Error: rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
File:                     mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft (raw, json)
Hash identifier:          6S9IRUhQ6xDPUlibYyPUvqsnZeRbA8wo8oPnu8iWUHA=
Subject key identifier:   98:CE:0F:2D:25:CB:8D:C8:BB:FF:46:EB:F9:96:8A:1B:50:30:D8:47
Authority key identifier: 98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB
Certificate issuer:       /CN=F36B5362AF/serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
Certificate serial:       018C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
Manifest number:          018B
Signing time:             Tue 27 Oct 2026 05:09:52 +0000
Manifest this update:     Tue 27 Oct 2026 05:09:51 +0000
Manifest next update:     Thu 29 Oct 2026 05:09:51 +0000
Files and hashes:         1: mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl (hash: kP+P7MSCnLZgO9k3LZEMK8T+Mi5u9uFo/fshMOe+/xE=)
                          2: C9A68EA4A28611F086BAC69BDAE4EC9C.roa (hash: 7VlIZ2iujVms/bcZzJtHMjuTIN2+7NdE9XhtEe0/jW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5362AF, serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
        Validity
            Not Before: Oct 27 05:09:51 2026 GMT
            Not After : Oct 29 05:09:51 2026 GMT
        Subject: CN=6ae03220-a1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:b5:fd:1e:e5:29:71:f3:8d:68:8a:8e:5b:
                    87:ee:f8:f9:69:9e:fd:e2:45:b9:71:97:f2:6e:7b:
                    60:de:9b:f8:07:77:d2:6d:8a:ff:ea:06:24:a6:d8:
                    f1:c8:90:e0:1d:7e:32:62:b5:4f:4c:60:c2:99:af:
                    2a:91:e7:84:44:9a:80:50:5f:c3:f6:74:60:84:20:
                    ed:0d:1e:85:0b:16:0f:8a:3f:5b:23:ee:1a:61:69:
                    e3:87:59:57:3b:ca:3e:2c:ab:85:c9:be:93:62:8e:
                    6e:5b:48:a1:af:79:19:60:c1:c1:46:4a:a4:56:b5:
                    ff:30:db:c3:67:f0:10:44:57:a8:86:44:53:37:bf:
                    95:50:5a:74:29:e6:9b:ad:c7:5e:0c:08:51:3f:2f:
                    fa:59:95:be:3c:76:d2:fa:4a:a7:d4:78:3e:ec:9e:
                    ad:32:5c:95:39:be:0e:6a:b5:aa:6d:9c:b8:6b:8b:
                    ca:49:4a:a8:8d:7a:96:45:97:c2:87:a1:ea:56:ae:
                    51:00:45:91:26:ce:3d:91:c4:e5:a4:c3:ae:b7:91:
                    d4:03:1d:26:b1:0b:cc:87:99:2b:22:db:48:7d:3d:
                    43:37:60:3d:4d:7b:05:fc:e2:e8:30:a0:eb:fa:dd:
                    fd:01:c1:ef:16:96:7d:13:ac:03:c2:4e:7a:d6:2f:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CE:0F:2D:25:CB:8D:C8:BB:FF:46:EB:F9:96:8A:1B:50:30:D8:47
            X509v3 Authority Key Identifier:
                keyid:98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:00:c1:12:b8:86:14:e5:56:7d:5a:62:8d:ea:9a:e1:c5:27:
         ae:98:56:5a:7d:a0:84:6a:c3:a8:0d:d8:bd:01:c9:cc:9c:12:
         71:a7:70:ce:bc:a2:f8:81:39:4f:4a:f8:ca:d0:89:d9:c6:81:
         38:76:9a:1e:49:16:73:36:35:b8:65:8a:36:8b:00:c1:a6:6f:
         26:6e:8d:c7:79:91:ea:1d:ce:28:06:d0:b2:93:f7:fb:9b:31:
         0d:99:f2:83:30:13:05:6d:62:c4:37:f6:e7:47:50:99:af:42:
         9a:67:0f:c4:27:43:ba:28:3e:06:e0:5b:cf:67:bf:f9:e9:e7:
         3e:bb:92:2d:6e:e2:5d:40:3f:c3:54:c9:5c:34:8b:91:48:34:
         31:31:17:aa:79:52:81:63:c4:3a:c0:aa:07:7e:15:42:5d:2c:
         c2:e7:cc:a2:3e:2a:52:1b:11:ee:2e:08:f8:f1:9c:69:78:ec:
         78:8b:4c:7c:46:5c:5f:d6:89:7e:ac:b0:cb:1f:19:c8:31:87:
         5c:78:db:fc:8e:b9:fa:72:a7:f7:be:c6:09:20:94:c4:d1:1c:
         da:61:f8:33:d5:57:47:89:21:5b:ac:5c:4d:24:31:28:64:bf:
         b4:68:7c:e5:96:b5:e8:0e:6f:e4:c6:9f:ff:f4:11:ab:f0:47:
         10:01:77:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:42:08 2026 by rpki-client