Error: rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
File:                     rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft (raw, json)
Hash identifier:          oIz/6aC8Af9L/rJP64Nx9jg5FZrMp+vG5EdywBlMNlw=
Subject key identifier:   DD:41:9B:9B:8D:89:83:7A:1A:00:8B:2E:5D:61:3F:BE:60:E0:DE:67
Authority key identifier: AC:34:F2:3C:B2:6B:19:1F:A6:C2:57:36:66:A4:16:3D:D9:86:83:89
Certificate issuer:       /CN=F36E4353AF/serialNumber=AC34F23CB26B191FA6C2573666A4163DD9868389
Certificate serial:       077A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
Manifest number:          0776
Signing time:             Mon 26 Oct 2026 02:23:01 +0000
Manifest this update:     Mon 26 Oct 2026 02:23:00 +0000
Manifest next update:     Wed 28 Oct 2026 02:23:00 +0000
Files and hashes:         1: rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl (hash: gd826Xek98xNbrv9gjbl6cXB3jiCRXkjJR1dw5drS1o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4353AF, serialNumber=AC34F23CB26B191FA6C2573666A4163DD9868389
        Validity
            Not Before: Oct 26 02:23:00 2026 GMT
            Not After : Oct 28 02:23:00 2026 GMT
        Subject: CN=6adeb985-0147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:0d:16:16:9f:fb:ae:4c:98:43:b4:ce:40:
                    a1:6f:5e:93:db:76:56:7b:40:00:49:28:df:f3:38:
                    bc:1f:b5:5e:a2:bb:30:a7:58:eb:8a:ee:9e:0f:8d:
                    51:03:8a:ed:e1:1f:34:19:b4:73:f2:be:20:0a:10:
                    b0:6a:c3:f5:5a:73:b9:05:14:ab:69:1f:b3:de:4d:
                    93:3f:1a:8c:cd:d0:02:d0:7d:5b:63:ce:b9:66:25:
                    15:99:7a:2b:1c:1a:fb:6f:29:64:5e:9f:aa:09:d6:
                    79:a6:fd:00:f5:da:6f:16:23:e9:cd:68:25:78:c8:
                    b1:42:8b:57:84:df:b6:f4:ff:ac:ef:6c:f1:35:86:
                    8d:58:6e:ed:03:3b:ba:b3:f6:ea:5c:f5:09:00:99:
                    71:0c:c3:e2:e4:26:8d:f8:d7:04:5c:15:86:e8:9a:
                    91:af:9d:89:ba:49:de:3a:f8:e0:0d:e4:3f:fb:f7:
                    13:60:cc:6c:9d:7a:51:4c:a4:e2:97:ba:b6:6a:c5:
                    37:cf:4a:84:93:e5:b5:fe:f3:0a:f0:3c:11:a2:7e:
                    b3:a0:1c:c4:36:98:ee:21:f4:63:c1:46:e3:08:bd:
                    a6:cc:e5:bd:27:27:7d:df:42:46:d5:3b:24:f4:6f:
                    07:dd:76:a5:ac:2e:f4:89:a7:03:e9:bb:06:3c:f2:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:41:9B:9B:8D:89:83:7A:1A:00:8B:2E:5D:61:3F:BE:60:E0:DE:67
            X509v3 Authority Key Identifier:
                keyid:AC:34:F2:3C:B2:6B:19:1F:A6:C2:57:36:66:A4:16:3D:D9:86:83:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:18:92:25:3b:c1:d2:0b:cd:92:cf:b2:bf:87:36:bc:ce:1f:
         be:af:89:db:92:71:cf:88:59:84:2f:3c:01:0b:4f:43:b6:a5:
         87:95:99:18:45:60:b4:bf:0c:92:5b:da:6a:13:02:60:d7:fa:
         ab:65:1c:2d:cf:ad:d1:8c:5e:c0:31:f9:cc:5a:5f:2b:10:2b:
         68:b3:ce:6d:7a:25:15:67:30:9e:26:9f:96:52:89:5e:1f:b3:
         6c:8a:5d:0f:87:46:44:a5:55:d3:a5:45:5d:ed:5b:a1:e8:fa:
         57:2b:34:43:61:10:21:b6:5e:e4:96:64:24:f4:df:d5:91:cb:
         d8:6f:93:f6:dd:bc:13:66:4c:4a:94:80:5f:54:d5:5a:ec:cb:
         b0:f3:37:76:57:7d:1d:3a:87:81:7b:ce:11:f2:52:9c:57:ca:
         95:49:0b:fd:92:65:4e:e7:60:47:72:34:b4:51:c9:70:3d:9e:
         b8:13:37:bf:94:35:60:ec:ff:e6:9a:1c:9c:4f:e4:9c:7f:60:
         f7:f1:b7:d2:44:06:92:d1:d2:cf:b8:27:31:80:a6:da:8f:0f:
         c7:7d:90:8d:06:66:08:a5:e3:f2:dc:7e:18:33:95:07:53:45:
         75:cd:0c:80:f2:b3:8d:e0:2e:9f:b3:3f:65:02:f7:4b:f3:e7:
         48:39:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:07:12 2026 by rpki-client