Error: rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
File:                     W8VPKEgipxexrUw3z2nQls5_Z3M.mft (raw, json)
Hash identifier:          gvjxMVjZ2PAWUWnYa4msjIB1fS8M87i3yZAjGBGREbI=
Subject key identifier:   EB:A4:ED:A7:6D:DF:96:36:DA:03:F9:C4:91:78:6F:D8:C9:6A:2F:92
Authority key identifier: 5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73
Certificate issuer:       /CN=F36F8F4FRI/serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
Certificate serial:       073B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
Manifest number:          0735
Signing time:             Fri 04 Sep 2026 02:32:43 +0000
Manifest this update:     Fri 04 Sep 2026 02:32:42 +0000
Manifest next update:     Sun 06 Sep 2026 02:32:42 +0000
Files and hashes:         1: W8VPKEgipxexrUw3z2nQls5_Z3M.crl (hash: OEOdl+5HHQspPo3axKWZaKdswJj2IqeXyWSpcpmUiPQ=)
                          2: 78929C78E9BD11F0B3E1F1C3DAE4EC9C.roa (hash: FoXsxa6lUWkjOHFYBRWOrSMVTyxXzEXTTiA6SFb0xXc=)
                          3: 7D4DF23EBD5E11F0AC3505AFDAE4EC9C.roa (hash: 66WTE1t1auuEEXYPV89TT/2BRb9tAd4Yku3NmYbxCrY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
                          rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851 (0x73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FRI, serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
        Validity
            Not Before: Sep  4 02:32:42 2026 GMT
            Not After : Sep  6 02:32:42 2026 GMT
        Subject: CN=6a9a2dcb-780e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:9c:9f:91:62:22:be:55:77:35:ce:98:65:
                    0e:af:9f:e9:49:46:d4:e3:b1:6c:54:b0:a4:4c:ea:
                    fc:2e:72:aa:f6:b8:8a:48:87:5d:c7:13:ad:e2:c3:
                    b3:16:dc:6c:ab:ff:72:d4:fc:5f:35:66:5b:99:b2:
                    4b:4a:b5:04:d1:5e:e4:92:df:de:a9:f4:5f:ee:28:
                    ca:41:53:dd:0f:b6:d0:79:7a:3d:c0:fe:04:79:98:
                    b5:dd:1a:0d:83:57:7f:22:99:4d:e5:8f:ea:86:0c:
                    b1:64:53:08:ed:95:fa:a3:a4:0d:bb:b5:d7:f9:35:
                    98:a5:42:fe:58:77:19:51:21:5a:17:e4:9a:0d:e4:
                    c1:61:ac:61:7c:28:5b:d7:c8:25:b8:cd:2f:b6:0b:
                    3b:a6:67:6c:14:81:d1:9c:d9:a7:a5:22:a6:df:94:
                    9d:95:ef:ee:7e:64:82:5b:b7:e0:f8:38:27:de:78:
                    b5:7f:6f:17:1f:b4:a6:09:9e:ea:82:6f:fb:37:92:
                    b4:53:99:b3:43:1e:17:29:6a:3c:b6:d0:83:8c:40:
                    e3:58:2c:c7:10:1c:09:72:c2:73:6b:13:0f:1a:cf:
                    1d:48:4a:f0:1a:03:f7:6b:a9:05:5c:dd:ca:b5:0b:
                    f5:d8:b2:1a:f0:45:65:56:ff:5b:24:33:3b:54:18:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A4:ED:A7:6D:DF:96:36:DA:03:F9:C4:91:78:6F:D8:C9:6A:2F:92
            X509v3 Authority Key Identifier:
                keyid:5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:58:6e:79:7c:18:e4:a4:c7:46:41:0f:cb:95:c3:21:34:11:
         04:0d:85:83:56:b3:e7:b8:cb:9a:1f:dc:bb:5a:4f:c7:0d:22:
         8e:9a:32:14:0b:79:b3:5f:b1:6e:07:4b:95:c0:db:59:60:58:
         48:33:3a:c2:83:06:fa:50:1b:79:4b:aa:b0:b6:9c:f2:23:66:
         3f:50:d5:c7:98:4a:e6:18:a2:a1:12:7f:75:f8:a3:fa:5a:0f:
         43:ec:e8:97:ba:d2:95:50:83:97:f5:52:33:ab:c4:18:43:08:
         8d:08:91:4b:40:dc:a6:93:7e:f2:ae:b2:7b:65:d2:69:ab:f6:
         0a:f9:9a:14:d3:49:1e:51:4d:1b:ae:89:a3:3d:21:e1:ea:86:
         a8:99:42:e5:ba:29:62:0a:e1:2f:bf:c3:4a:67:d4:55:7b:a0:
         c8:37:4c:c9:5b:95:58:9c:0c:5b:95:da:11:92:64:ea:75:60:
         5e:42:2d:e6:77:e7:d5:16:5d:f1:ea:a8:2d:1c:44:22:a5:0a:
         42:b7:28:65:9d:92:93:15:ea:fd:4c:43:23:09:e5:5d:40:77:
         7a:50:32:21:0d:a0:02:38:92:30:f2:13:d9:ad:da:15:93:5f:
         47:9d:20:31:94:01:56:f9:38:83:37:1b:fa:99:28:d4:eb:0e:
         f4:67:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:45 2026 by rpki-client