Error: rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
File:                     t96wG6y7S1p-nHgv_5n9jl3AbLI.mft (raw, json)
Hash identifier:          aDFDmvsTjTxeXhnMGc+p/dWU8UDCe8w2IEjLKyOuJNk=
Subject key identifier:   A0:01:4D:BF:89:ED:ED:25:EC:5E:2E:1B:F5:30:28:30:51:54:19:05
Authority key identifier: B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
Certificate issuer:       /CN=F361F5C9AF/serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
Certificate serial:       0825
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
Manifest number:          081A
Signing time:             Tue 06 Oct 2026 02:05:51 +0000
Manifest this update:     Tue 06 Oct 2026 02:05:50 +0000
Manifest next update:     Thu 08 Oct 2026 02:05:50 +0000
Files and hashes:         1: t96wG6y7S1p-nHgv_5n9jl3AbLI.crl (hash: cZEcWSHEpU0jyBMcyxu31iTKxmJkcCoZbWHL7Njp1IM=)
                          2: 68E480FA9BC111F182A092C9CE1D38B0.roa (hash: N4uiQf6Nb+lh4wjx0uZtYdhGrGnyVNGiH12tUomhWmM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 02:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085 (0x825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F5C9AF, serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
        Validity
            Not Before: Oct  6 02:05:50 2026 GMT
            Not After : Oct  8 02:05:50 2026 GMT
        Subject: CN=6ac4577e-4bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:21:b4:d0:0b:52:bd:f8:fb:b6:5f:74:58:
                    80:52:f4:d5:17:1d:94:ca:8b:fb:c8:c4:f0:f7:02:
                    43:1d:eb:d8:bb:92:32:f2:e9:98:70:43:f8:a1:a6:
                    9e:c4:df:d3:3a:e0:99:f5:c5:12:e4:27:5e:27:3b:
                    0f:54:f2:ef:39:69:14:e7:82:11:bb:ef:aa:cb:3f:
                    b6:8e:e2:30:5f:28:15:c4:b8:aa:31:96:19:be:66:
                    9a:5d:b8:88:84:06:c6:ac:0e:35:91:81:3d:04:04:
                    14:56:8c:7a:04:63:a8:cd:e7:ca:4d:27:a5:27:8c:
                    0c:12:ed:1c:40:56:9c:95:10:18:27:9b:de:2d:41:
                    7e:0b:58:ae:08:2f:5c:74:a2:47:cb:33:95:b9:3d:
                    07:b7:47:9d:1c:c0:5c:dc:32:6c:c1:90:07:ea:48:
                    7f:bd:bc:5f:72:cd:b4:64:9c:a7:99:9c:e3:15:7f:
                    63:97:02:b2:58:e6:96:1b:27:ec:e1:f9:97:8a:ab:
                    7e:f0:44:65:d5:19:3d:1e:d4:83:c8:de:36:a6:bc:
                    6a:57:48:3e:55:14:0a:50:15:e0:5a:e4:81:f0:cc:
                    23:3a:17:04:dd:21:26:c9:a4:2d:ff:ef:33:9e:be:
                    d5:e8:21:f8:36:2f:78:c6:e5:c4:28:3b:9b:31:d7:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:01:4D:BF:89:ED:ED:25:EC:5E:2E:1B:F5:30:28:30:51:54:19:05
            X509v3 Authority Key Identifier:
                keyid:B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:4c:95:45:39:26:7c:0a:b9:97:cc:6f:cf:93:9e:d7:b0:
         ab:17:0b:52:c8:0d:77:2d:b7:af:bf:76:e9:54:e6:c5:60:15:
         a3:6a:c0:8d:3e:f0:2d:99:de:22:47:d6:f3:06:e2:da:7a:94:
         d6:07:40:03:3b:63:fc:83:28:03:23:d3:5b:f9:6e:87:56:e2:
         98:5f:9c:6d:06:b9:82:39:33:d2:7d:a8:08:7d:c5:b4:a5:3d:
         14:7c:7e:88:8e:7b:23:da:b4:03:e2:87:1d:7c:94:3d:12:71:
         4c:3e:af:cd:82:fc:cf:52:96:6c:2f:89:46:9d:96:29:00:05:
         a4:14:52:6d:cc:42:d1:a9:6d:f8:94:29:24:c4:db:ac:07:fd:
         a6:30:83:22:f2:e7:ff:cc:2d:bf:cc:dd:64:be:9b:10:03:1e:
         3e:1e:b0:7d:50:8f:66:8f:2c:60:c3:a9:5b:33:43:5c:a2:b5:
         86:55:94:22:50:ec:8a:64:ce:f5:06:fc:d5:5a:b6:fa:d7:39:
         39:7e:1b:f6:b1:55:80:88:2a:e5:af:4c:2b:8b:42:5f:d6:b5:
         ce:e3:7a:13:5d:e4:1d:69:0b:e8:51:cc:f1:df:eb:09:3b:e9:
         0c:da:05:cb:f1:7f:5f:53:e0:79:81:0f:80:2a:2d:f2:75:b0:
         54:37:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:28:57 2026 by rpki-client