Error: rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
File:                     D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft (raw, json)
Hash identifier:          CShL8H6QdDW8+sj8oKfGRpZW4VoXPH8blv/9lxxaF64=
Subject key identifier:   37:52:34:42:A0:55:C8:5B:32:31:9B:97:AC:48:34:B5:A7:53:D6:3B
Authority key identifier: 0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08
Certificate issuer:       /CN=F3626CB6AF/serialNumber=0F595081812DF1597E84EC11464E64C187EE3808
Certificate serial:       081A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
Manifest number:          081A
Signing time:             Sun 11 Oct 2026 02:03:45 +0000
Manifest this update:     Sun 11 Oct 2026 02:03:44 +0000
Manifest next update:     Tue 13 Oct 2026 02:03:44 +0000
Files and hashes:         1: D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl (hash: 3qePlc3JvEIdgWAf7GfI0GJHdi0LbiL24SYMQ6pAIM8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626CB6AF, serialNumber=0F595081812DF1597E84EC11464E64C187EE3808
        Validity
            Not Before: Oct 11 02:03:44 2026 GMT
            Not After : Oct 13 02:03:44 2026 GMT
        Subject: CN=6acaee81-f87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:d8:96:76:3b:1a:43:d6:65:14:c0:22:2c:
                    3c:f1:a7:90:77:9c:38:06:5f:5e:2a:d9:bf:4f:2b:
                    14:cd:d9:95:2b:4a:3e:7d:d3:6d:e5:bc:3a:37:c8:
                    5d:9e:8b:e3:e6:8e:62:a8:b5:47:f0:80:1d:94:9b:
                    a3:fd:33:5b:01:20:e3:50:3d:f4:30:d7:1f:cf:69:
                    a1:9a:f9:a9:53:ed:64:88:24:b1:1b:57:ba:f1:f7:
                    55:d3:11:00:72:7f:45:b3:d5:94:b0:6e:32:7c:09:
                    1c:81:52:0c:f9:9c:7c:9d:cb:5b:6c:46:40:79:99:
                    00:47:4e:28:c1:c9:5b:98:92:43:93:3c:89:ea:cf:
                    73:f0:f4:94:d6:c7:66:d9:47:99:6a:83:c2:c7:b3:
                    01:e8:c6:8d:34:11:c3:cc:1b:c7:be:41:56:08:4d:
                    da:06:81:b4:47:1b:f3:92:2f:56:cd:8b:b5:fc:bc:
                    84:5e:07:b7:60:1d:74:83:1c:7d:24:d7:a2:19:32:
                    35:7e:0a:c9:2a:a7:67:6c:19:9a:ab:72:87:3f:18:
                    0f:c5:d1:00:f6:64:b1:5e:0a:e8:1a:78:28:82:82:
                    ec:70:df:97:a5:3e:cc:85:7c:76:fe:8d:5c:b3:cc:
                    1b:04:95:77:dd:52:ee:aa:e8:67:24:a5:e4:8b:15:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:52:34:42:A0:55:C8:5B:32:31:9B:97:AC:48:34:B5:A7:53:D6:3B
            X509v3 Authority Key Identifier:
                keyid:0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:39:c8:ae:de:ea:52:ba:28:3b:84:5c:5d:18:43:24:10:e8:
         b0:6d:04:2d:7c:38:f2:d5:07:74:9e:7d:79:6e:00:6f:a7:af:
         71:a6:73:e4:39:37:5e:a7:a0:cd:ac:ed:eb:3e:1a:6e:08:eb:
         04:0f:40:3f:b2:cf:71:5c:86:bd:6d:dd:6a:26:75:8f:ac:4d:
         a0:03:5a:89:23:ad:93:12:0e:47:7a:b8:1e:3f:06:20:ea:75:
         31:d4:36:9b:53:e6:0e:05:8e:ad:d0:a8:17:63:f0:6a:8e:8e:
         19:8e:31:f0:f5:7b:39:ee:d6:04:e0:80:41:54:59:4c:91:4c:
         dd:0e:9e:64:9d:2b:c6:2d:b1:b7:df:a7:73:21:ce:88:ca:9d:
         b6:f3:91:a7:c6:ad:3e:a3:be:95:53:26:84:d4:f2:f2:36:f0:
         81:1d:7a:85:b8:27:b8:70:79:68:a5:95:fc:5d:e2:79:34:fd:
         e9:9e:6f:a7:f3:9a:1f:81:b4:aa:63:95:2d:1f:c9:fb:63:0a:
         10:a7:73:6d:6a:7b:17:90:82:98:fb:89:86:dd:ff:4e:b0:1c:
         3c:85:ff:14:64:3b:22:96:2f:cc:a2:75:9f:44:c7:84:77:e0:
         29:f5:ae:60:f0:e2:6a:19:23:95:fa:78:cf:53:62:22:e3:fe:
         b9:7b:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:53:10 2026 by rpki-client