Error: rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
File:                     -dz45IZ0npp0P-Rz662BTRzsX6k.mft (raw, json)
Hash identifier:          xx8SEIQY81lUue2OynlsICy3FFKmhFUOBNStuMI8+UU=
Subject key identifier:   9E:FE:50:53:24:00:C2:AD:6E:12:4C:96:C5:AE:49:83:8A:94:87:F7
Authority key identifier: F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
Certificate issuer:       /CN=F36FCD8DAF/serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
Certificate serial:       0681
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
Manifest number:          067F
Signing time:             Thu 05 Nov 2026 02:45:10 +0000
Manifest this update:     Thu 05 Nov 2026 02:45:09 +0000
Manifest next update:     Sat 07 Nov 2026 02:45:09 +0000
Files and hashes:         1: -dz45IZ0npp0P-Rz662BTRzsX6k.crl (hash: Z1T31g0F7ORdxzMsO3jYNT9GM/F31w2zaebK0m5dafg=)
                          2: F34CABAC899011F1990DBFCCCE1D38B0.roa (hash: QLCFdcp0U6K+uipbYurxt9ALPdLqdppOnWWlizx/0bY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCD8DAF, serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
        Validity
            Not Before: Nov  5 02:45:09 2026 GMT
            Not After : Nov  7 02:45:09 2026 GMT
        Subject: CN=6aebedb6-367c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:25:9a:9c:6d:97:47:dd:e4:0c:bf:0b:5e:
                    7e:8e:f5:1f:5d:4f:11:1d:d4:06:9d:2f:b9:24:8e:
                    05:20:67:57:e3:22:42:96:93:b5:27:ce:c8:48:95:
                    8f:e0:22:97:9d:85:4d:f4:e4:79:20:4a:83:f1:df:
                    6f:d0:a9:2a:7b:ee:8e:17:4c:3c:c8:d0:82:bb:44:
                    78:79:f7:f0:22:c9:50:7f:8c:93:98:33:b2:7f:88:
                    a9:ed:48:cd:69:0b:e0:53:70:55:a2:48:d2:5f:fe:
                    70:c8:2e:69:14:e0:e2:7d:43:a7:f8:7d:95:8c:73:
                    86:b3:25:1f:85:45:cc:81:3f:ba:61:86:f5:5a:f7:
                    d1:b4:64:4f:28:53:cc:cb:1c:bd:4f:0b:50:5c:82:
                    86:e7:3d:c2:ac:04:23:ac:2a:3a:28:64:fc:0a:c3:
                    e0:41:54:3b:97:09:df:81:2d:f9:2e:ee:4d:8e:15:
                    15:de:07:2c:02:a1:4f:01:56:8f:e0:e1:5f:90:64:
                    b7:17:bb:64:3d:4f:98:85:c2:43:55:3a:a4:b9:04:
                    44:1f:87:4c:22:1a:2e:b8:88:bf:e3:2f:5f:14:05:
                    30:22:f3:ad:8f:e6:87:0f:7c:e0:f1:0d:52:8e:7d:
                    d3:ca:b4:49:5a:99:8e:4e:8e:e9:42:90:b5:89:71:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FE:50:53:24:00:C2:AD:6E:12:4C:96:C5:AE:49:83:8A:94:87:F7
            X509v3 Authority Key Identifier:
                keyid:F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8e:42:7c:30:b9:48:05:b2:9f:fa:c0:b8:2f:27:2a:ca:8c:
         d8:7c:d2:bd:c1:30:37:14:40:fe:8f:79:0e:91:27:53:2f:d3:
         41:14:e2:af:6c:d9:30:70:8e:0d:00:98:ce:9e:6a:8d:62:57:
         78:98:8f:0e:f1:6c:79:c7:03:ee:19:3a:8b:16:2a:05:69:d9:
         d3:86:14:34:47:13:9c:7a:21:b2:80:f9:0b:03:78:9e:3a:1b:
         e3:9b:c9:2a:c3:14:c0:97:cc:26:cd:06:7d:23:d9:c2:c0:bd:
         c2:ec:e2:b3:cc:7d:0e:b6:80:f9:45:9a:a0:33:cc:49:9f:82:
         cd:f9:ce:46:08:cc:58:8d:4b:24:a9:e7:68:9d:ff:0e:33:7b:
         0d:4f:68:11:ae:29:b2:71:0d:82:d1:e6:16:83:b9:fc:2f:5a:
         32:e8:6f:dd:9b:af:30:53:79:38:58:8d:a1:51:30:18:b1:20:
         98:e9:1f:1c:48:32:38:ca:42:8b:7f:92:9f:c8:25:1d:79:84:
         26:fa:58:f4:af:c8:54:6b:1c:b8:d3:d9:d2:07:33:31:6c:6a:
         75:7f:75:e7:5b:35:56:c7:c6:cf:ec:d4:68:ae:7a:8c:dd:02:
         ea:cb:ff:e3:51:81:63:09:7d:e5:11:45:0b:1d:38:d9:bf:fa:
         96:8f:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:38:59 2026 by rpki-client