Error: rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
File:                     mWvkN8G_DqgPwtdP55XVl9183_Y.mft (raw, json)
Hash identifier:          P6/nBeG57PsAjyODjD2wfpXwfC/HwNth5ElCvvmWqV8=
Subject key identifier:   90:F8:C4:D8:DE:94:7E:93:13:39:35:B4:14:30:F4:DD:E0:7F:E9:98
Authority key identifier: 99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6
Certificate issuer:       /CN=F36B9EC5AF/serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
Certificate serial:       0ABC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
Manifest number:          0ABB
Signing time:             Sat 24 Oct 2026 01:30:48 +0000
Manifest this update:     Sat 24 Oct 2026 01:30:47 +0000
Manifest next update:     Mon 26 Oct 2026 01:30:47 +0000
Files and hashes:         1: mWvkN8G_DqgPwtdP55XVl9183_Y.crl (hash: O/lFmmupMb7i2IBtJVqn27ysWW6IpmKnTgWbUChSs28=)
                          2: 457616CC92AC11E9AA1A230CF8AEA228.roa (hash: a111sZs2PjYe+Z7xTRVrDgikHwjH0gy6/kJWglkiGK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2748 (0xabc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9EC5AF, serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
        Validity
            Not Before: Oct 24 01:30:47 2026 GMT
            Not After : Oct 26 01:30:47 2026 GMT
        Subject: CN=6adc0a47-29d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:51:17:38:3f:d3:96:cf:e6:a4:7e:a3:30:82:
                    68:cb:43:27:fb:00:f0:ac:64:ce:fc:e2:ef:65:ef:
                    5a:d1:c4:2a:29:ca:5f:d7:85:8f:c8:f6:59:09:03:
                    dc:17:47:49:4d:db:60:c3:8f:69:9f:32:7e:98:66:
                    12:ee:90:a6:ea:d7:2c:86:66:c5:68:d6:dc:1f:b3:
                    85:45:5d:2f:5a:05:60:14:c9:99:9d:af:d8:7f:3f:
                    c4:c0:2e:22:76:fa:46:81:d9:c7:55:bf:e3:61:dd:
                    9e:b7:14:5e:ce:9f:82:ed:d8:e0:c2:61:51:50:58:
                    a4:53:35:e6:f1:d2:ea:f0:56:70:1d:23:13:49:66:
                    99:4a:fb:04:ce:70:26:6b:77:af:e4:aa:eb:c2:6a:
                    7a:3e:70:96:00:ff:23:bb:db:32:01:52:97:bd:4e:
                    0c:b8:b4:0d:74:7e:75:c3:dd:ad:66:f4:2d:2f:b3:
                    a2:73:9b:64:4d:f0:b4:0e:69:b6:c7:b7:9f:46:ac:
                    82:61:db:01:9e:40:3d:41:9e:a7:bb:e3:2a:24:da:
                    0d:5e:fd:de:72:c0:bd:19:6f:b0:c9:4d:4f:44:1d:
                    cb:bd:3a:3e:27:21:30:c8:8a:0a:50:cc:09:85:63:
                    01:bf:77:cd:1e:96:ec:7c:89:b0:c1:a8:20:9d:12:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F8:C4:D8:DE:94:7E:93:13:39:35:B4:14:30:F4:DD:E0:7F:E9:98
            X509v3 Authority Key Identifier:
                keyid:99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:dd:f7:ba:44:b8:9b:1e:1a:f7:52:3d:90:c2:77:0c:78:
         66:06:83:a9:6e:23:53:27:3e:24:e7:2f:f8:3a:0b:74:b0:84:
         3f:6c:c9:12:17:7c:5b:b1:3d:7f:89:62:86:8c:26:77:af:bd:
         81:dc:6b:ce:f3:68:7c:fd:81:b9:ad:6a:3f:4f:02:80:17:e0:
         22:77:98:12:28:70:54:ba:76:55:1e:65:49:95:71:ee:16:a4:
         aa:e7:43:0e:f7:31:41:7d:f3:b1:a3:76:b7:fa:f1:36:14:5c:
         59:19:19:9b:f9:b6:45:38:1f:16:3a:30:e9:70:79:89:7c:80:
         2b:02:5c:85:7f:3d:3b:6d:30:ce:34:61:7b:43:b3:2b:2a:25:
         8f:2f:7f:b4:e4:51:95:c8:d8:8a:d1:7e:fe:3d:8c:4c:15:b3:
         7e:ff:21:48:c0:8b:e0:7d:69:93:71:7e:bb:89:d1:ba:b3:ef:
         1e:c4:05:a8:1a:dd:37:63:eb:d4:cd:1c:e4:3d:79:1b:5c:e2:
         d3:78:41:79:35:7d:bd:29:6a:fb:a2:2f:8f:01:57:09:47:62:
         16:cd:21:0d:a0:af:4c:70:ce:0c:6f:65:57:b6:9e:25:22:98:
         e3:32:15:f7:7a:4d:e0:1b:30:1a:cf:d8:8c:86:62:6e:7b:1e:
         11:da:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 08:24:53 2026 by rpki-client