Error: rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
File:                     rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft (raw, json)
Hash identifier:          CmDaUDYdV0WqMw1b2hCXJ25zRHU3/41eaQgZq+HBtzk=
Subject key identifier:   7B:FF:FC:53:DE:FA:BD:EE:67:0E:0E:B8:9E:70:F3:83:0A:E4:F4:EE
Authority key identifier: AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F
Certificate issuer:       /CN=F36A4C9EAF/serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
Certificate serial:       064E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
Manifest number:          064B
Signing time:             Mon 26 Oct 2026 02:50:18 +0000
Manifest this update:     Mon 26 Oct 2026 02:50:17 +0000
Manifest next update:     Wed 28 Oct 2026 02:50:17 +0000
Files and hashes:         1: rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl (hash: 9dCP9nEXULvtEIajmrKbhM4OCrYSTH06/GFlIi2ITjg=)
                          2: 6F27B5E28CB511F18D0AA307CF1D38B0.roa (hash: X/8eYGF/63BXbAo7SJEY5dctGMMZyTbvyC7szGLqilY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4C9EAF, serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
        Validity
            Not Before: Oct 26 02:50:17 2026 GMT
            Not After : Oct 28 02:50:17 2026 GMT
        Subject: CN=6adebfea-9bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:b2:f9:2b:7a:4b:a4:81:ec:3d:ac:7d:f3:
                    ab:e6:d4:6d:fe:8e:d9:3e:b8:9e:5a:8b:c4:49:ac:
                    a8:41:68:ce:57:7e:0a:a4:e4:11:b5:b1:52:bb:4f:
                    d7:db:4e:b2:25:4c:29:9f:21:34:f6:3f:83:d4:ca:
                    8e:44:3c:bc:d4:c0:a8:b0:12:28:6f:bc:4b:d4:46:
                    14:07:93:d8:82:5c:2a:e3:2b:cc:3a:3c:ec:c6:41:
                    3d:c2:a5:76:b4:62:67:9a:3d:50:f6:5f:aa:90:6d:
                    75:10:48:86:af:1b:78:5f:ae:e7:58:a8:f3:c3:78:
                    3c:30:16:08:a4:fc:f0:91:35:03:15:2a:e4:4f:ca:
                    7a:2a:c0:d9:cd:a4:e9:31:2d:a7:8b:da:1f:4f:d6:
                    af:a9:4f:ff:2b:37:0d:89:49:11:8a:99:ca:2a:20:
                    5a:c2:ec:4d:94:50:1d:8e:10:58:50:90:f8:c1:f5:
                    5f:d8:72:2a:34:3c:27:b3:a3:a2:30:f6:f8:04:b7:
                    f2:46:c3:c1:9a:8e:4a:22:d9:ff:c3:83:d5:4d:6d:
                    2d:00:98:c8:03:a0:cb:9f:9a:d2:41:3a:5c:d4:12:
                    9e:60:23:2f:96:4d:3a:2c:d9:9c:3a:3e:e7:be:54:
                    57:84:61:70:cd:61:af:08:ce:7d:f7:ef:f3:1e:55:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FF:FC:53:DE:FA:BD:EE:67:0E:0E:B8:9E:70:F3:83:0A:E4:F4:EE
            X509v3 Authority Key Identifier:
                keyid:AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:84:54:bb:99:8b:e8:20:dd:cc:fd:65:c9:33:cf:95:d7:1b:
         05:c4:ca:8b:94:32:4b:d8:fb:f8:0c:9c:25:d0:27:b1:77:c4:
         ab:61:11:17:ab:c2:7a:3b:0a:a3:94:ae:05:68:bc:ae:3f:57:
         06:b0:af:f8:cf:45:28:65:19:31:16:86:c3:1d:1e:7e:10:0d:
         49:03:c5:34:f6:d1:c8:b8:95:a3:28:eb:cc:6e:9a:64:26:d1:
         16:ec:af:01:34:3f:62:c3:8c:b5:04:07:9e:24:3e:91:03:62:
         68:09:29:44:82:cf:47:dc:ad:39:24:4a:2d:55:31:3c:f1:f2:
         d1:d8:30:e4:49:b0:6d:4e:9d:fa:b2:05:c6:65:fb:df:b1:2b:
         39:32:f0:8a:d0:0d:81:92:55:78:13:f0:6e:c6:c6:24:b0:0a:
         7b:e5:19:77:98:15:9f:25:b9:ae:cf:ee:4e:31:37:e8:d4:be:
         4c:db:19:db:65:02:a0:5f:a8:4c:05:07:6d:9b:ba:30:24:c8:
         d2:7f:04:88:97:0f:6a:2d:f1:5f:c5:1a:06:28:94:3e:4f:17:
         6f:b5:34:13:3e:f8:91:0f:9f:82:2d:4f:a8:cd:d4:c7:f2:10:
         f9:a7:07:d3:94:fd:28:2a:b3:39:32:a5:17:0a:a2:e3:2f:a8:
         b4:15:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:49:32 2026 by rpki-client