Error: rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File:                     aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier:          JEtJQz1hXJ/e+S6TD0EkvEqXVt2ff7sqfcts4Hst7f0=
Subject key identifier:   83:FE:50:9E:B4:BF:2B:D4:E9:2F:5C:22:C0:9A:59:C0:5F:DC:D2:43
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer:       /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial:       0304
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number:          0303
Signing time:             Wed 23 Sep 2026 04:26:50 +0000
Manifest this update:     Wed 23 Sep 2026 04:26:50 +0000
Manifest next update:     Fri 25 Sep 2026 04:26:50 +0000
Files and hashes:         1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: uQrPMuoHCGwajB7AGhBHyZgXL2vG4fN4UEg1FKZrQ4M=)
                          2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 04:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6802AF, serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
        Validity
            Not Before: Sep 23 04:26:50 2026 GMT
            Not After : Sep 25 04:26:50 2026 GMT
        Subject: CN=6ab3550a-2920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:39:a8:4a:f8:56:6b:42:94:2d:07:ab:6c:
                    14:1d:20:e5:5a:75:81:b9:ac:cf:26:8f:c1:3f:0c:
                    74:f8:26:e6:cd:2a:c1:b6:dc:64:bd:b9:e3:ff:f1:
                    2c:c7:77:f8:e9:83:34:60:42:bf:76:6e:3f:d7:f9:
                    52:9c:36:e4:10:4b:be:6a:ac:b6:c4:27:97:80:8c:
                    92:60:48:ac:18:10:b8:bb:70:0a:62:73:bd:70:9e:
                    ac:6a:de:ad:02:67:8f:f1:0f:44:ee:09:01:61:8f:
                    6b:85:be:28:fe:e1:d0:51:7b:a3:d3:f5:9d:c2:32:
                    fb:52:b2:e9:62:8b:4b:3b:4a:45:27:c4:4e:bf:49:
                    61:5d:a6:63:02:4b:61:8b:af:ee:3e:cf:93:88:7c:
                    81:ba:a6:da:ee:5b:19:ce:15:8e:a0:95:fb:10:6d:
                    af:08:cc:7c:c1:70:e6:ac:8d:ff:74:18:61:cf:ae:
                    1f:0b:d3:44:95:8e:ca:41:d3:ac:f2:01:ba:8b:36:
                    4d:ce:75:00:7e:09:ba:35:af:19:5d:a6:10:71:f0:
                    ad:b1:9e:22:24:c4:b4:f9:73:55:4d:6f:49:a6:df:
                    3a:d6:d4:a4:ac:ad:ae:2b:a7:f8:95:b1:7a:65:1e:
                    67:b1:38:db:3e:e4:b1:31:a7:ff:c3:8b:02:9a:f1:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FE:50:9E:B4:BF:2B:D4:E9:2F:5C:22:C0:9A:59:C0:5F:DC:D2:43
            X509v3 Authority Key Identifier:
                keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0f:10:65:49:16:df:d0:9c:ae:d3:ee:a8:26:ba:8f:c9:11:
         75:d7:0d:ba:63:09:22:09:30:32:97:5a:e7:9e:0c:05:37:a6:
         c8:55:da:ef:32:3a:98:78:28:4c:fd:2a:a8:e1:65:03:e2:8e:
         fb:e2:49:66:89:71:8d:c0:bd:b2:36:49:09:1a:00:f7:85:fe:
         ed:40:5d:e2:4a:c0:7f:9f:8f:8c:cc:d4:ee:75:3d:c9:bb:2b:
         ec:41:d6:ee:0b:f1:f7:e7:18:29:3f:c6:9c:6d:c6:18:24:9a:
         07:7e:0d:4a:95:84:f2:bc:6c:2f:35:5e:31:f2:d2:65:be:1a:
         c9:30:91:ec:6f:8e:93:d9:50:32:a7:03:11:7e:ec:d7:dc:bd:
         42:1b:89:e3:81:6b:35:fe:60:7a:9c:f0:26:b6:a3:62:a0:61:
         de:55:a2:42:ea:c9:c9:13:93:1f:2c:85:bf:f1:2b:92:e7:73:
         81:74:a6:07:be:59:37:7d:b1:86:f5:0c:57:c3:44:fa:69:9c:
         68:91:17:1c:46:d1:c8:e1:22:25:e2:5d:ff:2d:ad:26:d6:67:
         d1:9b:3c:2a:1b:5f:f9:66:d9:64:65:3b:59:3d:e6:62:9a:8f:
         d6:fa:2a:a7:ba:92:6f:67:ee:15:d3:74:37:d2:8e:60:62:8f:
         fc:4f:2f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:52:46 2026 by rpki-client