Error: rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
File:                     mSzTGdelFaVjcylM4EkVP4w-AEs.mft (raw, json)
Hash identifier:          ySiJiKTKFD6NGNEX0PKEvmNwRJwCIzU+RkypntUgbcs=
Subject key identifier:   05:0F:80:FA:60:03:4B:FE:CA:F4:E3:F1:0E:43:E6:9C:E5:25:DE:D4
Authority key identifier: 99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Certificate issuer:       /CN=F36DD92BAF/serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
Certificate serial:       03A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
Manifest number:          039F
Signing time:             Tue 27 Oct 2026 04:10:01 +0000
Manifest this update:     Tue 27 Oct 2026 04:10:00 +0000
Manifest next update:     Thu 29 Oct 2026 04:10:00 +0000
Files and hashes:         1: mSzTGdelFaVjcylM4EkVP4w-AEs.crl (hash: tzWi44942fbcDcHVnInHPKu8EpGWfIEbg5E7Obpardc=)
                          2: 8176D5FAB27D11F18AF20EBCCE1D38B0.roa (hash: n1a4oKf1AfDMVgheqWRfnPJPmLCX2nozQDZCIZsqBOE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 04:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930 (0x3a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD92BAF, serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
        Validity
            Not Before: Oct 27 04:10:00 2026 GMT
            Not After : Oct 29 04:10:00 2026 GMT
        Subject: CN=6ae02419-2044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:bc:6e:ae:93:7b:3d:5b:82:d9:28:1f:93:
                    46:a8:6a:d1:2d:67:ff:d5:92:8c:3f:00:86:ab:a4:
                    c0:19:94:c7:45:4b:0a:1a:f8:05:37:c3:50:75:a5:
                    88:2b:18:54:89:27:e6:f0:d8:62:00:07:d2:8e:5a:
                    83:db:8f:6e:e2:66:42:81:7d:33:ed:44:0a:5c:62:
                    17:60:bb:13:e5:d6:61:88:ea:8f:5a:11:d3:aa:ef:
                    b7:b2:1d:29:08:2f:eb:69:77:60:35:2a:c1:76:db:
                    94:8f:2d:43:a7:1e:ea:ac:30:63:0f:c7:9d:6b:57:
                    ce:3a:24:7a:f7:a0:4c:4b:97:86:a0:5d:41:fb:cb:
                    59:9f:bc:30:7c:70:8c:f8:f1:f7:ac:2f:d1:d6:76:
                    f9:9e:ce:78:44:e4:6b:b1:3a:f8:13:a4:e3:53:1e:
                    5f:6d:95:e7:75:3e:c6:ca:4e:ed:32:45:7a:28:a7:
                    25:5a:34:8c:c3:34:23:54:69:67:1f:f5:c7:53:18:
                    64:ff:8c:c2:77:ab:72:89:f1:9d:a5:17:4d:e0:85:
                    03:db:7f:b8:a7:fd:2c:86:d4:32:57:8d:9a:f0:32:
                    06:ab:7b:40:fa:35:9d:a0:78:5b:aa:6c:22:d3:0b:
                    6c:4f:bd:e1:10:d3:de:12:ab:8d:10:14:02:a0:83:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0F:80:FA:60:03:4B:FE:CA:F4:E3:F1:0E:43:E6:9C:E5:25:DE:D4
            X509v3 Authority Key Identifier:
                keyid:99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:77:df:06:44:26:0c:ed:c2:b0:26:1f:c2:25:a8:9d:6b:
         2e:fe:b8:2e:70:34:9b:64:f8:c5:f7:54:77:ce:b5:f8:b5:94:
         3f:c7:d5:8c:da:3a:c4:e9:04:a3:8b:3e:ac:56:65:12:3c:d4:
         95:3f:0b:ba:4f:c3:22:01:fd:ed:94:3c:62:98:9b:03:50:1c:
         9c:c4:85:86:7d:64:e6:71:10:e5:68:76:b4:63:f5:bc:d5:a5:
         05:bb:62:6b:6d:8f:4b:a3:4b:2f:d8:02:06:cf:c9:30:3f:18:
         c9:1c:e7:3e:0b:81:76:7c:2a:b4:52:0c:31:f5:cc:b5:e5:6f:
         29:8b:78:1f:56:6e:67:35:69:c8:0d:62:9f:e3:aa:63:2a:4d:
         05:23:c6:fb:8f:26:4a:28:4f:25:f4:80:d6:3e:8f:84:ad:73:
         d8:16:ff:40:69:54:59:4d:50:5a:96:cf:1d:a4:68:a1:a9:ba:
         d5:55:04:f5:89:cc:71:16:bd:e6:93:aa:3d:49:cf:1f:3c:d1:
         33:80:5f:b8:c0:fe:30:9f:4d:eb:98:02:79:d9:61:27:95:b4:
         48:02:8c:d1:8a:44:8c:a1:71:8e:36:3c:8a:ee:a1:c9:e9:fd:
         3b:81:e4:a7:64:7b:92:35:04:3f:58:ed:46:69:e9:0c:c1:d1:
         8a:a8:5c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:06:12 2026 by rpki-client