Error: rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
File:                     2-RJMcFJNvINzlhLKrkbZfQttpY.mft (raw, json)
Hash identifier:          /1RHi9fXwAGSQQ2yJFghdTZe+Mq3OgtwslOvWyxOYE4=
Subject key identifier:   06:00:83:F7:5A:67:CA:DC:CD:78:B7:5C:68:8F:E6:33:60:B2:26:0A
Authority key identifier: DB:E4:49:31:C1:49:36:F2:0D:CE:58:4B:2A:B9:1B:65:F4:2D:B6:96
Certificate issuer:       /CN=F36C06CBAF/serialNumber=DBE44931C14936F20DCE584B2AB91B65F42DB696
Certificate serial:       0699
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
Manifest number:          0695
Signing time:             Thu 05 Nov 2026 02:43:58 +0000
Manifest this update:     Thu 05 Nov 2026 02:43:57 +0000
Manifest next update:     Sat 07 Nov 2026 02:43:57 +0000
Files and hashes:         1: 2-RJMcFJNvINzlhLKrkbZfQttpY.crl (hash: KbzK5h62ASWPmFt0n6+awxosyN9tSBY4l82ZOxG/knA=)
                          2: 06392D96808111EFACB35A67762E951A.roa (hash: owpJQ133udBSSOce7prYm8YhowuNrXIyS2eThdaFM+Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06CBAF, serialNumber=DBE44931C14936F20DCE584B2AB91B65F42DB696
        Validity
            Not Before: Nov  5 02:43:57 2026 GMT
            Not After : Nov  7 02:43:57 2026 GMT
        Subject: CN=6aebed6e-494c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:59:84:d2:f4:5d:78:a8:48:81:98:2d:33:
                    12:64:4e:b7:cd:09:f2:59:fd:cc:d1:70:b0:9c:c2:
                    18:6e:0e:6a:4b:f7:ef:cb:fb:bf:0b:b2:4f:e5:d3:
                    c6:4a:0a:b0:62:0b:82:6a:a7:b4:dd:a1:c7:69:3f:
                    16:f7:66:88:2e:b1:04:e7:76:e4:67:0b:d0:4d:e1:
                    15:4e:1f:96:73:71:0f:9c:f6:2c:df:60:96:4e:88:
                    fd:6a:a3:f9:0e:e1:48:7d:d8:ce:bc:9e:4a:4c:25:
                    d4:23:91:d3:0a:00:3f:4e:97:c3:45:c3:a2:7e:9b:
                    52:f8:7b:8c:d8:38:29:9f:0f:82:78:de:0a:47:81:
                    22:74:e0:a0:41:cc:6f:eb:d5:09:a6:0c:23:c0:04:
                    43:d4:45:8d:91:ae:10:0c:b1:3b:29:8c:fd:b5:76:
                    93:94:f0:16:3d:69:70:20:5f:69:65:b2:fd:34:67:
                    2c:f3:0d:dc:7e:40:e4:64:fb:b6:2f:96:56:10:8c:
                    f4:54:a7:e3:4b:ee:a6:1b:4f:1b:eb:fa:a0:9f:19:
                    c4:35:82:2f:9a:0a:13:d8:fc:81:3d:fa:e3:bc:75:
                    55:3f:4d:ea:ff:0c:69:ab:aa:aa:66:3b:8b:38:e1:
                    df:97:ec:0c:3f:13:db:63:11:9e:34:95:22:d1:2d:
                    da:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:00:83:F7:5A:67:CA:DC:CD:78:B7:5C:68:8F:E6:33:60:B2:26:0A
            X509v3 Authority Key Identifier:
                keyid:DB:E4:49:31:C1:49:36:F2:0D:CE:58:4B:2A:B9:1B:65:F4:2D:B6:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ff:05:85:ec:92:cc:1d:fd:ee:6a:84:97:b4:5a:ea:57:73:
         1f:a1:82:10:e5:68:bb:b3:a6:fd:35:29:5c:d7:66:14:6e:b7:
         2a:f0:98:e3:9c:87:6b:d8:b2:18:77:e1:b7:19:83:cf:7f:01:
         34:a3:5c:74:08:1b:4c:f8:88:87:cd:9b:05:f0:4f:e3:7b:96:
         13:01:2a:c8:65:62:b5:ce:b0:01:0a:fb:db:81:5c:a5:b3:1a:
         0d:7f:0c:99:bd:fe:6e:3c:b2:17:2f:3a:d6:06:c1:81:2b:99:
         2f:ab:c5:5e:80:b4:4b:b6:ad:79:ec:b4:0c:ab:71:86:b3:e8:
         96:95:68:79:c8:81:53:e0:3f:1c:32:5c:bc:d9:f4:9a:0a:f9:
         50:1b:a8:45:38:50:22:86:98:65:a0:6c:22:e8:bd:3d:cf:ac:
         4e:36:49:4a:8a:ae:d5:15:f7:e4:15:dc:0c:50:ee:f1:d3:27:
         f9:54:9c:d8:98:eb:c1:4c:16:84:62:7f:51:b3:c1:0d:58:11:
         3a:c1:f1:66:49:0a:04:ac:2e:64:22:89:31:9f:5a:2a:40:70:
         d2:a1:96:07:2c:f3:e3:c3:b3:a6:f7:2b:68:85:78:af:a7:d2:
         c7:87:a6:97:86:2d:7e:7c:cf:5d:4d:88:7c:ee:89:fe:64:4a:
         b1:9b:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:26:29 2026 by rpki-client