Error: rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
File:                     h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft (raw, json)
Hash identifier:          wRTeing7r0hhYYnl2HZqMFenxTk3BNGLIz+uW9drG6k=
Subject key identifier:   B2:5C:57:4C:26:C9:4F:62:76:A2:DD:07:2A:60:D5:6E:40:53:E8:18
Authority key identifier: 87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E
Certificate issuer:       /CN=F3658AF9AR/serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
Certificate serial:       019E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
Manifest number:          019E
Signing time:             Sat 26 Sep 2026 05:05:05 +0000
Manifest this update:     Sat 26 Sep 2026 05:05:05 +0000
Manifest next update:     Mon 28 Sep 2026 05:05:04 +0000
Files and hashes:         1: h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl (hash: GhZs6IRi0dYaTjkZu6cI8wHfdnjGVZNq2V/bi8lqIWo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
                          rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 05:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9AR, serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
        Validity
            Not Before: Sep 26 05:05:05 2026 GMT
            Not After : Sep 28 05:05:04 2026 GMT
        Subject: CN=6ab75281-b369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1d:f0:5e:3a:01:e4:c5:ff:99:ec:b3:f8:52:
                    66:d0:e6:0b:b2:e1:6a:05:8e:8c:1a:4a:0d:15:f9:
                    01:cf:ea:05:7f:31:0f:13:8e:52:8a:f4:44:fe:a1:
                    6c:6e:b7:10:45:aa:aa:40:3a:06:5c:14:2b:e9:15:
                    3f:5f:bb:01:23:93:9b:39:51:67:9d:8b:bc:fa:68:
                    87:30:a8:b6:d8:af:fd:01:b8:dc:7f:8d:7d:dc:75:
                    d8:12:27:bf:69:a5:02:03:7a:2c:37:bb:fe:5f:84:
                    a7:fa:2d:d9:d9:6d:35:f2:77:01:a9:ef:e8:59:5b:
                    f7:80:b3:40:a8:6a:58:4e:3f:1f:99:83:b8:1d:5f:
                    c9:49:59:40:3a:1f:eb:9f:93:e4:12:39:81:d1:29:
                    ff:47:b6:ad:64:ee:73:8d:7e:34:78:85:b1:92:13:
                    13:4d:14:19:16:98:be:50:e8:32:5d:5b:c3:7d:6f:
                    15:5a:18:29:a0:9e:d1:c4:d8:a3:a3:66:d9:89:27:
                    68:d3:a4:c2:d0:1c:e9:3c:b9:fd:33:d9:07:a0:0f:
                    48:5a:5a:d8:39:2b:80:cd:a3:96:31:06:5f:f2:3c:
                    b8:c3:47:06:7c:e4:6c:41:9e:92:f1:e9:8c:bd:52:
                    d1:06:6c:9e:fa:07:22:9b:ad:8e:a6:91:92:e0:73:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5C:57:4C:26:C9:4F:62:76:A2:DD:07:2A:60:D5:6E:40:53:E8:18
            X509v3 Authority Key Identifier:
                keyid:87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:5d:e5:4c:9a:a0:be:65:22:e9:a3:af:65:8b:a0:31:2f:
         4b:de:8e:f5:64:e2:57:27:f7:8e:0b:b5:8d:63:f6:a1:65:fd:
         85:d8:b2:4c:3c:a4:18:0e:4b:a3:f4:8e:97:6d:c9:21:1a:85:
         9a:7a:81:e3:b4:b3:c6:ea:55:62:e6:52:21:94:15:8b:f4:3f:
         b2:81:27:12:6c:c8:96:29:fc:2e:f8:5e:3d:73:5d:c3:4f:e6:
         21:f8:87:25:af:d5:38:f5:1c:14:d5:74:f7:46:36:a7:81:ba:
         f4:c1:00:8a:ef:1c:3b:a7:53:09:ac:f8:92:17:60:59:4b:18:
         65:c2:7c:4f:3e:95:fa:4f:ac:e1:60:a5:7d:bb:f3:30:96:62:
         ce:8d:dd:9b:92:60:4c:0b:c4:fd:68:82:14:7c:47:6d:75:77:
         69:b2:3c:88:3f:c3:93:07:fe:9c:a9:a5:df:ea:aa:91:91:6b:
         46:01:79:6e:10:74:4b:7e:c2:ac:f5:6d:0d:32:f0:98:89:c7:
         67:02:5e:8e:bb:68:f2:d4:17:31:78:0c:f9:35:0e:75:a1:cd:
         3f:5c:22:9a:75:4a:d3:c5:69:ce:e8:b4:6b:8f:6e:8a:d0:41:
         56:ef:11:77:b6:0d:c7:35:a4:6d:9f:61:89:af:dd:0c:cf:cf:
         12:26:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:32:40 2026 by rpki-client