Error: rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
File:                     Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft (raw, json)
Hash identifier:          in3CmkVtzhsQZsXFt/Hv3zqz+WWkODxqQy6bALPsPsM=
Subject key identifier:   85:A5:50:B4:13:E1:BF:F0:61:2F:24:B7:E5:94:45:FC:80:6D:72:39
Authority key identifier: 0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A
Certificate issuer:       /CN=F36B222DAF/serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
Certificate serial:       016E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
Manifest number:          016D
Signing time:             Sun 25 Oct 2026 05:12:16 +0000
Manifest this update:     Sun 25 Oct 2026 05:12:16 +0000
Manifest next update:     Tue 27 Oct 2026 05:12:15 +0000
Files and hashes:         1: Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl (hash: C1izHpx81StAFRDwFHXNXVEYkVSC9HWzDJdGksDgKpM=)
                          2: C4BDCF3CB82B11F0B7DB80E1DAE4EC9C.roa (hash: tOfIeOAf4uXl6pOeSJ1Xju9VQWrYerPezpD2f2dwyfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B222DAF, serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
        Validity
            Not Before: Oct 25 05:12:16 2026 GMT
            Not After : Oct 27 05:12:15 2026 GMT
        Subject: CN=6add8fb0-cc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bc:51:9d:58:a3:49:8f:f7:ca:8f:ea:0a:3d:
                    1b:7f:ee:4d:20:6c:58:98:2b:06:6b:2d:98:49:10:
                    fd:86:84:10:be:9a:da:80:d6:21:f6:db:0d:19:bd:
                    12:e3:f7:08:95:0e:39:d3:45:ea:18:f8:5f:5a:3f:
                    cd:03:01:6b:d0:6c:1c:32:60:68:89:a8:16:83:76:
                    f1:7a:eb:5e:21:3b:a1:df:f0:1f:b5:eb:7c:ff:8c:
                    60:9d:58:98:94:7c:eb:b0:47:cb:e0:ea:66:c5:b6:
                    eb:ef:15:f8:de:3d:19:4e:b8:04:13:1d:52:68:79:
                    e5:ec:41:8d:ae:d7:d9:17:ba:cd:b1:95:4e:8c:8b:
                    67:d1:25:df:9f:aa:05:e5:91:2e:f6:de:7c:64:8f:
                    20:0d:43:0d:89:38:2f:50:6c:5a:33:0a:52:c2:08:
                    d5:ed:45:a7:f9:ea:d7:81:08:c3:38:c1:98:af:bb:
                    69:ce:dd:b7:85:1a:be:ab:72:e6:7a:3f:33:51:27:
                    e2:10:94:8c:35:60:cc:e2:c2:86:ff:38:77:0d:07:
                    95:ee:86:85:36:b9:b8:b8:b5:69:60:63:d1:70:21:
                    f6:29:dc:96:d0:9a:2f:35:ba:6f:34:80:e1:6d:12:
                    ba:73:54:e6:5e:42:ac:55:af:1b:73:b5:98:e5:d1:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A5:50:B4:13:E1:BF:F0:61:2F:24:B7:E5:94:45:FC:80:6D:72:39
            X509v3 Authority Key Identifier:
                keyid:0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:2b:2f:6d:59:53:91:f1:4a:86:d6:c2:c1:cc:3f:79:1d:6d:
         57:3f:e4:dc:64:7f:c2:f0:fc:b9:5c:5e:dd:bb:9c:80:41:70:
         c4:c5:92:2c:df:fa:86:97:6e:ea:3b:9b:a6:da:e1:3c:56:23:
         bf:44:a2:5a:85:ee:93:6a:82:76:fb:19:59:73:22:69:41:53:
         d8:b1:6a:63:e3:b0:d7:9e:1d:41:5e:51:85:43:0e:8f:f5:83:
         37:44:95:64:9a:d9:8a:24:88:16:cc:49:d5:e3:f5:24:75:b9:
         05:eb:69:71:d8:ca:67:11:d5:8a:a6:82:ca:4e:3e:fc:bc:e6:
         0c:fe:f6:39:67:a5:c2:ea:4a:e3:de:9b:1e:83:88:9d:b2:7e:
         e1:12:34:b7:4c:4e:8c:5a:64:79:8e:63:c4:c5:d3:8d:3d:c6:
         fb:3f:5a:c8:32:a7:b5:c0:16:fe:a0:91:2e:08:bf:1e:98:11:
         3b:93:16:6a:66:5e:af:8c:a2:ac:27:3c:cc:11:19:30:29:df:
         36:f0:5e:7f:2e:0f:b1:91:ee:c8:c1:6d:da:1f:c4:49:7f:f3:
         2f:2b:5c:23:58:ad:04:b7:9f:eb:83:0a:e8:7b:fb:27:d4:5f:
         ea:2c:9f:c9:72:8e:7a:3c:e6:20:1c:55:73:e4:31:de:ae:2b:
         9c:14:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:06:43 2026 by rpki-client