Error: rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
File:                     6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft (raw, json)
Hash identifier:          pCdkraROvXryFVSHpZrTxXLmmRB54ocHu34d/I7/t9U=
Subject key identifier:   B3:1D:05:EF:8D:00:BC:A7:81:79:C3:EC:4B:3A:31:55:E2:6A:DA:5E
Authority key identifier: E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C
Certificate issuer:       /CN=F36150C1AR/serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
Certificate serial:       0E9F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
Manifest number:          0E9F
Signing time:             Tue 13 Oct 2026 01:06:02 +0000
Manifest this update:     Tue 13 Oct 2026 01:06:01 +0000
Manifest next update:     Thu 15 Oct 2026 01:06:01 +0000
Files and hashes:         1: 6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl (hash: AjNs3ayX4rQ0CUkemCBSmzOzVnP3DLLG4vzH8RhBACk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                          rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3743 (0xe9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36150C1AR, serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
        Validity
            Not Before: Oct 13 01:06:01 2026 GMT
            Not After : Oct 15 01:06:01 2026 GMT
        Subject: CN=6acd83fa-f34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:2d:74:31:a4:09:9f:b2:0d:44:87:28:58:
                    8f:39:a2:4b:1c:79:64:35:6d:d1:9c:ab:ee:be:6f:
                    76:11:1c:ed:6d:1d:57:68:d8:9d:b3:63:dd:39:ae:
                    47:79:45:4d:7f:27:24:58:8d:f3:9f:64:29:88:b1:
                    02:0b:8a:a6:a6:d5:66:5c:89:df:00:f8:6c:c9:72:
                    a3:48:58:94:e0:cb:15:c6:c2:3e:cd:c7:8e:1e:13:
                    2a:6d:98:1f:fe:6f:ee:9c:0c:91:0f:b5:08:3d:dc:
                    95:ba:93:6f:6d:73:d8:b8:20:76:08:74:68:77:cd:
                    00:97:96:1a:43:2d:87:d8:2b:7d:5a:14:4c:ca:b2:
                    a1:86:58:96:a9:cf:62:3a:5a:8f:e9:11:16:11:92:
                    74:d3:bb:63:c1:ae:da:01:59:2b:38:54:05:ae:e7:
                    06:a9:1d:2a:17:85:e7:b6:03:60:88:3c:29:fe:2c:
                    ef:d3:51:41:9e:c5:99:cf:70:24:7b:5e:c3:e6:17:
                    1e:25:c3:a5:cb:d6:c4:2b:ec:d0:40:77:fc:77:43:
                    6e:f6:61:ae:eb:ec:fc:ad:4c:80:12:b6:29:2d:3a:
                    26:44:52:85:8c:2b:05:d1:4f:24:60:c6:b8:01:76:
                    8f:19:94:ba:9d:23:cd:97:22:58:45:b8:8b:c8:c9:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1D:05:EF:8D:00:BC:A7:81:79:C3:EC:4B:3A:31:55:E2:6A:DA:5E
            X509v3 Authority Key Identifier:
                keyid:E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:aa:4c:22:86:10:b5:f8:80:00:49:1c:d4:d6:01:c9:f6:83:
         d6:5f:6f:74:55:b6:94:32:87:8e:93:15:dc:a2:66:49:56:2e:
         17:c7:3f:b8:e6:eb:40:09:8b:05:d1:d5:36:7e:e6:f7:42:4b:
         55:0c:bb:cd:51:65:81:48:2b:53:13:15:1f:82:4e:40:12:4d:
         b5:74:af:11:27:92:1a:95:19:26:e8:a5:93:63:3f:82:e3:97:
         6d:63:f0:18:b7:8d:20:c7:48:be:c0:95:57:77:5b:0e:93:25:
         22:4e:f5:bd:38:d9:52:29:79:d0:76:94:96:21:b5:f8:86:15:
         68:5d:a5:ef:73:8b:8d:fe:11:09:6d:4f:29:5c:1b:fc:6a:ec:
         ee:10:e4:38:ff:85:02:f4:9e:fc:30:05:0a:07:2d:c3:e4:f0:
         54:98:3f:e8:19:8b:05:ec:39:0b:1a:fb:7c:a0:c8:73:ac:77:
         e3:cb:59:d1:43:71:08:66:e0:aa:4c:73:20:2c:de:69:06:1e:
         bb:39:7b:08:ec:85:d9:a6:04:e7:77:90:2a:74:89:54:fc:61:
         ec:cc:b6:2c:d9:c8:f3:30:06:84:9f:e9:99:d5:3e:0d:33:73:
         34:15:d5:dc:b4:f0:d7:c5:d0:04:e4:a1:58:68:52:9c:f5:f0:
         49:2d:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:03:36 2026 by rpki-client