Error: rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
File:                     3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft (raw, json)
Hash identifier:          RrQ2oeezS0rNNvGTldJQDPLak/zFzISnrsvrfYpDoUU=
Subject key identifier:   F7:4A:24:DA:1E:84:E2:27:7F:F8:5D:7F:60:A3:4E:63:3B:87:E3:EA
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Certificate issuer:       /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial:       07B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
Manifest number:          0793
Signing time:             Thu 05 Nov 2026 02:28:30 +0000
Manifest this update:     Thu 05 Nov 2026 02:28:29 +0000
Manifest next update:     Sat 07 Nov 2026 02:28:29 +0000
Files and hashes:         1: 3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl (hash: x5qGebHMtfFdsD0kED3XTUQAKrgbGltiFA6kmBegQCg=)
                          2: 6F7B2D9CE6EB11EFAF676182762E951A.roa (hash: ywXo19J7zzDJozIEEmOFi9+A4iofR1mYhpmq35OcaZk=)
                          3: 6A5D847ABD6111F0A69CE1BFDAE4EC9C.roa (hash: fHB735+tbv3iVDIq2ZhU4RWinWdYCJgEt4jlNj33RYU=)
                          4: 0EB8532CE6E611EFA1284861762E951A.roa (hash: +Ok9dLqiCTNEexkoRFgNd4UM629LDyyikx+fFXEssiA=)
                          5: D2640C504D8611F194813CBECE1D38B0.roa (hash: /99i/E37/sLc9uckkDyxL7ts9mUcGjjrXZJ3fFKWsS4=)
                          6: F5ED0DA04D7E11F1841FD20ECF1D38B0.roa (hash: oEUd1BdQ4h8SlMS9rr6IITgSdjGWARvpJYNAzue0L1Q=)
                          7: CEBF9F2CBD9B11F0AACFB4A9DAE4EC9C.roa (hash: Y3SPEfa9FhnRnBcfIvNCeFJG2P0gudqhEmqdjsID6Jo=)
                          8: F61EA0164D8511F1812018BACE1D38B0.roa (hash: Ab9rIz1detylRD5j7+jES2KsDtf7UxmgzAMTiEbWGbc=)
                          9: 6FD074F64D8711F1A4EC49C2CE1D38B0.roa (hash: zxcsbgaRBJy457Rvci+coU8tsua7eVRsu1+gKbjYR7U=)
                          10: F3B29612C8E711EFAC3B3EA9762E951A.roa (hash: OETANewi1spwDI+wuFRp4Ft8bl6bEviyIyR18XaKaRE=)
                          11: CF2B6C9C4DED11F18455B9BCCE1D38B0.roa (hash: zO7OG6eEHPwr6j/HSsWNv1nMchvBsohwY9RpbxKAxGU=)
                          12: C66E300C4DEE11F19B3077C4CE1D38B0.roa (hash: 16rkfSs+t576hxwFyafItM6LVAcNfwbY0/MmDqPh9yE=)
                          13: 5F5BD7A8C90511EF919C5060762E951A.roa (hash: CP9UE+jBOHX8oQ6s2JYHUVcCyElYEvB82K2Sr0b1faI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1972 (0x7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
        Validity
            Not Before: Nov  5 02:28:29 2026 GMT
            Not After : Nov  7 02:28:29 2026 GMT
        Subject: CN=6aebe9ce-2238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:4e:fa:51:77:bf:5a:1c:33:c1:42:47:97:
                    fc:e4:3d:c3:48:a3:02:8d:91:fd:09:0f:08:1d:ad:
                    4d:a2:83:e8:23:09:17:d9:a4:ae:66:b9:4a:f2:02:
                    09:b8:03:19:38:4f:bf:41:3e:e5:14:47:49:88:9a:
                    60:57:39:d7:f0:b1:f0:3a:0b:9a:2b:be:8e:9a:15:
                    22:40:6b:83:29:3d:20:b5:5d:78:54:32:f5:32:3b:
                    35:5c:6d:22:1e:a0:2a:16:2f:e9:ae:28:3e:82:ec:
                    d0:66:75:9d:6e:21:de:90:18:14:32:27:30:43:78:
                    03:7d:5f:e3:b9:e3:f2:6d:12:6d:39:0d:0d:f9:c5:
                    f5:ae:05:5b:67:3f:fc:57:0a:73:a3:0f:d3:99:0b:
                    be:77:37:b1:40:75:58:68:c3:4c:71:e6:59:8c:fb:
                    90:23:ae:09:19:94:e4:42:3e:56:19:c9:46:0d:3c:
                    b4:95:de:3b:28:0c:47:01:85:6a:52:46:3b:29:43:
                    96:db:36:41:6a:6b:ff:a2:c8:23:66:b3:92:9e:ab:
                    1b:db:ec:04:71:a2:8d:a1:84:ab:73:fb:6b:84:62:
                    10:03:39:ff:57:a2:c2:d3:0e:ca:4e:84:fa:53:88:
                    84:b2:34:a8:f3:66:bc:fa:c4:b6:b3:2c:36:cb:8a:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4A:24:DA:1E:84:E2:27:7F:F8:5D:7F:60:A3:4E:63:3B:87:E3:EA
            X509v3 Authority Key Identifier:
                keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:db:82:8e:b8:b3:74:2e:14:bf:02:2a:e2:a8:5e:53:04:
         fe:e2:94:ae:65:f8:fc:03:42:07:0b:b7:de:b0:53:08:61:8b:
         32:ea:f3:53:54:57:01:6b:cb:32:a1:24:01:20:1d:b6:40:a3:
         b1:cf:4e:22:03:9c:af:09:58:d2:e7:04:c0:6f:70:7e:85:22:
         e6:88:2d:1c:b8:17:15:ca:54:4a:3b:7a:51:f7:4f:a8:b4:ed:
         36:bf:00:d5:7a:08:96:84:6e:41:df:d1:2c:6b:0a:bb:b6:de:
         0c:5e:64:fb:30:46:2d:35:c5:96:20:d7:83:5d:cb:53:d9:82:
         36:7c:e9:ad:c5:59:b1:5b:06:84:1d:82:65:ce:6b:bd:34:56:
         c8:5e:78:d0:a7:4f:49:88:b9:bd:2e:16:4c:06:0b:29:31:d0:
         a3:1c:08:ce:47:c2:06:88:a3:a9:67:23:ea:af:5a:7c:24:11:
         d0:b0:5c:70:1e:1d:82:de:2d:e1:5d:28:e2:e0:7e:32:63:5b:
         30:0f:61:1e:c5:af:a4:7e:9b:4e:66:86:b2:e6:c8:60:a4:40:
         e8:dd:1d:dc:a7:15:df:ea:96:b6:5b:10:82:21:80:3b:ae:94:
         7e:fc:d4:f9:97:c2:29:71:a4:6a:3a:07:07:5c:71:63:42:34:
         b0:cb:7b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:16:53 2026 by rpki-client