Error: rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
File:                     LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft (raw, json)
Hash identifier:          0I/JypWkUSDUh/rjZ+4NgVGrLHFh7i2D2BhApKHR1jI=
Subject key identifier:   16:6F:44:79:0D:34:C6:E7:BE:A0:7C:9D:77:24:71:94:5D:40:42:61
Authority key identifier: 2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79
Certificate issuer:       /CN=F36B665CAF/serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
Certificate serial:       0582
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
Manifest number:          057E
Signing time:             Thu 05 Nov 2026 03:15:00 +0000
Manifest this update:     Thu 05 Nov 2026 03:14:59 +0000
Manifest next update:     Sat 07 Nov 2026 03:14:59 +0000
Files and hashes:         1: LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl (hash: MRoZ69nvDtqHXBFPdmaROrIZjBLkhrLR2Kidz6i16I8=)
                          2: 96BECE16898511F1825C6B08CF1D38B0.roa (hash: oco7QYiN4H9AP0b1v44zyPoxFEqKA/IrP3MtJ7ibHeI=)
                          3: 2ABD80D2C13411F0AD109DEBDAE4EC9C.roa (hash: tUKltNBSVOXmWEDpCanmFgVIXoiOPsSX9STsk3muu/Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1410 (0x582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B665CAF, serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
        Validity
            Not Before: Nov  5 03:14:59 2026 GMT
            Not After : Nov  7 03:14:59 2026 GMT
        Subject: CN=6aebf4b4-7212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:db:92:56:18:21:ce:ae:c8:2a:c4:95:f1:
                    28:b4:f4:db:7b:cf:ce:a7:7c:0b:40:ec:66:46:7e:
                    6c:ac:e3:ca:c4:98:9c:a8:dc:a8:bb:94:d0:bf:11:
                    55:66:fe:1e:b6:e2:28:a4:6f:cd:36:97:2e:8a:6b:
                    ea:72:40:91:ca:1d:91:17:75:57:19:08:b7:58:28:
                    10:6a:5f:17:fc:ae:23:52:96:8e:b9:ef:ad:c9:0f:
                    fe:bd:59:d5:d3:31:1c:79:5e:71:9b:01:f1:2b:e4:
                    e3:39:eb:d6:ec:0e:c8:c1:72:33:98:e5:a5:a7:0d:
                    b5:58:93:ed:d4:15:c8:b1:88:59:d4:47:23:3a:71:
                    ab:d5:25:a5:a7:f2:29:b3:40:f3:af:a8:3e:c0:62:
                    b2:0f:46:84:c5:fa:83:bb:ba:1c:84:c0:f6:67:cc:
                    28:90:9d:cd:90:e9:c5:4f:02:ab:1c:9b:9e:74:96:
                    ff:41:81:81:6b:c7:51:5e:c7:26:c3:2b:9b:6f:cb:
                    ce:07:0f:06:59:53:27:58:92:75:b7:6c:0c:f6:88:
                    80:3f:bd:97:ab:24:70:6f:57:f7:23:ea:4f:d8:f5:
                    b9:d3:1b:39:03:78:38:c6:b4:4b:4c:ed:5a:37:c5:
                    8b:d6:2b:30:7e:9d:e7:0c:a4:66:90:56:0c:67:a0:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6F:44:79:0D:34:C6:E7:BE:A0:7C:9D:77:24:71:94:5D:40:42:61
            X509v3 Authority Key Identifier:
                keyid:2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6c:e1:94:89:03:64:dc:b4:b7:41:24:a5:27:34:0b:3c:66:
         03:d9:8b:b3:37:3e:4c:4d:13:ae:a4:ed:4b:68:b4:60:31:c6:
         06:c6:24:4f:a2:8b:6c:f0:21:5e:ea:0f:6b:be:f4:22:98:53:
         00:db:e2:69:35:9e:23:6b:1f:15:37:52:3b:d6:9c:b4:54:df:
         09:29:b0:32:84:86:f7:36:4d:22:67:02:51:e7:80:d0:c0:ab:
         97:c0:d2:e6:c0:76:45:7f:55:6c:5f:8c:89:15:73:e0:17:15:
         d9:67:31:fb:68:42:26:c6:f4:6f:8e:1b:5f:50:73:5e:3a:4b:
         9f:44:73:6c:53:b9:1b:a4:6f:45:a2:1c:ba:74:9d:cd:f6:2f:
         bb:aa:c6:e9:a4:dd:3f:e3:2a:8c:5b:96:8a:72:c8:66:d3:4f:
         6d:c2:69:c8:b7:b4:ff:f8:09:83:1f:1f:40:4e:25:3b:71:52:
         95:2b:be:7e:33:91:bc:39:13:5d:1a:af:43:da:3e:3f:d7:fb:
         16:a7:25:a6:71:aa:29:e7:81:bd:56:c6:c2:ab:b0:18:7e:75:
         e3:59:eb:8b:75:04:db:a6:05:14:7f:97:db:96:b2:59:7f:1e:
         41:ba:c6:be:4e:bb:0c:e0:9b:aa:8c:87:48:5f:6d:43:a5:a7:
         0e:db:08:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:56:51 2026 by rpki-client