Error: rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File:                     QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier:          NaW1awaEDf+XUAYSB7F/yU3cq8PL8bR5ivXcjb1qnMs=
Subject key identifier:   AC:D5:E0:9F:25:18:05:73:5F:A1:90:FF:C3:27:00:3F:16:DB:98:FC
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer:       /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial:       01ED
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number:          01EB
Signing time:             Mon 12 Oct 2026 04:55:48 +0000
Manifest this update:     Mon 12 Oct 2026 04:55:47 +0000
Manifest next update:     Wed 14 Oct 2026 04:55:47 +0000
Files and hashes:         1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: NUshwdaWx+lErdhB91U42rdGkweTNFsDGK0y4ZcWttU=)
                          2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
                          3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                          rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 04:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
        Validity
            Not Before: Oct 12 04:55:47 2026 GMT
            Not After : Oct 14 04:55:47 2026 GMT
        Subject: CN=6acc6854-b1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:d7:bb:34:67:69:fc:a0:4f:3c:91:b5:52:
                    75:1c:b6:03:d8:af:74:ba:90:49:22:40:17:61:68:
                    98:e8:f0:55:f7:86:d4:d6:79:fa:03:ba:08:fb:11:
                    6a:53:c0:2c:4a:75:9d:82:0f:e8:41:fc:d4:d8:c9:
                    31:dc:56:5b:31:1c:17:0b:80:ac:98:a8:83:97:18:
                    fb:d1:0c:6c:19:98:87:9b:94:c5:3d:05:26:04:eb:
                    ac:d8:b1:ef:e4:4b:4d:9c:2d:de:cc:a8:3b:38:9e:
                    ff:e8:16:3b:c3:fd:8e:18:6f:20:d2:db:71:ef:45:
                    7d:09:6a:17:50:8b:50:91:c0:04:a6:c4:5e:8c:61:
                    9f:7f:34:15:36:d7:d0:25:a8:be:b9:1f:c6:1f:1a:
                    09:8f:c3:24:9f:c6:32:fd:5e:5f:7f:19:01:62:5d:
                    60:b9:0f:82:59:2d:d7:29:65:7d:41:b3:77:73:7a:
                    13:2e:b6:5d:49:41:a3:50:91:c6:95:ef:df:3c:b8:
                    b0:95:a0:f6:60:5c:47:62:5d:b8:d6:d2:c8:d2:d0:
                    cd:28:e6:9d:20:0d:5d:44:6d:0e:67:06:be:08:0e:
                    8d:9f:bc:fe:20:e7:f2:c8:1e:f8:a3:b6:fb:90:d6:
                    6e:56:c8:88:ec:46:92:64:f0:07:9a:b3:cd:3f:08:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D5:E0:9F:25:18:05:73:5F:A1:90:FF:C3:27:00:3F:16:DB:98:FC
            X509v3 Authority Key Identifier:
                keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3c:db:97:c6:25:cb:59:d8:16:89:47:3b:82:02:90:e5:03:
         36:82:6e:95:bc:1a:dd:b9:f5:81:59:c3:ef:52:d0:e6:9d:27:
         84:d9:f6:b7:f5:55:e7:43:31:43:83:19:87:95:8c:82:2f:ad:
         57:a5:47:c0:48:82:d6:f2:25:cd:3a:2c:20:bb:fb:50:a2:3d:
         2b:87:0a:e2:14:6a:24:a3:c0:e8:21:62:b5:ba:5f:b0:ba:85:
         07:43:b3:5b:c1:26:68:ad:b5:21:d0:be:7b:6f:aa:4a:fc:8a:
         05:2f:1b:9e:13:a5:2d:af:af:53:f3:fd:dd:ee:66:7f:41:ca:
         35:17:ba:b1:32:9b:0b:d0:b0:91:59:8a:bf:66:c0:ae:1c:a6:
         0e:2d:43:57:59:e2:74:35:7e:af:47:5e:68:31:1a:77:cf:9c:
         48:d2:b9:59:6d:ef:b1:61:bb:11:84:01:ca:78:ef:72:f5:1f:
         6b:56:fe:73:06:02:33:f3:88:39:de:f2:9b:ad:98:24:ce:f9:
         6f:1e:9b:28:88:f9:af:ba:ec:ee:84:84:32:ea:d6:27:8b:5e:
         87:65:9e:01:25:86:f2:1e:42:51:40:d4:b6:f6:d9:5a:4a:31:
         d6:45:fc:d9:cf:dd:02:bb:85:58:3a:01:7b:ea:50:16:d9:e6:
         c4:a2:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:21:50 2026 by rpki-client