Error: rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
File:                     XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json)
Hash identifier:          HOWB/xk1EcbsdCWhKWExGfWu/xDlY4kzSRqKNR1RZ1I=
Subject key identifier:   D6:87:57:A4:0C:34:EE:DA:61:F4:80:84:43:2A:2D:8C:D8:3E:65:D7
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Certificate issuer:       /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial:       0510
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
Manifest number:          0500
Signing time:             Sun 25 Oct 2026 03:29:12 +0000
Manifest this update:     Sun 25 Oct 2026 03:29:11 +0000
Manifest next update:     Tue 27 Oct 2026 03:29:11 +0000
Files and hashes:         1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: 5i8wkszijiWDhWPfKxn9rdH7Il4tDj0o24enwiEM0Ls=)
                          2: DEAA31D852A411F19BAFC4E7CE1D38B0.roa (hash: NlGJ9Fu2KD7bBdpzwrMNS3dq9S7KYOxVJin74O+cf6Q=)
                          3: 6755753852A511F18B0707EACE1D38B0.roa (hash: nzSoNfGbTsEtiebZovzm8gDKi70ZiKZA1QZGabI/6uw=)
                          4: 3CD2137A52A511F188ADFFE9CE1D38B0.roa (hash: evhWeXQLaV4zwXSsmlcLuOv+UAoeBUgww23rfwSfng4=)
                          5: 0E6074FA52A511F187479FE9CE1D38B0.roa (hash: qmsm209xtAFWImZocN27LMHqGAIJP4T5JyMpaW7qQDU=)
                          6: 3AD17B4852A411F18433B2E3CE1D38B0.roa (hash: oaElfRftqLvCyVv+pEr2pAOJ1u5zOSHWd0gK4S3VFZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
        Validity
            Not Before: Oct 25 03:29:11 2026 GMT
            Not After : Oct 27 03:29:11 2026 GMT
        Subject: CN=6add7788-1451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:68:d8:61:da:9f:ed:87:fb:2a:fd:f2:92:
                    26:b9:78:a9:b7:6f:a2:62:42:30:dd:81:2c:8a:ff:
                    26:86:0e:3a:07:bd:a1:8f:e3:89:44:47:75:16:7b:
                    d6:01:cb:02:ae:4e:dc:fc:17:79:af:65:f7:73:2f:
                    f7:ec:af:df:72:bc:1b:73:2f:8d:fb:cb:28:45:1b:
                    37:44:5a:69:99:79:1e:93:1e:64:f3:e0:4e:81:bb:
                    d5:7e:e1:a3:a9:b1:46:c7:f1:9a:c5:9d:fe:a3:c5:
                    6a:5d:ba:d9:cd:46:e0:e2:b3:7a:0e:89:09:bc:b0:
                    98:14:eb:95:e5:69:cf:d7:63:04:36:3d:49:7d:be:
                    bd:92:20:4b:af:fe:cd:18:53:8f:ab:f0:92:00:cc:
                    f3:16:d5:db:30:3d:c2:28:fa:be:d4:6f:ec:7c:70:
                    07:66:71:2e:28:6e:8d:b6:8e:2a:3a:fd:cc:c9:bf:
                    71:28:bc:de:5b:0b:27:c8:33:93:86:74:af:5c:dc:
                    ef:03:fa:23:18:88:51:65:9e:09:12:13:c4:9d:20:
                    21:f5:13:52:8b:1d:80:91:b0:60:6c:6f:a5:f5:9d:
                    78:86:b4:ca:b7:9e:bf:a2:3c:a8:66:6d:31:e1:57:
                    c1:9d:99:e5:2e:f3:07:ec:9a:1d:d8:67:90:9d:01:
                    27:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:87:57:A4:0C:34:EE:DA:61:F4:80:84:43:2A:2D:8C:D8:3E:65:D7
            X509v3 Authority Key Identifier:
                keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6d:e8:1d:32:ff:a8:a3:bf:f8:91:27:c6:be:ea:d1:af:7d:
         0e:20:81:86:5c:c7:35:71:05:c7:3e:67:bb:52:9d:a9:03:8a:
         a1:de:bf:ac:65:15:dc:7e:7c:67:05:07:e0:0a:d5:f0:88:51:
         10:c2:18:37:09:f6:d9:db:49:66:2b:c0:11:f8:21:b9:69:2d:
         04:ad:6a:e3:7c:8c:dd:7f:6e:82:f8:26:45:ca:3e:ba:b9:ae:
         1b:e2:ae:65:3b:53:a8:1c:ad:ac:64:3b:3e:0d:52:b0:2a:7f:
         f3:59:a3:a9:4e:5d:04:26:01:9a:e0:23:09:2c:fb:43:94:97:
         0c:7f:d2:e1:d0:20:11:8a:77:00:f0:68:cb:12:e9:8d:ce:fe:
         5a:54:84:a1:cd:ad:a2:1a:ca:a6:91:33:77:d7:11:15:3f:b8:
         d7:73:ce:f1:e5:88:e3:47:f1:50:a1:53:e1:c1:cc:da:66:6a:
         d4:ab:00:b0:df:67:80:b8:7f:45:bc:9c:5f:e0:bb:7c:e1:2b:
         55:e9:97:b1:59:8f:f8:a3:c7:39:63:4a:90:5f:f2:3b:6e:a7:
         f8:c1:6a:c7:78:d7:95:5a:36:fb:ad:dd:9a:27:ca:55:0c:7a:
         88:e2:d6:89:16:0f:6a:88:0d:9f:36:75:ec:d5:2e:9f:3e:b9:
         e0:56:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:54 2026 by rpki-client