Error: rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
File:                     U0PDi98uSRgxOaWKxC8Rb6mWc80.mft (raw, json)
Hash identifier:          xYwhe2Z9HL/3gCDFCyxz4XaxKLBNoy+mxkVMjtTP5v8=
Subject key identifier:   4B:D3:2D:18:8B:9D:73:D6:C1:51:C3:40:42:53:03:CE:7A:67:CB:01
Authority key identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
Certificate issuer:       /CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Certificate serial:       0643
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
Manifest number:          063D
Signing time:             Wed 28 Oct 2026 02:52:12 +0000
Manifest this update:     Wed 28 Oct 2026 02:52:11 +0000
Manifest next update:     Fri 30 Oct 2026 02:52:11 +0000
Files and hashes:         1: U0PDi98uSRgxOaWKxC8Rb6mWc80.crl (hash: EM5VCgtMswtt98RtNVxxrZqR5ziXtdAEsJ5af2jdrX8=)
                          2: FDDEDCAC21D011F18474A17CDAE4EC9C.roa (hash: SZFd5PkVE834obyPBshtPMz+lsFfdRXHPh1ZlI1rujI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EADB7AF, serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
        Validity
            Not Before: Oct 28 02:52:11 2026 GMT
            Not After : Oct 30 02:52:11 2026 GMT
        Subject: CN=6ae1635c-b6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:75:b3:83:6c:95:33:75:46:76:c5:fa:05:
                    d5:7b:97:55:8b:eb:93:ba:7a:eb:85:46:a9:f7:17:
                    6f:bf:5c:28:36:37:89:5a:e2:13:15:0f:b1:9e:0e:
                    62:40:50:73:15:6f:92:8d:9c:bf:05:e9:94:df:dc:
                    3e:be:e8:f7:3d:46:5e:c8:e8:52:33:b0:04:d4:f8:
                    bd:f6:ca:0f:93:70:ac:85:33:f5:69:86:0d:10:be:
                    b2:95:63:26:d3:ce:59:74:c7:07:69:33:2b:3d:4a:
                    e5:d4:8c:2b:97:2e:d6:ce:c0:16:3c:ce:26:2e:e4:
                    a3:b1:63:f8:b2:0f:34:04:df:9f:11:57:d9:0b:86:
                    d9:90:1b:77:d0:c8:37:e4:99:9a:0e:17:c1:8e:e4:
                    9e:0e:d1:ac:5b:dd:20:0f:e1:e3:d6:dd:e1:4d:cb:
                    c7:b6:10:34:97:1b:ed:bf:cd:a8:60:5b:38:40:78:
                    d2:a9:96:cd:1f:7a:37:c7:5a:1d:38:45:cd:5f:e1:
                    1d:b2:af:60:14:4f:01:73:8c:74:d0:c7:cc:a7:83:
                    25:3e:fa:a3:bd:49:e2:65:df:a1:16:3f:7a:a1:3d:
                    70:97:07:67:7a:f9:f1:c0:26:4f:b2:f1:9a:5e:fb:
                    b9:14:ad:03:75:85:a2:aa:15:ec:09:5e:21:60:c5:
                    89:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D3:2D:18:8B:9D:73:D6:C1:51:C3:40:42:53:03:CE:7A:67:CB:01
            X509v3 Authority Key Identifier:
                keyid:53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:db:ed:54:44:6b:3d:b7:bd:4c:7c:ed:98:58:b5:0d:bd:45:
         24:5d:d9:c6:47:b5:25:ff:62:44:05:c6:88:fd:94:66:72:51:
         c7:b0:61:79:37:b7:9b:bb:4d:b1:02:7a:1c:87:1d:96:af:8d:
         b0:30:62:c7:d7:80:45:bb:62:91:9b:62:b3:ad:3a:e8:2e:70:
         81:4e:7e:f3:c7:bc:54:4c:cd:b3:a3:25:14:ca:65:6d:2a:84:
         78:85:8c:65:41:1b:a2:74:5b:26:ef:c3:2a:c2:f1:74:03:87:
         2e:69:18:cb:03:8b:27:41:f7:18:72:8d:79:ce:6e:d8:5f:6f:
         27:0c:d7:d8:66:14:64:26:1d:ff:00:d5:9f:33:74:fa:5e:59:
         13:42:70:f8:2d:df:d7:88:95:aa:d3:2e:85:5c:60:eb:c8:d6:
         07:d2:11:5f:59:ca:85:3e:50:55:e6:52:2a:0a:ff:f8:17:6f:
         1c:81:42:76:38:f1:e6:30:a4:fb:71:f0:9b:ae:27:0b:42:c1:
         6b:36:1d:70:41:0f:a6:ef:7e:f3:5c:50:73:b2:4b:24:c8:92:
         05:59:ae:f3:b1:f0:ce:73:bf:ac:14:b2:4e:ca:70:c4:bc:0f:
         89:4a:dd:07:c1:de:5d:19:e5:82:e8:21:af:fb:0f:a5:64:a7:
         e6:35:29:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:04 2026 by rpki-client