Error: rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
File:                     EMcGKPchX_ouw73-RZaG9Fy-5S4.mft (raw, json)
Hash identifier:          xknkYdZDUlim29wBmHKAD3N1HRLJjivA6X+xWOSBOCk=
Subject key identifier:   8A:F9:B3:8D:79:C2:35:F2:8C:82:07:70:D7:C3:EB:E6:5B:79:D4:BE
Authority key identifier: 10:C7:06:28:F7:21:5F:FA:2E:C3:BD:FE:45:96:86:F4:5C:BE:E5:2E
Certificate issuer:       /CN=F365C895AF/serialNumber=10C70628F7215FFA2EC3BDFE459686F45CBEE52E
Certificate serial:       0ADE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
Manifest number:          0ADA
Signing time:             Thu 05 Nov 2026 01:24:50 +0000
Manifest this update:     Thu 05 Nov 2026 01:24:49 +0000
Manifest next update:     Sat 07 Nov 2026 01:24:49 +0000
Files and hashes:         1: EMcGKPchX_ouw73-RZaG9Fy-5S4.crl (hash: GHLkDEZCp5XMc1gNbKcfPuHviKclc5kTP5WLQk14QxA=)
                          2: 2AA5A7D285E011E997E8B40DF8AEA228.roa (hash: VfUn7y+D/eUw5QPrvAz8bUM3+CwQQrtxhfnK7NHDRNU=)
                          3: 14A1446E85E011E98CAAA10DF8AEA228.roa (hash: Sgkr/to7RBtXBA77fd9LenKbclUgWxlt/gVGw8PMj9A=)
                          4: 41630AC496B911EFB90ECA7D762E951A.roa (hash: W8GoEk1Hec2kR8dxLquNRRSceZnEwSA9nGWQsIB2aK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2782 (0xade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C895AF, serialNumber=10C70628F7215FFA2EC3BDFE459686F45CBEE52E
        Validity
            Not Before: Nov  5 01:24:49 2026 GMT
            Not After : Nov  7 01:24:49 2026 GMT
        Subject: CN=6aebdae1-4186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:38:6a:61:91:a1:0f:9e:0f:64:ab:50:c8:
                    7e:6c:6d:b3:89:ff:1b:b2:66:65:9f:1c:f7:7f:e4:
                    98:2e:dc:26:a9:20:9a:c9:e6:92:c8:1d:df:72:ad:
                    9d:92:79:4c:c0:8b:4f:ee:4c:be:e4:0d:8d:20:fd:
                    d1:04:c7:85:f5:bc:2f:9f:d1:cb:63:19:06:bc:5d:
                    b8:07:4f:e9:55:f6:25:d6:9a:c9:24:2a:75:f3:56:
                    a9:33:4a:23:7e:cf:e4:1e:da:64:7d:cc:76:aa:ad:
                    6d:8d:67:8c:9b:52:22:2d:a8:ad:78:96:78:24:d9:
                    86:2f:c9:8a:e7:69:61:22:1d:d9:87:70:4f:b8:88:
                    1d:1e:b8:f7:d7:05:19:bc:08:87:ac:2a:ff:50:45:
                    67:94:b3:30:8d:40:d1:36:04:60:e5:06:fe:54:be:
                    99:4b:60:a2:36:31:84:5c:66:2f:31:b7:c1:3c:a6:
                    65:7a:c5:cb:43:8a:5d:c9:89:f1:eb:df:72:69:3a:
                    ba:b2:4a:18:ad:26:1a:d1:06:1b:23:45:3d:bd:f2:
                    8d:17:a6:40:30:a4:89:36:06:8e:16:22:43:70:0a:
                    70:bd:bf:5a:37:b4:4f:26:d8:34:d1:39:5a:48:f6:
                    66:bd:7d:c2:b9:29:2f:4f:d5:81:cb:21:77:e8:7e:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F9:B3:8D:79:C2:35:F2:8C:82:07:70:D7:C3:EB:E6:5B:79:D4:BE
            X509v3 Authority Key Identifier:
                keyid:10:C7:06:28:F7:21:5F:FA:2E:C3:BD:FE:45:96:86:F4:5C:BE:E5:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:87:b2:0c:22:c9:04:b3:5c:5e:c8:75:30:dc:8e:e5:59:8f:
         84:57:1a:1f:62:cf:b1:71:b5:af:6e:7f:5e:e0:f3:e4:37:5a:
         c7:77:a2:69:19:cd:42:a1:9c:e9:75:f4:d4:9c:2f:c7:9f:bf:
         f6:ea:48:d2:ee:75:66:4a:c8:ff:3b:42:16:83:c6:54:71:04:
         2c:86:c6:ab:18:e6:0b:d9:96:44:12:74:38:26:a4:47:ec:13:
         a2:20:a6:a4:b4:37:0c:a8:85:e1:9d:6e:73:a5:42:ed:81:4d:
         3e:0c:ff:28:42:e8:bf:b2:74:63:ed:88:db:9b:42:77:f3:a7:
         f3:1d:33:27:2b:d2:7f:21:59:98:b0:aa:8c:04:cb:85:05:30:
         44:de:be:e4:e0:db:40:b9:80:4c:cd:da:d7:91:30:8d:28:e0:
         c1:26:51:0e:e2:60:5b:6e:3e:ee:11:61:84:88:1b:f9:b4:77:
         f6:d3:8b:0f:66:fb:36:76:8c:0d:bc:66:e2:a5:36:ef:a3:db:
         79:a0:11:60:88:47:3e:6a:52:83:d2:95:72:30:00:da:b2:de:
         0b:e8:4e:e0:c3:0c:e0:0b:89:94:e1:11:db:8d:2e:47:4e:eb:
         9d:87:4e:73:2a:2b:91:a7:6e:bb:f6:a1:41:a9:44:ba:41:35:
         45:35:cf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 10:15:31 2026 by rpki-client