Error: rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/zBbI3dzOE6mgunKyD6uQO9nqDc4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/zBbI3dzOE6mgunKyD6uQO9nqDc4.mft
File:                     zBbI3dzOE6mgunKyD6uQO9nqDc4.mft (raw, json)
Hash identifier:          Jj0LzNXg2P/CFaNzB0uuL407K/ayxNrU9O+w+KiC3Ns=
Subject key identifier:   43:84:71:07:AD:52:42:24:B4:B8:A8:98:A6:E1:7A:2D:C1:B8:57:00
Authority key identifier: CC:16:C8:DD:DC:CE:13:A9:A0:BA:72:B2:0F:AB:90:3B:D9:EA:0D:CE
Certificate issuer:       /CN=F361373DAF/serialNumber=CC16C8DDDCCE13A9A0BA72B20FAB903BD9EA0DCE
Certificate serial:       99
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zBbI3dzOE6mgunKyD6uQO9nqDc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/zBbI3dzOE6mgunKyD6uQO9nqDc4.mft
Manifest number:          98
Signing time:             Wed 30 Sep 2026 05:37:50 +0000
Manifest this update:     Wed 30 Sep 2026 05:37:49 +0000
Manifest next update:     Fri 02 Oct 2026 05:37:49 +0000
Files and hashes:         1: zBbI3dzOE6mgunKyD6uQO9nqDc4.crl (hash: 3XehVpdtC13FVcN+eWGVp9RJViMWFYk30O0sxe++pWg=)
                          2: F5AB9874478F11F190E5E807CF1D38B0.roa (hash: trV7BwMqPto1yHF/DuYdQJNnLE/XCST1fhJr5+Udcv0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/zBbI3dzOE6mgunKyD6uQO9nqDc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/zBbI3dzOE6mgunKyD6uQO9nqDc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zBbI3dzOE6mgunKyD6uQO9nqDc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361373DAF, serialNumber=CC16C8DDDCCE13A9A0BA72B20FAB903BD9EA0DCE
        Validity
            Not Before: Sep 30 05:37:49 2026 GMT
            Not After : Oct  2 05:37:49 2026 GMT
        Subject: CN=6abca02e-6b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:2a:7b:f8:57:02:18:54:e5:70:83:47:d7:
                    ba:73:8a:24:3b:aa:5f:9d:67:ec:e6:d9:ab:d2:30:
                    ec:88:2c:6d:41:c4:cc:dd:e3:ad:5a:59:e4:55:98:
                    fd:bf:d8:22:cc:8d:3a:38:5f:ce:7d:6e:6f:db:7b:
                    21:f2:1b:e4:3e:d4:42:e6:92:8c:53:72:31:38:82:
                    e2:24:4c:86:1d:63:87:bc:26:2d:e7:1e:4c:8b:ba:
                    d8:2a:9c:c0:a0:67:99:44:e1:ec:fa:2c:f7:5d:d5:
                    25:b8:2c:20:02:0f:77:ed:00:0e:34:2d:03:1f:4c:
                    a0:d8:58:ee:f9:57:c9:bc:d1:9b:4a:42:7a:5a:8b:
                    dd:a4:e7:61:92:5b:e0:81:7b:ea:72:a7:3f:17:92:
                    7b:ab:ff:bb:da:87:08:e8:af:31:df:8d:06:57:d6:
                    3c:7a:59:f6:a3:ca:a0:da:84:43:ac:12:64:54:66:
                    7f:ad:11:bd:3d:a0:ef:44:7c:b7:12:df:42:0a:af:
                    e9:14:a5:f3:88:53:18:14:18:d4:13:5a:ca:b3:a4:
                    49:a5:df:30:a2:4e:1d:df:a3:88:3d:86:82:17:96:
                    07:de:a2:cf:11:be:49:fb:18:2b:b1:39:e4:34:04:
                    c5:9d:c2:a2:0d:60:36:51:cb:f7:c2:ad:00:de:59:
                    56:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:84:71:07:AD:52:42:24:B4:B8:A8:98:A6:E1:7A:2D:C1:B8:57:00
            X509v3 Authority Key Identifier:
                keyid:CC:16:C8:DD:DC:CE:13:A9:A0:BA:72:B2:0F:AB:90:3B:D9:EA:0D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/zBbI3dzOE6mgunKyD6uQO9nqDc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zBbI3dzOE6mgunKyD6uQO9nqDc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/zBbI3dzOE6mgunKyD6uQO9nqDc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:3e:15:b0:a0:3b:9b:8f:7d:9e:6a:cc:0a:57:f5:d9:36:
         f9:68:9d:04:26:a2:01:ac:4d:d2:71:01:f9:ef:61:97:9c:5f:
         f6:91:e5:67:35:fa:53:d1:b2:df:8d:15:39:c7:ac:d5:44:7c:
         88:ca:ca:de:c8:42:e0:eb:42:30:0e:a4:d6:97:72:6e:d7:19:
         6c:75:a7:b7:56:bb:45:bd:4d:d0:fe:cd:97:ac:5f:35:85:17:
         ec:f4:4b:a9:2a:b5:90:ce:d6:94:12:13:ef:b7:6f:aa:60:91:
         d4:f8:e5:84:59:d5:c4:37:07:1b:3d:c0:f0:80:40:fe:da:bf:
         03:13:e7:f8:68:58:78:6e:f7:42:9a:34:3c:71:f8:da:4f:5c:
         de:a9:06:e6:0d:4d:24:fd:b5:29:ad:f0:3c:19:12:05:98:e6:
         1c:5d:3f:a3:87:9c:f8:8b:1f:37:2a:78:e9:9a:6c:59:e4:b9:
         8f:b5:06:0c:7e:6d:ce:a1:2d:a9:cb:e6:c9:94:58:88:68:e5:
         26:7e:f9:b3:67:22:e7:bf:fe:43:5c:49:ee:9b:87:6f:e2:92:
         6d:82:d8:cc:e6:be:ee:8a:ea:51:c4:bc:0b:e1:24:1a:92:28:
         57:b5:8f:f0:71:38:e3:d6:b3:63:76:f3:4a:34:2f:99:fe:bc:
         b2:06:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:34:53 2026 by rpki-client