Error: rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.mft
File:                     7Pci_h3Wtep-vHjMFWZgKW21CVU.mft (raw, json)
Hash identifier:          kgY/UZAHV5hAEkMaU3+TPcBB9t9HTlknG9iyaM3w3ns=
Subject key identifier:   C1:A6:2E:09:07:2E:BB:4F:22:4D:1B:C4:10:DE:7B:AB:81:A0:60:15
Authority key identifier: EC:F7:22:FE:1D:D6:B5:EA:7E:BC:78:CC:15:66:60:29:6D:B5:09:55
Certificate issuer:       /CN=F36D8637AF/serialNumber=ECF722FE1DD6B5EA7EBC78CC156660296DB50955
Certificate serial:       0AD2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7Pci_h3Wtep-vHjMFWZgKW21CVU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.mft
Manifest number:          0AD1
Signing time:             Tue 27 Oct 2026 01:23:39 +0000
Manifest this update:     Tue 27 Oct 2026 01:23:39 +0000
Manifest next update:     Thu 29 Oct 2026 01:23:39 +0000
Files and hashes:         1: 7Pci_h3Wtep-vHjMFWZgKW21CVU.crl (hash: PyF1EPTTwlNE6TEesTyMAiAheTse14J1oRZO/Qe3eFQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7Pci_h3Wtep-vHjMFWZgKW21CVU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2770 (0xad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AF, serialNumber=ECF722FE1DD6B5EA7EBC78CC156660296DB50955
        Validity
            Not Before: Oct 27 01:23:39 2026 GMT
            Not After : Oct 29 01:23:39 2026 GMT
        Subject: CN=6adffd1b-2c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8d:02:f7:87:80:83:ea:58:b8:f9:43:99:5a:
                    99:b4:a0:f9:5f:29:c8:94:e4:4b:e0:f8:a3:5e:db:
                    e7:d5:98:44:d3:76:95:5d:ae:a7:19:e8:81:30:45:
                    69:55:ae:3b:84:c6:84:81:73:1c:16:14:be:d8:ea:
                    54:32:ae:7d:ab:a6:a1:f7:5a:26:98:ae:87:8a:26:
                    04:9e:61:a6:58:2e:de:42:ed:b2:88:8b:5e:ca:63:
                    d6:bc:5f:6a:1d:9e:a1:38:d2:f8:ab:4f:26:6b:88:
                    3b:c2:69:8c:40:a8:4c:22:4c:c2:d7:c7:ba:cc:80:
                    f3:fa:16:4c:1a:a5:27:c9:0a:5c:60:05:4e:ec:68:
                    19:be:2f:48:c2:83:a2:60:7b:b9:3a:da:a1:8b:ee:
                    54:cb:dd:43:cd:42:c8:27:19:72:59:39:28:48:ee:
                    3a:67:cf:82:47:b9:5a:cf:02:a7:98:f4:df:f4:66:
                    46:e4:d1:81:be:23:e4:a6:0f:41:0e:e3:2b:cd:6f:
                    e9:48:aa:e5:45:26:a6:92:49:c4:dc:8b:30:a2:89:
                    30:71:92:8e:25:bb:8b:a7:55:ac:69:99:77:d1:f2:
                    fb:b6:ef:9a:56:24:91:a5:96:db:a8:b2:f3:c8:1e:
                    00:c6:b4:dc:eb:d3:dd:7e:ca:b3:c4:37:61:e5:a8:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A6:2E:09:07:2E:BB:4F:22:4D:1B:C4:10:DE:7B:AB:81:A0:60:15
            X509v3 Authority Key Identifier:
                keyid:EC:F7:22:FE:1D:D6:B5:EA:7E:BC:78:CC:15:66:60:29:6D:B5:09:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7Pci_h3Wtep-vHjMFWZgKW21CVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:0e:ad:9f:46:83:f5:47:e0:14:b5:8f:54:a4:96:e0:64:23:
         e5:bc:0b:21:9d:58:2b:34:c2:81:2f:8e:1c:b7:61:40:f8:15:
         8f:76:1b:07:f8:42:fd:95:88:5f:38:0a:a8:f8:db:ae:4d:76:
         56:dd:81:a5:64:52:d6:96:0c:86:97:f8:5d:44:b7:ad:fe:24:
         cf:26:13:00:98:1d:12:d4:4e:e7:9e:8a:2b:c6:ae:61:db:a1:
         97:7c:fb:4b:1c:e4:4a:97:9e:80:a5:e2:61:08:b1:07:00:99:
         2c:f7:b6:7b:91:f3:ab:8b:e2:71:e1:f4:b6:32:b8:72:db:18:
         f5:7f:1d:06:90:01:f2:95:ac:a9:b0:77:b1:d0:a8:77:3b:cc:
         45:a1:a2:67:1d:b8:b8:2b:fd:b0:58:7a:64:86:a9:24:ee:a5:
         32:2c:22:a7:b8:7c:ca:5c:aa:3e:60:35:4d:98:46:5c:6a:e5:
         70:a8:5d:bb:15:dc:6c:0f:a3:12:75:09:a7:8e:34:c8:84:d9:
         27:1e:c5:f8:b7:39:91:5d:7e:ad:6d:a1:cc:ec:f5:b1:68:af:
         0a:40:23:17:9a:fd:f7:59:3f:f8:f4:2f:ff:2e:fa:03:cc:ab:
         bf:9c:3b:ec:81:e1:64:4a:91:e3:42:fb:1c:64:5e:45:9d:f3:
         0d:49:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:37:59 2026 by rpki-client