Error: rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
File:                     _n_6ewbTc1Hbkta507CtEDB7WiE.mft (raw, json)
Hash identifier:          /MKWcEkuJPy6eNpQhmM4WWQg1kbLCjaO0GQezhHMDLY=
Subject key identifier:   CB:6F:47:29:69:99:8E:70:F1:A9:73:AC:BE:98:81:38:38:75:56:1A
Authority key identifier: FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21
Certificate issuer:       /CN=F36DBC4BAF/serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
Certificate serial:       03A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
Manifest number:          03A3
Signing time:             Mon 05 Oct 2026 04:07:31 +0000
Manifest this update:     Mon 05 Oct 2026 04:07:30 +0000
Manifest next update:     Wed 07 Oct 2026 04:07:30 +0000
Files and hashes:         1: _n_6ewbTc1Hbkta507CtEDB7WiE.crl (hash: +wKfuYFfq563Mps9nyhzdti/j8OoHNskfzKoLqWOQjE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935 (0x3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAF, serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
        Validity
            Not Before: Oct  5 04:07:30 2026 GMT
            Not After : Oct  7 04:07:30 2026 GMT
        Subject: CN=6ac32283-80c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:bf:4b:e4:e1:f3:23:d1:99:7f:b3:6a:c9:
                    6e:2c:6c:c2:b2:19:28:6a:80:c4:74:b2:3c:9f:2a:
                    6e:d8:d3:2d:4b:26:a5:cb:2e:69:8e:f4:89:9f:e6:
                    7b:fd:45:88:4c:66:ae:60:a1:cc:5a:06:76:e0:a0:
                    8c:5d:86:a1:26:f0:d6:fc:a9:67:8f:39:71:77:5f:
                    9a:81:dc:73:94:b3:e4:50:ec:3f:e4:b0:8e:7e:a4:
                    f5:84:f1:51:be:e5:55:e7:d2:80:4d:f7:a6:3f:b7:
                    e4:64:a0:0b:f8:b0:97:de:a9:c5:be:8a:c0:76:f0:
                    bd:5d:6a:ca:77:2d:27:1e:b7:65:5b:92:82:37:06:
                    22:d8:50:5f:f2:77:7e:71:52:0a:34:5b:5a:76:2c:
                    5a:88:74:54:77:3f:4c:05:45:06:68:0e:3d:8c:0c:
                    ce:b3:2c:bd:40:0c:60:db:e1:2c:09:62:ca:21:22:
                    0f:61:e5:a6:7f:39:73:20:b3:b3:cc:a4:88:0e:e3:
                    7b:b8:ff:9f:d3:0e:06:64:ae:37:d2:1c:34:17:45:
                    e7:48:34:8e:45:91:67:30:61:29:9e:49:cb:1f:78:
                    38:d9:18:04:af:10:1c:43:f1:b1:97:86:ec:46:3e:
                    26:ce:9f:13:6f:e1:ab:ea:12:ed:fb:e3:d2:a3:ac:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6F:47:29:69:99:8E:70:F1:A9:73:AC:BE:98:81:38:38:75:56:1A
            X509v3 Authority Key Identifier:
                keyid:FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:53:e3:ee:81:e3:4e:74:bd:a0:5a:a0:ae:af:25:22:bc:62:
         01:80:7b:1a:10:9d:17:37:ec:82:05:02:72:2c:af:85:d5:2e:
         ed:8e:29:1b:63:6d:d1:43:03:8c:b9:ba:39:90:d1:f4:4d:e8:
         13:62:af:fd:6a:90:77:d5:91:b4:eb:fe:b9:ac:01:23:82:c2:
         7c:9a:31:1b:d1:c7:88:5f:d7:31:79:e0:e9:70:06:bc:49:9c:
         5d:09:ac:c6:da:b8:2d:44:09:fd:94:b1:9a:99:6a:5e:3d:98:
         ac:7f:38:87:26:17:1f:4e:56:c4:b8:ce:e9:84:0f:37:44:3a:
         1e:75:6d:cb:79:ef:1f:3a:1d:a6:80:d7:35:b7:62:52:7d:c2:
         0f:42:c4:b6:2a:a4:6d:d0:af:6d:4b:69:68:d8:78:d4:62:30:
         2e:49:76:d5:27:29:69:bc:f8:aa:d7:80:67:b5:f3:04:32:ed:
         aa:8d:31:b2:16:07:89:b7:d5:d4:42:bb:d6:22:b7:98:bd:07:
         a6:22:0f:4c:fc:af:62:f0:33:cd:0f:b9:ca:97:68:44:c6:86:
         2c:12:11:ec:49:85:de:12:3c:3b:42:94:f1:db:e6:f1:89:90:
         c0:ba:f9:c2:66:ef:bf:34:f4:b0:9a:a7:80:c4:dc:ef:e3:a7:
         7b:70:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:28:55 2026 by rpki-client