Error: rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier:          mXZ2oOd8Pygyjn4L0HQxWtlmrJ8NMwIwC2ESYczZHwQ=
Subject key identifier:   6E:17:FC:F3:AF:E7:9D:B0:16:91:DC:4E:60:DE:02:E8:00:5E:09:5F
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer:       /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial:       08CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number:          08C7
Signing time:             Sun 25 Oct 2026 01:55:05 +0000
Manifest this update:     Sun 25 Oct 2026 01:55:04 +0000
Manifest next update:     Tue 27 Oct 2026 01:55:04 +0000
Files and hashes:         1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: ya3NSgKs9kKazR3GvtEAQNlQDZdBZ7zSpTcaAM+uvig=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 01:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6DD4AF, serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Validity
            Not Before: Oct 25 01:55:04 2026 GMT
            Not After : Oct 27 01:55:04 2026 GMT
        Subject: CN=6add6179-4dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9b:72:91:cb:31:6a:8a:10:4c:82:34:d9:9e:
                    45:2e:02:f1:04:ba:e1:48:59:cc:cd:45:a3:0e:52:
                    00:51:77:4f:f9:f3:cd:6e:8d:0f:c5:fa:34:da:35:
                    1e:a8:3a:f8:c5:1e:cb:c5:e1:15:af:ec:f1:93:56:
                    5e:d4:41:2b:1f:f0:d4:45:fa:62:74:f3:49:6d:a3:
                    24:60:24:2c:49:79:97:74:92:f5:dd:5b:62:74:b6:
                    a9:ca:e0:1d:3d:21:8f:c8:72:0f:29:eb:3e:f0:6b:
                    2a:ba:17:99:c6:8d:42:0e:15:38:c1:b8:aa:67:81:
                    53:2d:50:76:f1:3b:dd:8d:2d:de:40:a9:2f:00:4d:
                    b5:37:60:d8:f3:3e:32:9d:e7:63:f6:bd:3f:57:4d:
                    31:26:fc:f4:e7:11:47:15:b4:04:29:31:53:2e:df:
                    c2:8f:61:ef:f7:a4:b3:ec:66:17:e6:4f:4a:18:2d:
                    db:2a:a6:27:91:11:b3:51:70:ee:18:79:9f:3f:fe:
                    f3:19:94:dc:37:3f:ff:c2:5e:22:13:88:f9:bc:26:
                    30:a8:8a:b5:8d:46:d3:be:4c:6b:09:73:4f:07:e6:
                    c4:ae:d0:49:fb:5f:92:d0:cb:46:d7:a0:52:a0:57:
                    66:49:00:20:44:a5:34:e3:ea:bc:92:e4:65:20:8b:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:17:FC:F3:AF:E7:9D:B0:16:91:DC:4E:60:DE:02:E8:00:5E:09:5F
            X509v3 Authority Key Identifier:
                keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ed:e6:0e:5b:a8:07:f4:fc:aa:9f:e5:0d:8a:85:c3:48:dc:
         8a:7c:83:7b:90:90:5b:61:ac:b6:da:b5:cd:99:74:a8:0b:16:
         41:e5:9a:13:f4:d2:54:34:d9:52:2d:49:6e:08:3a:77:a8:5f:
         55:d2:f5:86:1b:80:b4:d5:d7:95:db:e5:cc:75:5c:bc:03:9d:
         58:30:1a:36:b0:b0:9e:49:2a:64:25:3e:66:0d:5f:54:72:68:
         d3:d1:a3:da:c7:de:c7:0f:86:3a:d2:df:bc:f9:89:31:ee:06:
         da:0a:41:63:ee:98:bf:53:38:79:cd:5c:31:20:a1:f7:47:3a:
         dc:6e:86:44:c4:15:09:c4:a3:4a:23:66:96:23:68:39:82:26:
         39:44:80:d5:d5:a9:26:de:df:df:0f:a1:b2:40:e4:8a:d3:a1:
         4c:79:d5:ee:7a:f6:22:17:1b:ce:2c:e4:56:34:77:ba:db:9a:
         86:d3:08:1d:02:08:9c:d5:91:10:94:d7:a7:be:25:ff:90:94:
         19:bf:2e:dc:02:f8:80:8f:c8:ab:01:fa:0b:ca:56:4c:00:72:
         9a:9f:97:a4:4f:a8:d5:f4:a3:03:3d:41:3a:23:73:9b:44:9d:
         fd:ff:2e:de:3b:6d:11:b0:8a:6d:31:fe:ab:2e:34:da:29:14:
         2e:0e:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:23 2026 by rpki-client