:be:a4:8e:
         dd:55:31:8d:14:fa:9b:64:78:2f:eb:47:71:01:f9:5c:89:35:
         cd:4d:09:37:e5:d2:d0:fd:17:74:eb:79:ae:f8:22:fe:b7:c8:
         f3:d3:95:af:6b:36:ff:0e:8d:b6:19:0d:7c:cb:f8:bb:76:23:
         e8:b1:6b:f3:88:dc:e6:49:a1:a1:82:88:f2:ec:89:76:9e:9b:
         cf:3d:83:34:32:c8:53:4c:18:d2:6b:1f:71:a8:c2:eb:3c:2c:
         8c:bd:dc:2c:65:88:49:74:e2:5f:e2:03:03:fe:9a:1c:76:80:
         1d:d8:51:d5:38:68:14:66:05:f2:4c:a8:61:8e:ca:44:2b:5e:
         09:63:4d:9b:7c:77:28:db:b0:5e:59:26:ac:35:82:d5:0e:57:
         b9:63:51:b1:2d:44:bf:9c:bc:7c:1b:a3:68:9d:aa:da:d7:2e:
         45:6c:e7:60:a5:a0:b8:31:2c:a5:44:b3:9a:ea:48:0b:ef:db:
         2a:f9:a6:d8:b0:fa:10:5a:37:26:4d:32:35:03:bd:1c:04:6f:
         92:ac:73:b2:b9:42:2e:32:ca:f5:85:52:ac:26:be:bb:90:2f:
         c0:10:35:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:24:58 2026 by rpki-client