Error: rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
File:                     mN_xVrpdOxH6ps0Beov2VCUd68c.mft (raw, json)
Hash identifier:          7NJ7ap2sCl0dHRIFKiwzeNubtSXW7GIfixMMjljluvw=
Subject key identifier:   2E:22:FA:63:07:5D:D7:6C:F0:F9:42:FC:FA:40:46:9F:DA:BF:70:F5
Authority key identifier: 98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7
Certificate issuer:       /CN=F36A1982AF/serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
Certificate serial:       0204
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
Manifest number:          0200
Signing time:             Sat 24 Oct 2026 04:56:26 +0000
Manifest this update:     Sat 24 Oct 2026 04:56:25 +0000
Manifest next update:     Mon 26 Oct 2026 04:56:25 +0000
Files and hashes:         1: mN_xVrpdOxH6ps0Beov2VCUd68c.crl (hash: nzM++tGFufuUFXdG7FQHb6wnRo+F9HqJv7/S3Mb/acs=)
                          2: D2FA44589C6011F1B8DD4813CF1D38B0.roa (hash: hXG29WZ9gIw6Ovjrleo65ug3xqHYZi4HJYO7R16FihU=)
                          3: 7832FB8A45D311F0AC0634DDDAE4EC9C.roa (hash: cfPkV/3/J2Pr+p9FB17NDz/hy3nd+JaytMl2veZxtBo=)
                          4: D87AD8E69C7111F19CDB70F7CE1D38B0.roa (hash: WoxmRBNYxtlklGhzUk4A1A/VNqHlUjBfPcsPhHsejnY=)
                          5: 553164D49C9711F1815829D7CE1D38B0.roa (hash: wVWSeXVlQ34ZCg2wQQL7tOgF8T/M9yaqQVdvI4IZzIU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1982AF, serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
        Validity
            Not Before: Oct 24 04:56:25 2026 GMT
            Not After : Oct 26 04:56:25 2026 GMT
        Subject: CN=6adc3a79-9edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:e4:9a:93:47:f6:e5:02:7f:d9:6a:38:b1:
                    f4:aa:03:1c:dc:79:5b:fc:0b:e1:87:01:81:15:42:
                    34:e5:16:ad:ab:c8:fd:49:e6:60:04:70:57:2c:8c:
                    6e:72:62:c3:c1:14:1d:bd:13:be:04:0e:c0:e3:86:
                    8c:63:6e:23:c7:87:1f:de:f3:56:a3:5c:4d:4a:98:
                    57:39:33:ff:55:4c:6f:da:ed:fb:be:14:04:90:23:
                    6f:1d:8d:bc:6f:28:bf:a1:62:86:fd:88:af:a4:2c:
                    cc:48:9e:68:c1:1d:42:16:f9:59:32:21:14:0a:0e:
                    13:16:8d:93:27:76:ff:f8:70:21:00:b9:bb:f9:a8:
                    42:dc:26:ea:89:67:c7:25:34:f0:59:7e:8d:53:c4:
                    b3:bf:88:8b:d7:38:16:55:49:82:43:df:18:e1:5b:
                    76:a4:65:84:27:5d:91:15:9f:6f:2c:6e:c0:b4:b5:
                    2f:bf:c0:53:1c:f2:a7:47:a9:18:ad:ee:d0:2b:21:
                    1d:ff:a0:9b:95:57:8d:a2:0d:e4:5d:6b:7e:59:b6:
                    98:08:9d:c9:12:6a:70:0b:86:d3:8c:c0:19:9e:40:
                    90:96:8d:b1:91:85:7e:6d:ed:ff:a3:c7:20:d4:02:
                    77:7c:6f:90:17:19:7a:f1:32:87:ae:7f:94:3c:ed:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:22:FA:63:07:5D:D7:6C:F0:F9:42:FC:FA:40:46:9F:DA:BF:70:F5
            X509v3 Authority Key Identifier:
                keyid:98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:76:6e:fd:70:c2:31:0a:ea:28:27:0f:8f:44:1c:8e:3d:24:
         b8:2f:c5:f9:88:65:8d:cb:be:a0:81:3c:91:e4:82:c0:7a:59:
         32:45:4c:16:46:64:5a:5d:0c:26:4a:37:02:30:9a:f0:b3:06:
         a8:cb:ac:f5:8a:4a:b0:b4:1b:4e:01:4d:4b:bc:57:21:1c:5d:
         87:42:25:bf:7c:bb:a1:2e:eb:41:79:fe:92:66:ba:14:69:60:
         fc:18:0f:dd:c6:69:a9:44:d7:0b:8f:76:9b:1f:b7:26:a7:87:
         13:cc:5e:02:df:0b:8a:db:1a:32:72:42:4b:1e:5f:37:dd:38:
         74:55:d5:25:05:8b:93:c6:c1:d0:45:c7:d3:e2:ae:f3:cc:2f:
         cc:90:aa:9b:41:0d:df:5a:33:e5:c0:fa:94:a0:84:71:22:8b:
         7f:9e:5c:77:20:e2:e5:37:a8:66:63:dd:01:b2:6e:7c:cb:5c:
         7b:1e:2d:6d:9c:12:33:ad:4e:6e:ba:ec:26:82:a7:b3:5d:f9:
         69:81:41:7a:43:e2:4c:6a:b8:f8:c4:2f:53:94:49:99:1c:ee:
         41:42:66:9d:cd:f7:74:0e:57:1b:b8:a4:c1:fe:14:90:ee:d5:
         0a:bd:c1:1b:ee:cf:a1:c3:34:3a:41:72:eb:94:42:65:3a:bf:
         c0:00:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:09:10 2026 by rpki-client