Error: rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
File:                     bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft (raw, json)
Hash identifier:          Vgpcpjp3KNf7iSbbNcrbbitVkpXgHeauo2O+nk2OPqc=
Subject key identifier:   3A:31:46:A8:12:5E:A0:42:73:E0:00:D9:33:90:04:49:93:4A:F7:FD
Authority key identifier: 6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
Certificate issuer:       /CN=F36432B6AR/serialNumber=6EA98013EE10BFB53A30273B6C4CFB5ECE74618B
Certificate serial:       053D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
Manifest number:          053C
Signing time:             Tue 22 Sep 2026 03:15:56 +0000
Manifest this update:     Tue 22 Sep 2026 03:15:56 +0000
Manifest next update:     Thu 24 Sep 2026 03:15:56 +0000
Files and hashes:         1: bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl (hash: yU307zLj687lXFzG4p8aVdUa/0FfkT+Tdd8QURRiWjg=)
                          2: 32C56C048AA611F183809FE4CE1D38B0.roa (hash: 05NOZTIQSGIxosBWg5s1k2e5173s+rKsv547cl8cIvw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
                          rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36432B6AR, serialNumber=6EA98013EE10BFB53A30273B6C4CFB5ECE74618B
        Validity
            Not Before: Sep 22 03:15:56 2026 GMT
            Not After : Sep 24 03:15:56 2026 GMT
        Subject: CN=6ab1f2ec-4a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:c9:92:83:90:1e:6a:e6:9f:fa:da:65:d8:
                    05:aa:4c:77:dc:85:53:0b:c3:b1:f7:94:a6:a4:78:
                    17:7a:14:d5:d6:bc:28:9e:d8:87:ab:8a:6a:b7:0a:
                    7f:58:aa:e9:77:49:1d:d2:38:4d:02:2c:20:49:b6:
                    83:df:e1:b1:9e:6f:36:3e:db:d7:f6:b2:10:22:a6:
                    80:0f:e1:4d:eb:33:03:24:56:24:c2:2a:d8:2b:d1:
                    41:63:16:1d:9d:7a:c0:c3:20:98:4b:27:7c:41:ad:
                    e1:7d:b9:8c:27:da:e1:0d:c7:a1:c0:58:83:44:83:
                    01:7c:32:c0:d6:3d:6e:47:28:0e:dd:8e:8f:7b:8f:
                    b2:99:66:ca:7f:44:04:f7:31:f0:97:77:b0:0d:14:
                    70:29:f8:38:20:eb:a3:04:33:8f:91:ad:6a:cf:3a:
                    e3:81:b5:51:f1:ab:e3:8d:c5:47:ad:e5:fd:ce:7e:
                    ac:77:a0:8f:01:6f:28:3c:b7:a6:1c:e9:6a:ce:10:
                    f0:60:65:7b:c5:d4:7b:9d:71:46:2f:e8:9b:0c:f1:
                    46:6a:6e:6b:e9:db:de:6f:23:26:46:8c:97:7d:86:
                    76:10:3f:e4:08:9b:74:c5:82:7f:cf:3f:3b:04:7f:
                    d7:78:21:8f:7d:65:21:5a:6c:ae:7c:ff:dd:d5:74:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:31:46:A8:12:5E:A0:42:73:E0:00:D9:33:90:04:49:93:4A:F7:FD
            X509v3 Authority Key Identifier:
                keyid:6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1d:c5:17:9f:64:58:7f:91:a1:fa:67:f9:0a:60:92:35:5f:
         00:ba:9f:0a:a9:c2:2a:4d:8d:76:36:96:47:ca:97:00:f5:3d:
         d6:2e:00:9c:58:33:22:01:1d:39:30:03:ab:a5:c4:33:38:c5:
         0c:2e:7e:7b:2b:bd:1b:d4:b1:98:23:f2:a6:80:82:aa:b3:c8:
         ae:0b:67:51:1d:4d:aa:67:c8:b0:8d:eb:74:81:9c:eb:4d:d8:
         9f:c9:dd:c7:c0:e7:02:78:5a:54:03:6a:ef:1d:eb:30:14:e7:
         3f:e5:94:9e:a5:a0:30:99:76:6e:e1:e9:19:d7:66:8f:15:3f:
         ce:82:92:dd:fc:cc:ec:f9:ab:f9:c9:99:43:8f:0c:54:c6:ef:
         4b:94:75:65:2a:ed:6c:07:ab:08:8d:c9:36:35:11:e3:05:7a:
         72:fe:8f:2b:ff:ec:54:53:a1:cb:d8:e7:b0:d8:3e:bb:0f:14:
         a0:04:25:92:45:87:7d:69:52:14:06:08:1c:0a:90:8a:a1:a3:
         33:9b:a5:d3:bd:f6:af:f6:d0:8d:74:df:ec:b2:1f:63:ca:8e:
         f7:0a:de:3a:ba:32:0e:50:ee:23:5b:d8:07:e2:d3:b6:07:51:
         14:ba:01:e7:2a:e7:4b:b3:28:80:74:76:4d:9f:9d:0c:ab:32:
         7a:b2:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:42 2026 by rpki-client