Error: rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
File:                     _Y4EWISxZp69QwrlZnIdl0BKbOg.mft (raw, json)
Hash identifier:          yeNe1qOnbRpBQKD1Tl+xGgluEMWqoeX6fBoU1lJbJTc=
Subject key identifier:   49:50:70:C4:BF:AD:AD:81:AA:06:66:FC:3B:63:FB:0B:81:BC:A8:EC
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       0B25
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
Manifest number:          0AFE
Signing time:             Mon 19 Oct 2026 01:28:48 +0000
Manifest this update:     Mon 19 Oct 2026 01:28:48 +0000
Manifest next update:     Wed 21 Oct 2026 01:28:48 +0000
Files and hashes:         1: _Y4EWISxZp69QwrlZnIdl0BKbOg.crl (hash: WoLezylnHOWtPzMg1Q7mODbiZt/K+bJx1/uO1zqpuYI=)
                          2: 72FDA95EBED111EBB1E95938F8AEA228.roa (hash: BFwqjnvA7M7iOe8MrvjQVzzYtcahDaV6kGy9p/HlFzg=)
                          3: 417B7412681D11EABAE8A23BF8AEA228.roa (hash: EcSboq3Auo5ZSfF9dSrc6D9TXAo4UTRY5/uzWoCkLSY=)
                          4: B5869B0AC3C211F09F106C8BDAE4EC9C.roa (hash: mJeNbgIsODW0IZbdvirwPYTHzrvnFAJ+2bHY0LU02rk=)
                          5: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (hash: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=)
                          6: 9132C716F59111E9AF6CD33BF8AEA228.roa (hash: rXypH2zp9nVVHeDRCTVV4b8eCSlSkXxt3YUitRlyOEk=)
                          7: 9364DF78BED111EBB8FF9938F8AEA228.roa (hash: NRhe7qbaq8yZpi9FGOqJZVS+hbrFKmeWDZsrvab3+uA=)
                          8: 65F327B8C3C011F0ABEF947BDAE4EC9C.roa (hash: ZNx35ltsV215KO54NwIZRAjQFKuUp9eg7CgfIYk5wag=)
                          9: 238CE30A681D11EA8E2A7D3BF8AEA228.roa (hash: ydKx4ungEUC7wspHHxXIcDKz2U1m9S6af+pOZ0cF1vY=)
                          10: D836FE9222B311F1AE59E8A5DAE4EC9C.roa (hash: Zo4dYOB2OMVvcxcANyuKsstxdleGAQAhhFqhzGOXqz0=)
                          11: A0F84E4E22B411F1A094D2A9DAE4EC9C.roa (hash: RVM1tl7LuX44NxHiJWipsP33NfLSDKNOMeT1ioVv3KI=)
                          12: D7EB2302681D11EA9D36683CF8AEA228.roa (hash: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=)
                          13: 90942EAE22B611F1B2F2A6B5DAE4EC9C.roa (hash: B2oH+YLYL80SnvHNj5we7c9W00Nmw5CHyRiieTPA9Fk=)
                          14: F251F7A2681D11EA847A8F3CF8AEA228.roa (hash: CH6IVgy5lqquXIo/aSkiaRuN6dDR9B17P94pxUuhf4w=)
                          15: AF1ED052BED111EBAE20BD38F8AEA228.roa (hash: 4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=)
                          16: C7DF70DA22B611F1A9E4ACB5DAE4EC9C.roa (hash: FzSMi1ExAtIbBrOh99I/Xg/w2xrMl9lU3Ek0la62bJM=)
                          17: ED8D90DC22B611F1BFEFC9B7DAE4EC9C.roa (hash: Lg3vE54geb/W/HK9e5QX9UvaE5HfR3V6ZT67toBAsnk=)
                          18: 882D016CC3C211F091DEFD88DAE4EC9C.roa (hash: P8CrTuzMoS9SDVWJrxvNUlVaky2bUCzT4t7YspZSN5c=)
