Error: rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
File:                     ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft (raw, json)
Hash identifier:          mdeVk7tPaVgM0QjnK7Nx0cH4Uid8wOWt+468KDcbK7s=
Subject key identifier:   60:E4:AA:39:2A:F5:2F:73:47:6F:97:66:29:41:A8:19:CC:BE:FF:F2
Authority key identifier: CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB
Certificate issuer:       /CN=F36F6A4DAF/serialNumber=CA941F10D8010F95C8049E0102DCCAA883D9A0DB
Certificate serial:       02F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
Manifest number:          02EE
Signing time:             Wed 04 Nov 2026 04:36:00 +0000
Manifest this update:     Wed 04 Nov 2026 04:36:00 +0000
Manifest next update:     Fri 06 Nov 2026 04:36:00 +0000
Files and hashes:         1: ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl (hash: c1qIMOpFSK0ztjvqPW6b94JNle/0uQ0iK8Cki/x4SEE=)
                          2: 68314CFA9E6711EF831C3572762E951A.roa (hash: +2OyFRy+2ufdlClFPPFiOYpBXJw/swztJHB2roxpChk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6A4DAF, serialNumber=CA941F10D8010F95C8049E0102DCCAA883D9A0DB
        Validity
            Not Before: Nov  4 04:36:00 2026 GMT
            Not After : Nov  6 04:36:00 2026 GMT
        Subject: CN=6aeab630-f1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:a0:fa:ba:d8:57:fe:ac:94:19:4b:5b:f8:
                    22:33:d1:47:d4:70:80:93:aa:80:29:47:74:11:e6:
                    ed:be:89:13:51:b0:9a:04:97:b7:8f:2d:9e:3f:53:
                    9c:bb:4f:a4:41:eb:42:44:d2:10:1f:c7:b6:22:79:
                    ac:25:28:bf:04:7d:23:91:c5:9a:27:8a:0a:4b:3c:
                    55:49:42:63:b3:aa:88:45:6d:58:29:2d:53:27:77:
                    82:c8:2b:a0:fc:b5:05:df:87:6d:16:10:75:26:f6:
                    58:b8:a3:1f:55:6d:cf:81:a5:5c:5b:4f:58:6e:04:
                    b8:f5:2c:e4:7f:10:ae:6c:97:a2:a3:a1:58:ab:63:
                    83:62:b8:08:0c:1a:b4:fc:92:51:b8:80:e9:37:96:
                    6b:3d:18:1e:60:d6:51:95:5a:4a:70:35:fe:c2:e5:
                    92:f2:dc:d1:31:6f:8d:fa:6d:35:81:56:b4:16:e1:
                    eb:cc:de:51:30:25:e4:0e:39:72:99:3b:a0:4f:7c:
                    ef:1c:08:b3:05:88:bd:d5:eb:85:3c:0f:27:a2:04:
                    81:92:b4:b7:8b:ca:94:02:ef:6c:18:30:48:f4:08:
                    37:f4:b1:c4:50:47:f2:3e:1d:60:b3:98:9b:4f:3b:
                    5a:70:46:09:ac:bc:6b:f4:16:50:e0:56:ca:e3:48:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E4:AA:39:2A:F5:2F:73:47:6F:97:66:29:41:A8:19:CC:BE:FF:F2
            X509v3 Authority Key Identifier:
                keyid:CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:9d:3c:06:58:d6:85:69:e1:64:19:a7:8a:68:4f:13:27:
         ac:c8:0b:c8:a7:d6:c6:e2:9e:44:d1:90:c3:df:20:62:3d:da:
         57:11:10:8c:38:c8:33:33:43:b1:8b:33:d4:fa:48:59:bf:dc:
         d0:a0:06:13:5f:7e:39:40:7d:dc:54:fa:e0:75:c1:d1:ca:fa:
         e4:c5:3f:6a:56:df:19:0e:15:1e:dd:8f:32:3c:6f:8e:bb:1c:
         df:34:9a:da:21:8f:1b:a1:b1:30:2e:8e:cf:a3:1c:2c:09:83:
         f5:53:f1:62:ac:2b:9e:a9:e4:b8:47:09:9b:4a:54:2a:19:dc:
         e0:8b:20:11:ce:a2:e8:99:9f:8c:e4:24:f8:fb:d0:d1:1a:03:
         14:74:4f:59:a0:3d:02:96:8f:58:4f:2c:d9:65:a8:1b:a2:cf:
         40:9e:d6:d6:0d:12:59:aa:3f:a1:41:5b:8d:53:cc:dd:33:ec:
         c4:78:8c:26:2c:76:d4:b3:75:9b:dc:1f:8b:df:b5:62:81:b3:
         ce:03:b4:9c:5e:4b:a7:27:a5:e5:95:5c:38:80:fd:2f:79:0b:
         20:f2:52:0a:d6:a4:9f:f0:72:34:ab:04:50:a4:54:0b:17:a9:
         47:4b:be:89:31:58:ef:fd:95:83:87:66:d3:92:35:90:b1:b3:
         f1:e5:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:17:16 2026 by rpki-client