Error: rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
File:                     -RyaVXksG3JGcT_syDoE0La_EpE.mft (raw, json)
Hash identifier:          Bziuc1iO+krDwi9vqgmTQpp02EMBr5uKIxeOH9u9gGc=
Subject key identifier:   14:DE:E0:21:9E:40:42:2B:7D:46:2E:02:5D:45:00:78:21:3D:5B:91
Authority key identifier: F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91
Certificate issuer:       /CN=F36D9765AF/serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
Certificate serial:       043F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
Manifest number:          043A
Signing time:             Fri 23 Oct 2026 03:53:39 +0000
Manifest this update:     Fri 23 Oct 2026 03:53:38 +0000
Manifest next update:     Sun 25 Oct 2026 03:53:38 +0000
Files and hashes:         1: -RyaVXksG3JGcT_syDoE0La_EpE.crl (hash: kTOJADxkofBvaEEX5gmxURzdEcU7EpKX8QRJ9fbKD+Y=)
                          2: F85FFC4692E611EEB2D6445FD25BE465.roa (hash: muWneFlHYojsneBSKzrZDz/udMZ/g3nNGVbhuecawWo=)
                          3: 68052C5292E611EEB89A3D5ED25BE465.roa (hash: tfitjgyPV0bS1mdpb1R7yScmPtiSMrRxv3bQMLGjivw=)
                          4: 76838CE4E21211EEBB0FD29E775412E6.roa (hash: 83ixyn1DFACr3ZBupHAVOvYjpWf5hCNkOy2h0/nKuTw=)
                          5: 60DEE4F2E21111EEA9BF3698775412E6.roa (hash: kpV5c+Nm73LzjUsY4W/31mKZBHaBOvnt5Onm6QECScM=)
                          6: FFF44596E21111EE97790E9B775412E6.roa (hash: 3jeCnY7r5+OaUOOC086aUVH8hGb0UpeugYE741gqr+8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 03:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9765AF, serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
        Validity
            Not Before: Oct 23 03:53:38 2026 GMT
            Not After : Oct 25 03:53:38 2026 GMT
        Subject: CN=6adada43-6875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:19:2d:37:97:fb:af:ee:6a:ed:92:15:2d:
                    1e:cb:e4:48:c1:91:c3:b9:a6:6c:b9:e1:fc:1c:f5:
                    7c:ea:08:78:b4:9a:55:80:c0:ea:c8:05:6d:1a:7e:
                    b3:29:46:a7:69:d5:29:02:60:b3:18:b5:b4:da:c9:
                    90:a8:6f:5c:e2:c7:f4:1f:c5:b8:0f:b5:28:e5:8d:
                    17:82:ad:ae:b6:51:3f:34:1b:55:1e:20:c3:78:09:
                    de:2a:c5:74:b1:20:1b:b6:b9:23:65:4c:b1:41:bb:
                    a8:6f:af:56:21:69:3c:d0:6f:93:bb:99:1e:86:26:
                    ce:f9:db:46:98:9f:94:b3:ca:ab:00:63:b1:c3:59:
                    17:87:aa:d3:83:ca:2d:19:cf:a5:2e:f6:2a:3d:ad:
                    f8:6c:45:7f:a7:78:49:de:69:1a:cf:52:e0:43:f4:
                    aa:5b:3e:08:19:f9:c4:46:08:f6:dc:a1:a2:88:7a:
                    11:c4:18:d7:12:f3:4b:c8:20:0f:ea:97:b5:6a:82:
                    ea:b3:de:8a:dd:1a:39:25:29:24:71:0e:6d:96:6e:
                    e8:90:13:1c:03:c0:c3:08:64:b6:8b:4c:b3:9a:8e:
                    93:18:79:f4:50:46:9f:96:17:6c:6b:5e:d7:b9:7e:
                    4a:3d:f8:2d:c5:08:24:2a:59:f3:cd:1c:fd:5c:78:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DE:E0:21:9E:40:42:2B:7D:46:2E:02:5D:45:00:78:21:3D:5B:91
            X509v3 Authority Key Identifier:
                keyid:F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:80:5c:8e:01:ee:63:f3:23:b1:c2:1b:fb:3e:91:8a:ad:
         49:b3:80:70:c6:00:0f:7c:23:7b:f4:6e:8e:b1:da:fd:d1:46:
         cd:c8:a4:9c:40:f5:88:d1:3d:b5:5b:e0:04:2a:4c:61:7d:bb:
         d3:17:62:70:ba:bf:d2:6b:1a:cb:8f:93:33:1a:81:e5:d3:3d:
         e3:d5:ab:10:f4:0b:c3:ae:c5:e3:ca:e6:16:15:c4:57:05:f7:
         1f:30:6c:b8:5e:3c:90:a3:85:e9:a5:3b:0c:69:44:c9:2a:f0:
         45:a6:3b:fc:70:63:aa:e1:dd:52:b0:50:58:97:7a:1d:a5:17:
         e6:c1:a8:15:fe:b3:b5:93:74:bc:dc:cb:8b:05:7c:b3:8b:b3:
         af:08:04:d4:c4:57:4e:b0:70:f9:c3:63:97:39:dc:e1:e3:c5:
         27:8c:13:f8:84:20:8c:2b:e7:1a:6f:07:73:af:a1:91:aa:bc:
         dc:38:ca:50:f1:e4:88:07:22:3e:f8:eb:3d:e7:bc:2f:d0:64:
         4c:7a:8d:a1:cb:7b:f6:43:74:18:47:be:b2:3c:6f:8f:f0:4c:
         68:c8:01:1d:6d:5e:6d:54:31:f7:57:f2:0c:d0:2f:99:7d:bc:
         fd:02:25:70:d0:69:81:2e:29:ba:db:a7:fa:c2:12:b3:1c:65:
         48:ab:31:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 02:02:42 2026 by rpki-client