Error: rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
File:                     4u30RuwlLhL_hY7r4xim2a4EMbA.mft (raw, json)
Hash identifier:          1rd+JkX7CBCw9cNZwIjSgy9OKkBC5zuhZdMxwGHWuwA=
Subject key identifier:   1D:83:E4:2C:B5:7C:FB:4A:B9:0A:30:C2:77:E1:13:4A:24:72:6C:54
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Certificate issuer:       /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial:       079C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
Manifest number:          0798
Signing time:             Sun 15 Nov 2026 02:20:58 +0000
Manifest this update:     Sun 15 Nov 2026 02:20:57 +0000
Manifest next update:     Tue 17 Nov 2026 02:20:57 +0000
Files and hashes:         1: 4u30RuwlLhL_hY7r4xim2a4EMbA.crl (hash: y5FC+GIHPdEptFwOOy8+fmcpGKDVJnp8mAUIo/EBGdU=)
                          2: BC7938E258D611F1B4FC68AFCE1D38B0.roa (hash: 7f8KI6rxDfxMqODzde75RMP2FvyjEgwgMeCyQOzN36g=)
                          3: 3205938460DA11F18CDCC1DCCE1D38B0.roa (hash: Z2Rj2kCALra6smsTiaj7JhFm7dUvTIxKaqfHUdO/9Bs=)
                          4: 90F79C7C60D811F19F96B0D2CE1D38B0.roa (hash: T65kjrw8rJ3A6xr2pSO5MnSqwbL9mSOLIEsI6tFtcqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1948 (0x79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F61A5AF, serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
        Validity
            Not Before: Nov 15 02:20:57 2026 GMT
            Not After : Nov 17 02:20:57 2026 GMT
        Subject: CN=6af9170a-757e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:6c:60:ac:1d:b0:a2:21:37:c7:e5:e6:f6:
                    9f:d5:94:ab:41:8a:ec:fe:6d:4c:cf:e6:95:2c:be:
                    c5:c4:d2:48:04:bb:10:87:95:31:07:61:5d:7a:46:
                    fc:e1:f6:57:9a:b9:05:50:14:58:38:94:d1:cf:70:
                    1c:5d:e5:5a:c6:0f:db:d8:e9:79:9e:f6:5e:53:f8:
                    58:af:15:17:07:f5:eb:91:a3:1a:ab:53:27:85:63:
                    0c:34:1d:21:3e:ca:eb:d3:f5:8a:94:74:e3:e2:62:
                    65:82:7b:1a:6b:4c:1d:8c:bf:95:e8:04:78:f6:ef:
                    2c:3e:78:76:76:8e:47:38:ee:5f:6f:5b:8e:dd:70:
                    21:b1:2d:37:00:da:01:02:93:b2:70:9b:68:48:08:
                    1d:ff:ba:13:b6:a4:de:96:0a:d4:72:77:a8:bc:99:
                    a1:fd:9f:6d:b4:60:3e:07:24:99:2e:e1:f6:fc:63:
                    7b:e0:88:e6:8d:4b:7b:a6:ab:8a:5b:d8:18:05:68:
                    15:3b:d7:38:9c:41:5d:5b:c5:e1:0f:10:4a:0f:e6:
                    5d:91:2a:ad:6c:59:fa:03:96:39:09:25:c6:2d:73:
                    fc:9d:a8:22:65:86:61:66:8b:68:36:4c:b3:29:7d:
                    1a:e1:d4:e8:d0:61:a3:ae:3b:f6:36:a1:cd:33:45:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:83:E4:2C:B5:7C:FB:4A:B9:0A:30:C2:77:E1:13:4A:24:72:6C:54
            X509v3 Authority Key Identifier:
                keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:73:4c:f6:d1:68:85:11:d7:5f:1a:ea:63:df:c1:ac:f3:7b:
         7d:31:1f:d9:51:e5:98:94:8c:61:18:32:05:30:47:8b:70:5a:
         e3:4c:14:d1:fb:9e:9c:5f:db:70:2a:ea:0f:d5:27:21:9f:d7:
         1f:fe:3c:aa:c4:9c:56:32:34:bd:f3:49:99:ca:11:ea:ef:20:
         a5:f2:01:ab:1e:66:15:b9:16:19:a9:14:56:a0:17:9a:80:6d:
         8f:76:5c:b9:88:4c:3a:48:14:88:1d:e0:ed:bb:87:11:92:2d:
         d0:bc:2c:7e:9f:97:91:0c:18:eb:fb:35:d3:75:c9:57:e0:8c:
         2e:d6:ec:f2:77:79:5a:c7:d6:0d:80:00:6d:25:0a:ec:21:24:
         9f:7a:5c:99:57:14:b0:97:0f:c9:ac:08:bf:e1:3d:7b:9f:7a:
         9c:de:93:78:51:c5:5d:b2:a5:83:c5:12:d0:05:21:96:0f:a1:
         06:09:27:cf:f1:cf:19:66:8b:e2:6b:57:6f:f5:1a:26:50:4f:
         88:dc:60:61:b6:a8:f0:64:45:45:be:a8:e1:24:8e:2f:80:49:
         73:dc:a5:fb:38:52:c2:85:89:58:9f:69:f3:17:a1:ee:49:ea:
         d1:bc:df:3b:c2:a2:56:9d:47:39:ce:bc:b9:4f:5b:57:92:f6:
         51:84:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:25:58 2026 by rpki-client