Error: rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
File:                     6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft (raw, json)
Hash identifier:          QTvtq5LB2LsDsEtZv3PsxlPLJYgjZpIMSSc4ul4OZLA=
Subject key identifier:   33:8C:98:9C:DD:10:45:63:39:94:B7:D9:E3:69:4C:48:CB:58:03:17
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Certificate issuer:       /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial:       0776
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
Manifest number:          0765
Signing time:             Tue 22 Sep 2026 02:23:45 +0000
Manifest this update:     Tue 22 Sep 2026 02:23:44 +0000
Manifest next update:     Thu 24 Sep 2026 02:23:44 +0000
Files and hashes:         1: 6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl (hash: Pf5cgsagqE9rm45TY38fKiu0StB0EF0zVx8lCOBjmWo=)
                          2: 12C30C386ED911F1AA9BFFB5CE1D38B0.roa (hash: ny6Qirp/TPtOg7f0rDMPDEbvSvgIuv756XryNV1Rv58=)
                          3: EDC3F166AE8711F09155758EDAE4EC9C.roa (hash: qrpEwoN4bqccVV8hRmdHHa1nf7DJFBvB/v1V8q4KvmY=)
                          4: A104B9E26ED911F1996895B6CE1D38B0.roa (hash: 1zsdJY465Xz/ObwV+v28QHRsAQ+DwcvWszitsFW7O/Y=)
                          5: 4459B99A6ED911F1803F17B6CE1D38B0.roa (hash: Ch2RN+Gqd1vqPPkfxLYdfmIBMrPYTiTs+812RDESRG0=)
                          6: 494CFA8CAE8811F08C0FDC8EDAE4EC9C.roa (hash: yhad+BFB3rkLcu1ckI0YSXhxOby95eauRp/yhzhsWCY=)
                          7: 20CA242CAE8811F08579A28EDAE4EC9C.roa (hash: fsxmXnslbAUwwYawnmsD45MhR7pqaGgeQtYlfmeLKUs=)
                          8: C6D08762AE7911F0865B5AB3DAE4EC9C.roa (hash: bUSiJqRSq5rymPhrVLnmkhbhEBlGLZN5B0EkvrcOa1o=)
                          9: D8B7CB286ED811F19A665DB2CE1D38B0.roa (hash: mMNXtOYCnuBwvr7qzFaW+gy6yRDfvySr9zLAUot0/c4=)
                          10: 86FAFC606ED811F19718EFB1CE1D38B0.roa (hash: 8VMTgnIFRkQabFuzrAgfswAcv5AWFmRifF/txsjL0aA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F151EAF, serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
        Validity
            Not Before: Sep 22 02:23:44 2026 GMT
            Not After : Sep 24 02:23:44 2026 GMT
        Subject: CN=6ab1e6b1-b621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:a2:01:85:0b:f0:9c:34:57:67:c1:c4:b4:
                    fa:93:00:d9:99:54:58:62:19:10:91:1d:3f:54:60:
                    a5:4d:c5:4e:e4:c2:12:ba:0c:7c:cf:76:21:67:6a:
                    2f:96:f8:0c:1c:de:38:89:e3:70:57:d6:dc:4a:44:
                    90:a6:d4:d1:45:84:a7:67:18:23:cd:c4:6f:df:67:
                    24:59:bb:ea:4f:3a:62:e7:53:a6:00:97:a3:06:14:
                    bf:b7:16:f2:f0:95:e6:c3:5b:67:1e:e2:e1:e2:3d:
                    9e:2c:bf:88:ea:b8:22:35:b4:60:82:55:e5:33:09:
                    d1:53:00:e5:f9:b0:e3:6c:93:fb:a2:f1:b7:4f:0a:
                    e2:4e:24:8d:ea:3d:1c:6a:2f:be:bd:04:3f:77:d3:
                    60:f9:0f:4f:eb:70:b9:9c:6d:04:b7:3e:f3:da:49:
                    af:13:5c:0a:73:ac:3f:d1:45:3d:61:34:a4:82:76:
                    5b:52:79:fa:27:1a:04:20:ff:8b:00:c1:54:bf:9e:
                    ad:77:ab:e9:87:fa:a1:3f:97:00:e2:af:e3:ba:01:
                    8d:47:51:a2:df:f7:a1:99:61:41:5f:ae:28:45:e6:
                    a0:ac:d9:06:8c:4d:bc:0b:c8:93:d4:1e:b1:17:7f:
                    8b:15:b5:4d:74:8b:54:4f:34:eb:24:93:14:f4:29:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8C:98:9C:DD:10:45:63:39:94:B7:D9:E3:69:4C:48:CB:58:03:17
            X509v3 Authority Key Identifier:
                keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d2:a4:be:b9:91:f7:16:6f:fb:4e:e2:97:49:78:e5:ef:5d:
         eb:5d:7c:36:f5:7e:1d:da:8a:4d:a9:03:cb:a4:81:1d:8b:2b:
         9b:2d:07:b3:a1:93:3c:9c:fd:42:2a:61:27:ca:84:ee:14:46:
         e3:ab:3a:73:f8:80:8a:80:db:57:fa:31:7f:98:c5:b8:6c:ff:
         57:16:73:b6:c9:5e:75:56:08:e2:27:b2:14:40:af:d6:db:08:
         e4:f2:d1:03:83:7e:c4:1e:4c:17:55:c1:82:3c:98:44:1c:8d:
         21:36:e8:3a:86:da:91:ca:c2:29:cd:fa:71:e0:eb:02:38:d5:
         59:8c:1a:8e:f7:b8:c4:7f:46:b0:cf:39:ec:75:c9:50:85:33:
         66:ea:c0:51:3b:60:c0:b6:1b:75:41:6b:4b:58:42:93:62:ce:
         a5:23:64:57:18:05:bf:9d:b0:bb:f7:24:1d:d0:0a:d9:e4:14:
         fd:92:a8:51:58:d7:d0:8d:29:58:7c:53:7b:47:cb:55:30:91:
         a1:3d:0d:0c:be:e1:b6:eb:7d:02:65:54:86:0f:4c:22:8e:73:
         a1:0f:25:2f:f4:e2:9f:5f:12:44:d9:e1:52:43:c3:04:f3:2d:
         6a:21:77:ab:c8:42:3a:d1:a9:dc:45:c9:30:e1:06:98:99:53:
         fd:5f:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:14:22 2026 by rpki-client