Error: rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
File:                     ZsmzRf1S4DCcordufO0LUGyNAZs.mft (raw, json)
Hash identifier:          hfqM0LZBPnRKvstEcIdyhakLzM6dh3UtgpqBlRoVsPw=
Subject key identifier:   DF:A4:0C:79:13:FC:04:CC:B4:46:F0:08:11:D7:A2:66:D1:B2:17:8B
Authority key identifier: 66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B
Certificate issuer:       /CN=F36A2F84AF/serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
Certificate serial:       078A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
Manifest number:          078A
Signing time:             Sat 26 Sep 2026 02:16:32 +0000
Manifest this update:     Sat 26 Sep 2026 02:16:31 +0000
Manifest next update:     Mon 28 Sep 2026 02:16:31 +0000
Files and hashes:         1: ZsmzRf1S4DCcordufO0LUGyNAZs.crl (hash: aSb9m4254SdBdwTB7+7w/5R5O0UhvV0Q3JvmU4X5Lwg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1930 (0x78a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AF, serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
        Validity
            Not Before: Sep 26 02:16:31 2026 GMT
            Not After : Sep 28 02:16:31 2026 GMT
        Subject: CN=6ab72b00-1d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:e2:29:b0:af:3c:b1:d6:e2:7a:e2:ff:33:
                    63:c6:7e:5d:12:f5:2b:cb:71:59:74:97:c8:99:ec:
                    4f:2f:ca:e5:9c:77:61:d3:79:be:6d:9f:40:b6:be:
                    b5:df:b6:0d:41:c4:cc:82:a8:7a:68:f5:77:d9:f7:
                    18:87:c3:9f:77:32:ce:af:6d:ec:04:1f:42:31:d1:
                    51:50:f8:e4:7c:82:28:fa:ed:60:70:b9:e2:bc:d0:
                    2d:40:41:62:b0:d4:43:75:cf:e8:12:9d:65:cc:2b:
                    c2:8e:e1:7a:9e:ef:3a:7e:5a:7a:fc:c5:17:59:77:
                    c2:dc:29:d8:f1:15:fb:c2:55:b0:34:fa:4b:f8:ff:
                    a4:df:d9:37:02:b6:b1:cb:94:02:17:80:37:84:74:
                    e9:1e:7a:d2:2f:8c:b6:4c:50:5c:00:aa:17:a7:7b:
                    65:95:86:3d:81:12:42:45:13:51:0f:0f:67:fa:a8:
                    04:c4:f8:7b:00:d0:98:f1:80:ce:a3:69:18:d4:5d:
                    94:04:13:42:11:ec:60:2a:6b:4f:f6:00:10:bc:18:
                    22:bd:6d:df:41:52:cf:d5:2c:b7:02:d6:f6:94:74:
                    fd:9d:b0:e7:b3:51:1a:c6:84:5b:bf:b4:73:db:3d:
                    29:fe:a3:52:16:4c:c0:a4:d3:44:b8:d4:49:4b:20:
                    70:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A4:0C:79:13:FC:04:CC:B4:46:F0:08:11:D7:A2:66:D1:B2:17:8B
            X509v3 Authority Key Identifier:
                keyid:66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:75:8e:59:d7:da:72:80:35:ba:49:50:44:0a:79:18:bd:97:
         d0:86:7c:24:a6:e1:79:7d:a8:cc:23:75:ff:f5:70:8a:6d:57:
         7c:33:e8:36:48:7b:9e:d6:36:f0:ec:70:15:07:e9:d4:ef:d2:
         be:2c:e8:07:0e:85:bf:8d:40:ff:9e:a9:3c:fb:29:89:e7:51:
         3f:15:ea:78:5c:3f:43:ef:d9:79:bb:b3:fe:52:6e:4b:62:9b:
         03:de:6e:a9:83:a3:7d:98:70:55:ee:64:56:4a:40:da:9c:21:
         3a:0d:6a:86:8b:23:98:3d:af:67:91:3f:59:12:76:d0:13:74:
         12:5b:1b:5b:ec:e1:a9:1c:cf:c8:de:36:1b:26:e9:67:ce:89:
         80:a9:4f:0f:93:ba:b1:2e:0f:be:39:08:35:e9:66:04:34:13:
         13:59:f1:72:95:69:f6:11:e2:ac:f4:56:b5:82:9a:a9:6f:a7:
         95:9d:bc:8b:4b:06:c7:2c:7c:75:31:e3:76:0b:93:56:3a:43:
         0c:96:f5:d6:0c:2e:a8:e2:69:94:7b:47:21:8e:0b:cc:70:eb:
         94:99:19:d8:04:bd:81:00:f8:73:94:22:a9:5b:eb:0c:13:4d:
         db:52:46:00:31:e7:4f:2c:96:7e:b7:65:a1:f4:fc:db:ed:e7:
         a0:bb:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:25:42 2026 by rpki-client