Error: rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
File:                     jipNb8UYDX1HWKp5jDiYAu7zv7M.mft (raw, json)
Hash identifier:          Nzni9UJa+r+OsZYYUpwubeyRp36UfItJBPRw6tUHldY=
Subject key identifier:   1A:76:AC:5D:E9:3A:4C:16:32:EF:B3:69:BC:5D:4C:F3:89:8F:EC:79
Authority key identifier: 8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3
Certificate issuer:       /CN=F36F4212AF/serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
Certificate serial:       03E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
Manifest number:          03E4
Signing time:             Mon 26 Oct 2026 04:04:59 +0000
Manifest this update:     Mon 26 Oct 2026 04:04:58 +0000
Manifest next update:     Wed 28 Oct 2026 04:04:58 +0000
Files and hashes:         1: jipNb8UYDX1HWKp5jDiYAu7zv7M.crl (hash: aIGy7BALzUeKXulABdZx0DYWVUt6UxyflvEg8fQ0NXI=)
                          2: BDA909CACFB911EEA2EBAB6A775412E6.roa (hash: oOsN7fS/FRC6cCK/W7sGcZ0zEfirLAaFD65Y5zMuPNM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 997 (0x3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F4212AF, serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
        Validity
            Not Before: Oct 26 04:04:58 2026 GMT
            Not After : Oct 28 04:04:58 2026 GMT
        Subject: CN=6aded16b-82cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:5b:e2:da:32:fa:61:a8:55:b1:64:d9:62:
                    a0:62:99:91:f0:f9:91:01:6f:13:18:97:f1:01:b2:
                    24:40:4a:23:7a:a3:2e:0b:02:00:09:c5:e9:19:db:
                    95:41:a4:5c:70:df:44:ef:40:d0:8f:34:57:9d:cd:
                    ce:c1:86:39:d0:49:b7:29:d9:f7:eb:59:c2:35:42:
                    60:0d:d7:43:0b:39:92:3c:7f:1f:85:98:88:aa:32:
                    92:67:5c:0c:00:ad:8d:16:e9:d1:ac:af:b6:7b:cf:
                    2a:7f:5a:ec:46:4a:ee:6c:c2:2d:aa:c8:76:26:aa:
                    60:dc:24:59:f2:2b:7d:bc:89:c9:00:2f:5b:3d:d9:
                    2d:f3:09:3d:9b:22:c9:43:c2:bb:56:1c:cb:ba:da:
                    d8:a0:ec:7a:06:3b:65:e0:44:45:75:10:62:ca:10:
                    08:4e:39:0e:8f:f5:01:aa:8e:e2:3e:00:3e:c4:47:
                    ea:2c:8f:81:99:ff:70:7b:7c:d6:17:86:9f:cd:c9:
                    8f:55:0b:29:54:7e:35:f3:b1:3b:40:8a:84:4d:90:
                    1e:d4:94:9e:6c:49:87:b4:1e:1d:e3:11:0f:06:0f:
                    24:4e:56:b4:df:2b:57:f4:47:27:19:c2:d1:83:0b:
                    da:9f:b6:07:f1:7d:8c:d3:df:1a:81:f2:52:68:e3:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:76:AC:5D:E9:3A:4C:16:32:EF:B3:69:BC:5D:4C:F3:89:8F:EC:79
            X509v3 Authority Key Identifier:
                keyid:8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:74:01:2a:ff:76:69:4f:1a:d3:1e:1f:d4:e8:71:45:9a:
         a1:a9:c7:fc:16:d9:7e:79:76:24:ae:c9:a8:f8:eb:6e:d9:16:
         3f:9d:4c:c9:51:e4:af:a4:b2:7e:e4:b8:20:ee:98:81:20:7f:
         00:bd:e5:23:fc:f7:f5:79:05:85:6a:56:fa:fa:77:20:fd:8d:
         43:6c:68:60:30:37:fc:2c:22:a8:62:25:eb:f3:c5:c9:0a:38:
         0d:f9:0c:a7:57:c4:a4:79:39:6e:c5:bc:bd:52:db:83:54:11:
         13:05:98:9b:1b:98:e1:38:27:82:f7:7d:ab:09:77:7b:ba:4d:
         44:39:99:f6:c0:0b:91:eb:5a:b5:9c:46:c7:09:ec:a5:a4:70:
         34:5b:2f:3d:c9:c9:b0:0c:2a:e3:b7:fc:df:ad:96:0c:d4:d8:
         17:d2:b3:f3:ef:9f:f9:51:0b:63:ed:e3:6e:61:24:cc:cf:1c:
         75:c5:c8:f6:e8:61:6c:2c:60:f7:c6:d6:48:6c:2f:70:49:e7:
         e3:56:a4:46:1d:a4:3f:29:39:8a:e7:d5:45:09:0a:4e:59:d3:
         81:e3:2b:72:c0:ce:e6:5a:d3:a5:cf:e5:03:44:60:e4:33:c1:
         57:2a:cd:f8:e0:7b:20:76:ab:24:66:3a:08:a2:f9:76:e7:ad:
         cb:e8:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:42:11 2026 by rpki-client