Error: rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
File:                     5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft (raw, json)
Hash identifier:          wQzOXapLC8gQbofekxsnsoYJC5YQGlo5QeADzFwFtFw=
Subject key identifier:   42:41:39:94:1F:33:0C:55:3A:4C:61:B9:3B:D5:8B:D9:3D:07:9C:AA
Authority key identifier: E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Certificate issuer:       /CN=F36CC8EBRI/serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
Certificate serial:       0685
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
Manifest number:          0683
Signing time:             Thu 10 Sep 2026 02:39:39 +0000
Manifest this update:     Thu 10 Sep 2026 02:39:38 +0000
Manifest next update:     Sat 12 Sep 2026 02:39:38 +0000
Files and hashes:         1: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl (hash: hGVGAVFqUDr2TfRDvPRfyLnYdYuCHrVIYRHW9fjCgnk=)
                          2: A0D8F85C8EFF11F1A65138F7CE1D38B0.roa (hash: teptVHQ0uPHPGBYFMoadvyUXi00pXKRL48ZoHJLP0Cs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                          rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBRI, serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
        Validity
            Not Before: Sep 10 02:39:38 2026 GMT
            Not After : Sep 12 02:39:38 2026 GMT
        Subject: CN=6aa2186b-2799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:2f:0f:d2:6a:6d:14:83:a2:48:9b:31:a8:
                    e4:3b:1a:5d:33:4a:02:90:03:8c:f8:4a:88:b0:c1:
                    6d:9f:12:a3:fd:79:43:54:54:1f:fe:62:ab:31:1a:
                    4b:fe:59:c5:63:ef:9b:9f:1b:0c:2c:42:49:1d:2e:
                    71:ab:e1:f6:c7:da:99:68:77:b7:21:67:77:c1:60:
                    35:22:11:86:c2:f6:0b:f3:9d:22:e8:67:97:02:03:
                    f0:37:0e:92:a8:48:96:42:24:a3:b6:0d:68:66:cd:
                    20:be:58:aa:7a:dd:4e:29:11:b3:79:b7:54:4b:76:
                    60:92:58:5e:85:9c:12:48:67:8a:97:f8:b8:de:68:
                    49:cf:66:2e:75:6e:b1:ee:36:54:82:34:f8:92:45:
                    96:18:de:17:c5:1b:cb:25:4f:35:dd:51:42:6e:6c:
                    03:89:76:ee:6e:d0:6f:9c:f1:d5:29:fa:fc:8b:e6:
                    20:50:2f:df:92:2d:77:4f:7f:d2:32:f5:bd:1a:cc:
                    3b:ac:af:92:98:39:c7:a5:eb:1b:25:8a:f2:56:3f:
                    bc:5d:53:5d:a2:a1:43:dc:cb:99:30:00:f5:67:88:
                    8d:56:c3:99:4d:9e:50:2e:2e:01:c5:a9:8f:97:22:
                    32:da:86:50:86:99:d8:d2:86:fd:84:b0:97:e0:1c:
                    e9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:41:39:94:1F:33:0C:55:3A:4C:61:B9:3B:D5:8B:D9:3D:07:9C:AA
            X509v3 Authority Key Identifier:
                keyid:E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b7:36:90:b5:0b:e5:7d:f9:ae:97:12:c9:cd:1a:ef:23:02:
         40:9e:72:c5:e6:b8:25:dd:7e:6e:2c:c3:cc:83:8f:a7:43:2b:
         bf:65:d7:7f:4c:f9:e9:e0:db:3b:78:90:f8:11:33:e1:21:84:
         c7:d1:d2:b9:13:5c:1a:9a:c9:50:b4:e1:44:b7:83:1f:3b:63:
         26:5f:1b:f8:55:3d:3e:e5:14:c9:94:89:a3:46:ea:e7:8e:9e:
         37:73:32:9c:14:89:b5:31:27:f6:c9:e7:12:5e:52:cb:0f:c4:
         8f:ff:58:92:a1:cd:35:71:fb:71:9c:97:67:e4:d4:e3:6c:c2:
         69:e0:77:97:91:5b:ce:25:26:f5:bc:fe:a5:9f:d1:bb:5e:4f:
         b7:db:bb:d2:dd:6a:8c:55:c8:04:7c:5e:44:fa:bf:35:99:40:
         a5:d8:b9:84:11:3a:fb:b3:cd:d8:fb:3c:38:1e:ac:56:df:9b:
         2b:7d:fd:5d:bf:0b:5a:0d:96:e8:23:81:51:d7:d4:7f:d0:81:
         14:1c:b9:b7:d3:ed:b6:84:ef:0e:a3:88:ad:90:25:64:9b:16:
         08:f3:81:b3:b3:09:57:ed:45:74:af:f5:d5:62:55:78:51:a5:
         61:d8:73:e8:5b:9a:1b:17:c2:8d:b2:d3:fb:db:03:33:a2:33:
         e6:36:97:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:17:25 2026 by rpki-client