Error: rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
File:                     0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft (raw, json)
Hash identifier:          S9mtA3ppNPHsQFeFBUE1F04Tiw3cS3xRD8/vUsTemPE=
Subject key identifier:   27:24:25:7B:50:46:B0:F8:D4:32:0B:02:20:57:5A:90:3A:1E:13:A4
Authority key identifier: D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
Certificate issuer:       /CN=F36C04EAAF/serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
Certificate serial:       015A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
Manifest number:          0159
Signing time:             Sat 24 Oct 2026 05:17:15 +0000
Manifest this update:     Sat 24 Oct 2026 05:17:14 +0000
Manifest next update:     Mon 26 Oct 2026 05:17:14 +0000
Files and hashes:         1: 0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl (hash: i3fmuyFAwaYYtUc7vQ1Q0lIUFT7OTMn69zDZi/8ivn4=)
                          2: B44DBBD6C4A011F0BB1FE885DAE4EC9C.roa (hash: 22n46w2qwRYfa/D7JhUZRieOUn/D6egNiKVqvc6gQks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C04EAAF, serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
        Validity
            Not Before: Oct 24 05:17:14 2026 GMT
            Not After : Oct 26 05:17:14 2026 GMT
        Subject: CN=6adc3f5b-f8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:ab:9e:5e:5a:87:4a:e5:f8:53:ef:b5:28:
                    0a:af:63:b0:19:b4:89:d1:c1:ca:22:16:6d:6a:0f:
                    29:b2:74:90:15:e0:d3:21:14:6b:ca:b6:9f:73:95:
                    68:ff:1e:2f:cc:44:b5:1b:a4:0a:ee:9b:af:60:8c:
                    38:fa:aa:69:bb:61:4c:47:27:17:5e:54:06:26:ee:
                    18:26:6c:9d:62:b2:da:e1:9d:fd:02:28:30:f3:8f:
                    3b:2c:e1:e2:a1:1d:1a:85:b1:ae:e4:96:c0:92:82:
                    5a:06:77:7d:b0:dc:25:e5:e6:d1:f7:32:44:3e:32:
                    97:cb:0c:28:48:99:9b:ac:9e:34:af:6f:72:a4:23:
                    d0:41:71:bc:e3:7b:e2:90:94:ea:3a:5f:ef:56:c5:
                    36:1f:00:d6:92:d2:6c:3e:a1:70:8f:a2:92:9f:a0:
                    51:07:2c:76:54:f9:bb:d4:af:e6:da:ff:3b:6d:ea:
                    10:90:2b:d8:68:86:1b:8b:97:21:dc:10:7e:e1:9a:
                    e6:81:69:5f:17:1c:d5:a1:4a:ec:f2:d6:7e:41:30:
                    34:11:68:e2:6c:01:2f:6b:34:77:42:b6:87:e2:ec:
                    f1:71:38:24:80:2f:c7:33:3f:dc:d4:9d:cf:ed:b2:
                    14:1c:c7:87:d1:79:7f:f6:54:56:f7:ef:60:a2:4f:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:24:25:7B:50:46:B0:F8:D4:32:0B:02:20:57:5A:90:3A:1E:13:A4
            X509v3 Authority Key Identifier:
                keyid:D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:67:25:60:4f:56:70:00:fc:43:96:91:13:ae:83:cb:b4:e0:
         61:dd:12:47:82:91:b7:ea:ee:6f:ad:2e:7e:38:83:37:39:12:
         be:0e:d2:2d:b4:49:8b:ae:30:e9:86:04:61:ed:55:ac:34:dc:
         87:7a:2f:0c:04:d7:63:3c:d9:59:9e:c1:8d:96:60:e7:fd:47:
         e2:f1:dc:ee:56:c2:12:06:94:01:96:54:33:55:91:0c:8a:8a:
         22:8d:ec:c8:a2:15:fc:a6:b0:1f:0f:15:ce:b4:37:7c:ab:8e:
         31:37:6e:ba:30:c3:c0:72:43:08:fd:20:fd:dc:6e:9f:26:3e:
         8c:71:b6:be:60:e6:27:4c:02:19:cc:21:ba:64:39:3d:03:2c:
         42:ad:1f:97:06:a8:ce:02:ae:26:3f:c6:55:7b:44:d3:68:3c:
         65:00:91:9b:6a:89:6c:d6:23:d6:7d:c8:d7:e4:33:2e:67:ce:
         f4:4f:85:ad:9e:53:ea:31:ac:66:27:ff:a6:9d:ec:29:b3:6f:
         cf:49:2f:d4:f3:82:ec:81:d7:11:97:50:07:35:74:33:a8:33:
         09:f7:b6:dd:ec:57:d0:41:df:10:03:09:6b:34:7c:6c:c1:56:
         c2:dd:fd:81:1e:84:d1:13:2d:f9:f5:4d:4c:42:fd:94:b1:96:
         fe:4e:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:12:50 2026 by rpki-client