Error: rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.mft
File:                     fcWl2KZ-MSpo_pgKkKb8dfdEJFs.mft (raw, json)
Hash identifier:          i2tWkaKy70fFGl7f57+7ub6RZxhaq2pvNgfDSoaPk1w=
Subject key identifier:   4D:4A:93:C6:54:48:5C:7D:32:E1:FF:78:06:C5:CC:09:C3:28:A9:FA
Authority key identifier: 7D:C5:A5:D8:A6:7E:31:2A:68:FE:98:0A:90:A6:FC:75:F7:44:24:5B
Certificate issuer:       /CN=F36316B1AF/serialNumber=7DC5A5D8A67E312A68FE980A90A6FC75F744245B
Certificate serial:       6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.mft
Manifest number:          6B
Signing time:             Thu 05 Nov 2026 05:45:48 +0000
Manifest this update:     Thu 05 Nov 2026 05:45:47 +0000
Manifest next update:     Sat 07 Nov 2026 05:45:47 +0000
Files and hashes:         1: fcWl2KZ-MSpo_pgKkKb8dfdEJFs.crl (hash: tlDciQSqPKYAcbQ+3i7KGxQZiX3wyZ2eJOOH5RvLsXE=)
                          2: AF34E060885F11F1A0626AF8CE1D38B0.roa (hash: XGf51Q8pDGhym3OB8mnGv3P/awHpaZKoyyeubpLI1UQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36316B1AF, serialNumber=7DC5A5D8A67E312A68FE980A90A6FC75F744245B
        Validity
            Not Before: Nov  5 05:45:47 2026 GMT
            Not After : Nov  7 05:45:47 2026 GMT
        Subject: CN=6aec180c-d755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:35:0a:78:b0:5e:71:36:91:7b:68:bc:e2:
                    82:06:8f:2e:1c:b0:ec:8e:ac:7d:a2:81:14:91:83:
                    7b:84:79:58:90:2c:59:e2:4c:2d:4f:df:5c:d0:43:
                    d7:78:99:c4:1f:8d:3a:76:5c:fa:ea:a8:7c:5f:a6:
                    a9:a6:72:4b:2a:c6:fa:1b:dc:83:9d:e9:f3:6f:c8:
                    23:f3:5c:76:34:32:69:f9:98:12:e3:29:6b:e7:a4:
                    57:0b:45:3f:45:a1:d9:c8:f9:96:28:83:c6:ea:ec:
                    14:24:4f:85:8e:b0:4c:7a:b9:ca:7b:be:e2:3f:f9:
                    b7:12:e5:ee:70:8a:e0:36:6d:9c:65:4e:da:dd:3d:
                    84:ff:2b:68:77:05:6f:65:12:29:61:26:db:1d:2f:
                    ed:52:78:ba:a1:08:c8:96:eb:9a:09:a3:77:e0:5a:
                    59:3a:0b:db:0e:49:1d:a7:5a:d2:b9:b0:98:cd:d2:
                    f5:47:ae:5c:09:c0:3c:a5:66:ce:04:68:7c:18:d7:
                    ea:18:d7:c2:0e:31:11:26:aa:47:2a:6d:87:c9:cd:
                    54:8a:16:ef:0e:4d:f8:d1:10:89:0f:82:8f:e8:05:
                    59:04:d6:57:d8:cb:96:23:6d:42:8d:71:2f:bf:5f:
                    71:0c:4e:cd:a6:26:ec:b4:b2:81:31:2d:4a:7b:1e:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4A:93:C6:54:48:5C:7D:32:E1:FF:78:06:C5:CC:09:C3:28:A9:FA
            X509v3 Authority Key Identifier:
                keyid:7D:C5:A5:D8:A6:7E:31:2A:68:FE:98:0A:90:A6:FC:75:F7:44:24:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:56:e8:c8:e0:35:dd:82:00:94:5d:a3:2b:be:ed:4f:9b:e9:
         85:09:a5:01:f9:f3:d0:e4:c5:8a:31:30:06:40:84:e5:51:7d:
         d7:8e:46:ac:2f:38:8b:a0:3b:1a:29:1a:25:16:61:bb:7e:2a:
         65:4d:83:30:09:38:5f:38:e0:af:93:68:80:54:10:48:29:33:
         e0:d0:89:07:bc:e1:07:4a:f7:91:a1:bb:ad:5c:28:79:9a:0e:
         66:6a:ca:0c:ed:8c:eb:49:2b:41:36:56:f6:44:9f:79:2a:36:
         57:5a:10:20:7d:1e:7d:67:00:8b:05:d1:b4:b1:38:d8:1e:16:
         ec:50:85:68:32:33:aa:27:6c:78:0a:ef:2c:b0:e1:3a:d7:a3:
         db:41:2a:62:7a:10:ab:13:ed:77:31:b7:cc:15:11:0f:0a:c8:
         58:a9:46:51:0a:60:08:a7:a0:e7:4f:a7:d1:e3:d4:80:03:8d:
         5a:86:f5:2c:67:00:18:f2:0f:66:4b:8d:2a:c6:f6:67:3e:41:
         45:ca:da:a5:b0:92:09:b5:e9:27:43:7b:eb:b8:2a:29:50:4c:
         d3:b7:75:2a:b8:f2:b7:77:d1:60:bf:9d:0a:c8:fe:b6:78:27:
         29:3b:d8:30:6d:42:19:9e:22:8b:22:69:1e:71:5d:99:3a:92:
         68:ff:6d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:30:14 2026 by rpki-client