Error: rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
File:                     WNo74zGmEqquT2owY3cEBjrD3UI.mft (raw, json)
Hash identifier:          adxZywX/oZCkrInATSv9mygJQRNYtTV64GRobO33GmA=
Subject key identifier:   80:B7:58:03:19:27:A8:97:8E:11:14:C6:4D:BE:C9:F7:71:7C:F7:2C
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Certificate issuer:       /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial:       0464
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
Manifest number:          043F
Signing time:             Mon 19 Oct 2026 03:58:59 +0000
Manifest this update:     Mon 19 Oct 2026 03:58:58 +0000
Manifest next update:     Wed 21 Oct 2026 03:58:58 +0000
Files and hashes:         1: WNo74zGmEqquT2owY3cEBjrD3UI.crl (hash: 2VFNeRMZ3ZRrOM0e+iaXkCrvUStbLFupFgS1DT9hGeM=)
                          2: BCF64E3ECFF311F08A0CEAABDAE4EC9C.roa (hash: j7CRom0lOGZ8lIcKQpUnN53ebTJRhvCHiwerxahwuFc=)
                          3: 1475A26ECFF311F096054DA7DAE4EC9C.roa (hash: DIhkt7w9XQYMikWyfPDe9zR1unEC2k2dd5ZETrYVeCo=)
                          4: F85AF57E067211F09411CC9B762E951A.roa (hash: M7iTLJiKvNwSTd9F5Yj4i6rXdd1RJ7bKnAkeW0q5GC8=)
                          5: 6A831B68067311F0A5B3819F762E951A.roa (hash: dHewD/xYlqQhiWTpdXFrkxy+Gj1C9QIhRZsurBV3l/c=)
                          6: 2F1A0898067311F091A5799F762E951A.roa (hash: CNCaOGq5e+fSVQ4wKVSRok1jWDlNhofbmJTl2fwntNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 03:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA351AF, serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
        Validity
            Not Before: Oct 19 03:58:58 2026 GMT
            Not After : Oct 21 03:58:58 2026 GMT
        Subject: CN=6ad59583-85b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:49:35:8f:00:ae:21:18:71:19:20:c4:fe:
                    62:c1:7c:0d:9d:4e:d2:e7:3e:ba:2e:36:fb:e1:08:
                    0f:e0:35:bd:ed:ce:fc:7c:ad:19:eb:4d:2e:b3:ae:
                    7a:af:68:44:79:3b:12:ae:c6:2b:d2:7c:d6:e5:8e:
                    8e:10:e7:d1:f9:9b:71:4c:6d:a6:87:88:79:d4:20:
                    8e:ba:b1:75:ac:d8:04:67:e1:fe:c2:af:c9:09:76:
                    d5:af:e0:3c:be:e1:26:f6:45:0d:dc:ea:64:4e:12:
                    eb:4d:35:e4:f2:8a:82:0c:6f:a3:01:3b:6a:f4:a7:
                    c7:ce:bf:34:97:a2:77:0c:4f:f1:03:5a:7e:7a:87:
                    31:28:a5:69:57:39:1c:5d:33:19:b4:7e:98:42:ae:
                    b8:02:d4:70:b6:d5:1d:cc:6c:ee:9a:5c:53:18:28:
                    4d:60:9b:21:2b:e7:72:06:06:21:d0:70:ff:0f:61:
                    1e:7e:ba:12:2e:22:07:c8:82:2b:5e:80:bd:66:ac:
                    82:75:c3:78:9f:cb:d6:b1:05:99:ff:57:f5:4a:6e:
                    ba:b8:d9:89:87:22:8e:b3:f2:42:3b:83:ef:82:57:
                    5e:63:40:c9:7e:f4:21:fc:19:73:26:c4:17:b7:98:
                    0e:dd:da:48:d2:61:28:f1:24:1b:91:08:80:ac:e3:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B7:58:03:19:27:A8:97:8E:11:14:C6:4D:BE:C9:F7:71:7C:F7:2C
            X509v3 Authority Key Identifier:
                keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6b:81:cb:a0:ca:9f:8a:1d:74:c1:5f:1e:5b:57:38:f2:4e:
         b6:50:73:21:19:31:04:e1:7f:5d:17:0a:c7:3a:53:d7:1e:a3:
         72:c1:b1:0e:8c:fa:ef:cd:fe:1a:d5:df:dd:1d:d5:61:ae:fc:
         1e:e8:3f:fe:41:a0:4a:6c:9e:98:c5:e2:cb:6b:ed:77:66:e7:
         b8:ce:23:c6:0f:7c:52:fe:e7:a3:de:b9:f4:34:29:35:32:80:
         1c:2e:57:cd:a5:fb:e0:ff:f2:6c:f4:6f:5e:3f:6e:72:37:57:
         a5:a9:d6:f0:cf:3c:85:b2:72:1f:c8:75:b6:cc:77:15:49:24:
         48:bf:59:3d:86:e1:2b:12:5b:3b:39:42:49:47:7d:8a:b5:8d:
         0a:78:da:e7:b3:27:0e:cb:26:46:41:5a:de:96:0a:9b:f5:b4:
         d5:b8:ab:34:1b:84:9d:14:47:0a:c0:c6:a2:56:66:dd:a1:b0:
         ec:f3:f6:84:65:8b:5f:e5:eb:0b:ed:e1:10:f2:b5:32:72:ff:
         6e:b7:a1:e2:9f:1b:ae:06:f2:75:e9:56:74:84:71:a0:88:ee:
         22:f5:7e:8e:11:fd:3f:ae:e4:b5:8b:21:cb:85:1b:20:29:a8:
         5a:eb:fc:da:07:ae:5f:ad:6d:69:75:9c:79:e9:eb:cb:ca:72:
         dc:4a:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:55:34 2026 by rpki-client