                          19: 691543FE22B611F1AD41E6B3DAE4EC9C.roa (hash: OcXC+95ot7At7Mu6jgi4eynHpzMzzE33mDt+ILGM0mU=)
                          20: 213A16D822B411F19F2100A8DAE4EC9C.roa (hash: +REceu3vGyfkElasQapk8ytHIl0xpyt/9IoQ658hAK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2853 (0xb25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Oct 19 01:28:48 2026 GMT
            Not After : Oct 21 01:28:48 2026 GMT
        Subject: CN=6ad57250-9680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:d1:b4:3b:4e:0b:b8:62:3a:16:d2:ac:79:
                    b8:5a:f0:d9:b3:09:7d:37:77:28:87:71:a8:70:b4:
                    d8:d7:45:19:e6:ff:50:b3:ce:61:00:ea:0e:a3:20:
                    31:be:ab:7c:35:df:1b:82:e1:a7:3d:d4:40:e9:b0:
                    9b:f3:f7:fb:f4:25:c9:af:91:54:7f:22:6e:a5:4f:
                    83:01:55:b2:01:d7:73:41:64:1c:f0:da:54:91:3e:
                    28:25:e2:23:1b:b2:2d:2e:b1:11:f7:6f:d5:ef:a5:
                    5d:d8:d7:26:c0:02:e6:62:05:32:cb:8a:ac:ed:99:
                    c0:bb:1e:aa:77:a7:25:07:f8:c4:42:70:b7:7c:70:
                    fd:5d:50:d1:18:54:4a:83:27:3d:0a:6f:e3:26:5f:
                    0a:7d:56:ff:fe:9c:0f:8b:2e:d1:d5:af:41:c6:bd:
                    d3:7f:8c:c8:ad:27:a5:b8:70:3e:6d:b2:12:ee:48:
                    af:32:63:fd:0d:e7:6e:6e:ec:7e:db:05:ae:65:77:
                    50:f6:e7:db:8e:73:6c:1e:88:cc:c8:71:fb:db:f6:
                    2f:49:98:31:67:d3:27:8e:de:ab:b1:99:f9:2c:b3:
                    af:60:32:f4:60:77:9c:c9:fa:66:4e:3b:b5:b0:21:
                    e1:91:ca:14:a1:71:74:e4:79:9e:cf:0f:3f:95:24:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:50:70:C4:BF:AD:AD:81:AA:06:66:FC:3B:63:FB:0B:81:BC:A8:EC
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8f:d2:e8:fe:f4:0c:f8:d6:a8:40:ff:d6:30:0a:6b:0f:49:
         2b:b0:52:a4:6a:0b:1a:37:10:c4:57:de:be:c1:21:fc:b6:7a:
         ff:db:20:59:e2:a1:76:a0:ce:6c:6c:1f:56:6a:76:2c:ab:11:
         b4:8a:5f:cb:0a:82:fc:32:02:10:0a:0d:8b:0c:fd:f0:fb:2a:
         a5:f1:9b:58:64:4a:e4:e7:94:2c:fa:d7:76:31:91:14:c8:b3:
         42:80:f9:5f:00:b1:6c:73:33:c0:7c:e1:a8:34:74:dd:cd:6f:
         e9:b0:17:c5:72:8c:e9:ef:be:a7:29:2b:fe:78:99:59:7e:48:
         06:ff:ae:a9:02:09:5d:7a:68:d0:04:ab:48:6b:26:d0:bb:7b:
         e2:05:65:8a:e1:68:0b:5f:b6:fe:d7:fd:bd:e6:7a:52:59:ba:
         64:8a:75:a5:2c:d7:96:a0:66:ea:91:5d:70:6b:9d:17:a8:17:
         ae:22:7f:fb:d9:1b:f8:e8:e8:30:6f:fd:30:f9:84:80:3b:35:
         49:4d:86:0d:70:6c:3f:39:ff:97:07:cd:c5:b1:ad:34:e8:04:
         e9:ca:21:eb:0f:51:d8:5e:71:53:fd:40:17:01:e4:27:0b:25:
         84:c8:1a:52:47:cd:73:b4:3f:da:8f:3e:b9:fc:79:c3:c3:07:
         12:be:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:51:02 2026 by rpki-client