Error: rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
File:                     5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft (raw, json)
Hash identifier:          DRwTe0RHb6OtiOeZlfrIpUbYf5EfGr/7GcBOL1dO39E=
Subject key identifier:   90:EC:55:7A:A7:2F:D4:4D:E6:2D:33:D5:EF:42:74:FB:01:3A:09:28
Authority key identifier: E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Certificate issuer:       /CN=F36CC8EBRI/serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
Certificate serial:       06B4
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
Manifest number:          06B2
Signing time:             Tue 27 Oct 2026 02:38:53 +0000
Manifest this update:     Tue 27 Oct 2026 02:38:52 +0000
Manifest next update:     Thu 29 Oct 2026 02:38:52 +0000
Files and hashes:         1: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl (hash: CSr5BkZ4cbNnI2rlvrazHilN9k3m1nwOPPZF5knS89E=)
                          2: A0D8F85C8EFF11F1A65138F7CE1D38B0.roa (hash: teptVHQ0uPHPGBYFMoadvyUXi00pXKRL48ZoHJLP0Cs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                          rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBRI, serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
        Validity
            Not Before: Oct 27 02:38:52 2026 GMT
            Not After : Oct 29 02:38:52 2026 GMT
        Subject: CN=6ae00ebc-d8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:6f:a1:df:78:1b:c5:60:ef:2b:fe:ec:e9:
                    4f:9b:eb:5e:01:27:fe:e8:44:3d:3c:27:55:25:2f:
                    3c:da:73:bb:c8:21:ef:84:fd:b2:3f:16:85:71:b2:
                    34:29:72:48:8c:8c:a6:23:98:98:65:83:c7:b6:eb:
                    71:52:2d:51:5b:61:ce:d4:7a:16:8e:0f:35:ee:57:
                    5a:38:4f:e9:4b:43:b7:21:79:c7:cc:e7:14:d0:87:
                    5a:ce:e8:f7:a9:5d:86:b6:7c:f1:aa:07:fd:fc:f5:
                    13:fa:b7:3d:34:a0:85:e9:a0:74:7e:80:86:28:3e:
                    36:6d:0e:0e:d2:e0:94:d2:30:1c:09:61:2e:87:63:
                    0e:05:ec:87:d8:d4:5d:3b:79:9b:f5:21:b0:cd:3f:
                    3d:d6:24:86:26:30:b5:9f:52:ee:c9:cf:01:e7:b8:
                    1f:44:3b:5e:33:8e:42:94:05:e1:4b:47:ed:61:e2:
                    3c:2d:e2:82:76:9f:86:cc:8d:2d:91:d0:15:91:16:
                    75:bf:52:1a:bb:c4:29:58:ad:7c:76:8d:97:d8:88:
                    a2:0e:8c:c4:d2:6e:1c:40:f6:e5:fc:d5:8f:51:23:
                    6c:67:23:52:9a:eb:0b:68:84:9e:e1:a4:cc:58:cd:
                    7d:e3:e9:06:43:65:ce:24:e2:48:a8:cc:26:2a:f3:
                    12:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EC:55:7A:A7:2F:D4:4D:E6:2D:33:D5:EF:42:74:FB:01:3A:09:28
            X509v3 Authority Key Identifier:
                keyid:E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:4c:20:ee:77:80:64:4c:48:70:a9:76:5c:40:48:ed:e0:ad:
         cf:27:a4:92:76:8c:b7:80:9c:96:5a:05:06:1e:5b:74:ab:4d:
         f6:93:3e:1b:61:64:5e:56:c6:29:0f:2d:b4:eb:56:f3:dd:04:
         03:ed:3c:5d:e6:bf:e6:d0:b3:c5:05:8d:99:8b:e6:65:85:48:
         ac:98:48:a1:82:a4:92:97:94:35:66:82:8b:00:a9:93:31:a4:
         db:04:5a:c3:99:3b:eb:0d:4d:fe:83:3f:19:0f:fe:30:37:b0:
         28:eb:bd:83:d3:7e:7f:a7:17:a5:12:22:b0:20:49:52:bd:39:
         c3:d4:aa:3c:83:14:dc:bd:99:14:87:12:09:1f:52:4e:33:97:
         cf:0b:73:89:f1:2f:b5:4d:ec:d9:38:1d:4e:79:2a:94:71:8f:
         10:d4:50:f0:eb:39:30:95:e8:4c:36:81:ff:71:1c:a8:d1:78:
         2c:ff:e7:95:3d:32:5f:9e:90:e4:01:cf:67:8e:37:1e:97:36:
         c7:94:6c:8b:7d:85:4c:b0:60:31:7b:79:f7:fc:98:51:3b:ca:
         b4:b8:b7:0b:69:5f:a8:63:06:57:60:cf:25:38:25:84:80:e8:
         22:6a:a3:76:cf:d3:5f:53:df:72:42:0d:d6:8a:cd:94:74:6d:
         f1:b7:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:47:46 2026 by rpki-client