Error: rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
File:                     SBnPn32B-6etRokY9hUM1Ly83Ac.mft (raw, json)
Hash identifier:          1sXge5XJxT9j27ylF9ZaqDb7+stdf6xqYBzEMtaVRGQ=
Subject key identifier:   79:2D:06:B9:22:25:96:F0:6A:64:CF:6C:18:18:E9:AE:C8:37:BD:8A
Authority key identifier: 48:19:CF:9F:7D:81:FB:A7:AD:46:89:18:F6:15:0C:D4:BC:BC:DC:07
Certificate issuer:       /CN=F366C1FCAF/serialNumber=4819CF9F7D81FBA7AD468918F6150CD4BCBCDC07
Certificate serial:       19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
Manifest number:          18
Signing time:             Thu 05 Nov 2026 06:02:27 +0000
Manifest this update:     Thu 05 Nov 2026 06:02:27 +0000
Manifest next update:     Sat 07 Nov 2026 06:02:27 +0000
Files and hashes:         1: SBnPn32B-6etRokY9hUM1Ly83Ac.crl (hash: KvLxRUpg18SgHcTESA9wTcY1o73s/SGvNUTQe9mtDzk=)
                          2: E12332E6C7AE11F1A98CF6DBCE1D38B0.roa (hash: LkxUb/2kG/qcaw2E5m9e+l2TxbZ1epEA25XMv5pYoEk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C1FCAF, serialNumber=4819CF9F7D81FBA7AD468918F6150CD4BCBCDC07
        Validity
            Not Before: Nov  5 06:02:27 2026 GMT
            Not After : Nov  7 06:02:27 2026 GMT
        Subject: CN=6aec1bf3-3d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:02:d9:a3:dd:c3:54:b2:d4:3a:68:72:ad:
                    02:ad:19:ee:35:f3:35:e1:66:b6:9c:37:c8:59:f6:
                    ea:1f:f5:a9:5d:c5:70:db:fa:12:fd:66:0c:9a:35:
                    cf:4c:b4:76:a7:33:74:24:0a:ec:36:12:a7:b4:19:
                    54:29:0d:7a:c2:21:9a:1d:65:c4:11:4c:6a:92:9b:
                    8f:be:0e:f0:ac:28:1b:57:d9:b9:e9:8e:7c:09:9e:
                    c6:b6:45:84:2d:5c:db:30:d0:df:89:ce:b2:92:9c:
                    cb:ed:a2:06:e0:ee:47:1f:f6:6a:30:a3:ee:46:ea:
                    45:64:7d:be:ab:06:d3:46:3a:6c:2b:f4:36:83:64:
                    44:63:0f:be:80:eb:a7:fd:e9:10:9f:7b:2e:06:5f:
                    7c:57:79:3e:e4:b3:d1:cf:c4:b2:78:e2:a5:a8:44:
                    4a:10:1f:a6:ee:e9:dd:c4:b3:da:43:28:7e:c2:84:
                    9d:87:a9:7e:05:39:cb:6e:a4:d7:5e:ca:85:05:0d:
                    ee:13:98:68:bf:27:83:e7:7d:49:a4:6f:04:aa:9e:
                    ca:ec:a0:45:ed:9a:29:dd:96:0e:8b:19:28:27:b6:
                    f5:d9:1e:b6:f8:df:0d:b8:44:c7:04:2e:d1:65:ea:
                    ac:51:31:84:d4:8d:c5:ff:cf:c2:2f:f4:84:9b:11:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2D:06:B9:22:25:96:F0:6A:64:CF:6C:18:18:E9:AE:C8:37:BD:8A
            X509v3 Authority Key Identifier:
                keyid:48:19:CF:9F:7D:81:FB:A7:AD:46:89:18:F6:15:0C:D4:BC:BC:DC:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:50:c5:6b:cd:39:5e:03:da:78:3b:8c:4c:34:19:78:b5:4a:
         14:ff:6e:b8:a4:40:10:be:56:c0:a8:8b:2d:b6:40:ea:ee:7a:
         d9:ce:92:70:43:d4:7c:3b:a2:13:ee:56:78:52:4e:1f:70:98:
         98:0f:fb:a7:ac:23:55:54:ac:f5:f3:f6:6e:02:05:f7:55:02:
         05:5a:c8:01:1c:72:d8:0c:a1:a3:1d:89:c0:cb:d5:60:4b:72:
         6b:a6:94:c6:99:27:ff:3e:98:4d:f0:0d:d9:e6:9f:4a:6b:38:
         98:54:42:9e:84:75:f9:f0:3a:94:4e:d6:78:22:86:80:9d:65:
         bc:6c:a3:f6:45:0c:57:ab:09:93:67:52:03:9b:0f:e4:33:d4:
         b2:6b:0d:56:c0:25:0b:42:27:3c:50:78:2e:d3:f7:a4:40:32:
         20:5c:af:16:4b:04:5c:8d:73:e5:62:90:7c:81:59:cb:e4:c9:
         b8:77:5d:ba:13:6d:dd:5b:b1:03:1f:34:e6:ac:f2:be:e5:c2:
         26:d1:03:74:ef:05:2f:13:69:36:af:3d:47:15:d7:d7:34:44:
         15:a6:ca:e7:d5:3a:ad:97:4a:75:10:8f:73:5f:b0:63:54:20:
         58:cd:b0:d3:41:cd:c6:e3:20:e6:22:e3:50:93:64:18:46:56:
         67:46:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:11:22 2026 by rpki-client