Error: rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
File:                     Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft (raw, json)
Hash identifier:          rIF+rzZuGYat4AYIWy2M87OX/ky/YUUkuHJYwhKWWW4=
Subject key identifier:   77:66:21:BD:21:B9:9A:F1:41:9E:14:96:41:D3:CE:95:84:97:19:62
Authority key identifier: 0E:5F:61:5A:B0:AE:74:0B:E0:B0:EA:4F:0D:9F:85:FD:21:A1:23:35
Certificate issuer:       /CN=F36965F1AF/serialNumber=0E5F615AB0AE740BE0B0EA4F0D9F85FD21A12335
Certificate serial:       16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
Manifest number:          13
Signing time:             Wed 23 Sep 2026 05:55:42 +0000
Manifest this update:     Wed 23 Sep 2026 05:55:41 +0000
Manifest next update:     Fri 25 Sep 2026 05:55:41 +0000
Files and hashes:         1: Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl (hash: qjHTuUdvZZlqKbc7tg6QrT/A+F7rlCSxAX+xLp/iBbo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36965F1AF, serialNumber=0E5F615AB0AE740BE0B0EA4F0D9F85FD21A12335
        Validity
            Not Before: Sep 23 05:55:41 2026 GMT
            Not After : Sep 25 05:55:41 2026 GMT
        Subject: CN=6ab369dd-9714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:47:d6:bd:51:0b:51:87:e7:14:70:9a:6b:
                    4a:11:0e:01:16:d7:ec:e0:8f:a5:1c:ca:40:31:45:
                    6f:0f:de:78:53:87:06:34:e4:14:3d:79:ad:c8:2b:
                    fc:da:42:42:56:22:41:16:bc:34:73:63:ee:57:4f:
                    0e:25:a7:58:45:90:2e:33:8c:c6:a2:40:37:f8:57:
                    cd:28:59:56:0f:81:15:88:85:61:48:96:6f:03:3c:
                    83:04:01:4c:94:9f:95:47:df:80:2a:86:b4:7d:04:
                    a8:cf:22:a6:9f:fe:f3:35:90:7c:34:79:4d:4e:2c:
                    5a:59:a2:be:f3:ad:b6:6d:bf:2e:e6:45:e0:0d:99:
                    09:2b:9a:14:61:9b:90:fd:80:d5:49:a5:06:00:fc:
                    36:b0:81:a5:68:d8:62:8d:cf:7e:a9:71:3a:dc:d5:
                    64:e3:35:b9:7c:bd:29:dc:41:25:07:a0:09:54:f1:
                    bc:6e:03:99:9f:b4:de:43:df:b6:84:03:df:f9:25:
                    0b:d4:80:f4:80:33:ce:c2:ce:c7:34:fe:1d:fb:7e:
                    0e:34:f6:15:90:3e:aa:00:e0:a2:eb:81:98:2c:ec:
                    13:37:9b:a6:9c:c0:3f:7e:31:d4:70:e9:66:ea:11:
                    30:7e:72:57:fd:21:b1:27:21:5c:55:3d:2a:0e:1b:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:66:21:BD:21:B9:9A:F1:41:9E:14:96:41:D3:CE:95:84:97:19:62
            X509v3 Authority Key Identifier:
                keyid:0E:5F:61:5A:B0:AE:74:0B:E0:B0:EA:4F:0D:9F:85:FD:21:A1:23:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f7:2e:92:f8:e9:bf:c4:80:b2:9f:44:22:d5:ac:cd:69:1f:
         ed:0a:00:0a:e1:d1:81:43:a3:39:50:1a:f8:ef:28:aa:49:7c:
         8d:16:92:d0:24:23:fa:41:72:80:fd:64:b2:af:cd:12:20:b6:
         be:e6:fa:99:e3:e4:0d:a8:cd:46:50:73:c4:e5:fe:25:a1:c6:
         dc:62:95:1c:99:c5:58:37:54:5b:76:0a:b8:bf:14:59:e7:fa:
         23:ce:27:b7:21:e2:32:ae:17:9b:37:f8:36:2c:f9:d6:2e:ff:
         5c:62:e5:2e:d4:74:b9:54:1e:e0:87:90:e8:3e:16:9e:5c:29:
         9a:7b:46:ee:c9:85:e5:56:0a:d8:d5:a7:b3:41:e7:b9:13:f3:
         3b:e7:03:75:b2:4d:78:c0:e0:ea:c3:08:14:aa:16:cd:8c:d1:
         e6:77:59:66:89:fd:c7:60:e9:80:be:b9:ad:c9:fd:41:ec:1e:
         ba:57:51:89:89:0a:b2:8f:92:eb:aa:8f:2a:30:a2:61:86:6e:
         03:00:6c:3c:c1:ef:db:78:98:c9:5c:39:ec:13:5a:77:e5:c2:
         09:ac:a0:6f:91:73:c1:69:99:8a:80:f9:08:80:ff:1c:d4:7d:
         e4:2f:03:27:fd:a5:f2:11:9a:2b:e8:84:25:11:46:87:dc:65:
         7f:a1:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:56:46 2026 by rpki-client