Error: rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
File:                     Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft (raw, json)
Hash identifier:          cV1Y19UhFIhHKvuYanOb03Af2R5qkn2Pt3FmbHwJaJ0=
Subject key identifier:   AF:C9:AC:38:D4:7F:E4:0A:D5:A0:DF:AB:C0:1D:25:14:04:90:D6:2D
Authority key identifier: 5E:9E:12:64:A2:E9:14:E5:51:FC:37:9E:EA:DC:B9:B8:00:5D:00:8A
Certificate issuer:       /CN=F3674A7AAF/serialNumber=5E9E1264A2E914E551FC379EEADCB9B8005D008A
Certificate serial:       7F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
Manifest number:          7E
Signing time:             Thu 05 Nov 2026 05:43:12 +0000
Manifest this update:     Thu 05 Nov 2026 05:43:11 +0000
Manifest next update:     Sat 07 Nov 2026 05:43:11 +0000
Files and hashes:         1: Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl (hash: qgDoqEg+fmBTwjiUkp63xrrYYgvKYTRAicjQJj7cua4=)
                          2: 180C9F1A793811F19CA8B2B9CE1D38B0.roa (hash: DAs78s5LvDn7SQOIhkA/UYbBae9oa0Ki1f+XOP4srJs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674A7AAF, serialNumber=5E9E1264A2E914E551FC379EEADCB9B8005D008A
        Validity
            Not Before: Nov  5 05:43:11 2026 GMT
            Not After : Nov  7 05:43:11 2026 GMT
        Subject: CN=6aec1770-b304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:76:1a:95:65:94:7e:22:35:23:ba:2e:f5:
                    a8:ea:a1:d1:44:e9:79:0f:20:45:ea:20:74:cc:68:
                    11:72:43:f2:64:9c:cf:bc:e0:8c:4b:0d:4d:76:db:
                    2d:19:f5:65:27:c3:01:48:42:16:70:e2:21:ae:9c:
                    d7:de:de:49:4c:a8:c8:e3:dc:3d:58:a4:04:f7:95:
                    c6:53:0d:09:93:a0:ff:b2:86:f7:bb:d3:cf:7a:29:
                    e0:7d:62:0f:8f:93:0e:c5:f8:20:19:d4:91:a1:20:
                    a0:1d:c3:e1:e2:91:63:06:fd:66:32:ae:61:ea:5b:
                    8a:fe:e1:4b:d2:23:d8:a7:37:f1:6a:3a:c5:b7:5d:
                    16:bc:e8:c1:3c:6d:bb:62:7b:1b:5e:96:da:cd:02:
                    91:5c:c8:49:e4:3a:c2:bd:24:cb:f4:a3:10:e5:ad:
                    24:0b:34:19:c0:cf:5f:92:4b:77:8b:ce:70:5f:a4:
                    45:b9:21:f4:8b:3d:c1:11:91:09:2b:3b:2b:24:41:
                    f8:a2:b2:44:0e:8b:2f:75:15:3a:f6:c3:98:90:c3:
                    1b:92:0e:ba:ee:3c:e0:45:30:78:bc:93:b9:df:01:
                    cd:4a:36:73:ad:a7:7a:4f:c7:73:4d:3a:e5:96:dd:
                    0f:57:e2:78:d0:ac:4b:67:70:5d:f9:bd:e7:0f:c0:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C9:AC:38:D4:7F:E4:0A:D5:A0:DF:AB:C0:1D:25:14:04:90:D6:2D
            X509v3 Authority Key Identifier:
                keyid:5E:9E:12:64:A2:E9:14:E5:51:FC:37:9E:EA:DC:B9:B8:00:5D:00:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:89:0c:4e:bf:21:b2:e2:75:e1:17:fa:ba:12:77:23:d7:1b:
         e4:f6:39:73:88:e0:17:63:ba:d9:98:66:87:55:42:fc:0d:4f:
         c2:ec:39:73:3c:1e:ac:c9:5b:52:f8:3a:a9:de:af:e9:13:d4:
         bc:b1:7d:8b:f3:66:82:fb:66:e5:fd:02:91:09:1f:86:ff:c1:
         99:c9:62:ae:b4:c9:0a:2a:10:dd:9e:7d:c8:78:36:c7:f8:c0:
         63:1d:56:87:e9:e5:cb:b1:1b:71:31:d4:fd:6c:32:45:1c:aa:
         c5:5a:e2:4d:a8:f8:34:19:74:a6:f5:2e:b4:bd:8b:5a:cf:e7:
         24:54:8c:57:1f:7d:32:85:60:cd:0b:40:52:c0:ec:b2:d5:39:
         43:dc:d8:f8:88:31:bc:fc:28:7f:41:fb:94:6b:57:8e:df:fb:
         7c:e9:dd:b2:dc:a8:cf:13:8a:85:85:d1:a2:2f:51:03:43:fc:
         0a:01:3a:0b:13:10:8b:39:68:3c:c8:88:05:d2:e4:a7:ab:0b:
         b1:01:8e:14:cf:d2:2d:43:55:15:99:d4:f7:fb:17:8e:34:5a:
         dd:2b:62:7a:b4:2c:37:1d:b7:96:4f:57:63:ea:6e:ab:f8:d3:
         0d:44:a3:ef:d1:aa:18:3f:d5:cd:99:5b:cb:a6:a9:b0:61:56:
         a6:2a:6f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:23:00 2026 by rpki-client