Error: rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File:                     LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier:          UEF8UhK79kZ34Tkz+LzO0rvh1JQIfhF1YL4WMrHpa58=
Subject key identifier:   45:64:B4:E8:11:69:AB:7E:8A:DF:5A:67:26:4F:0D:34:81:57:05:D4
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer:       /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial:       0401
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number:          03F7
Signing time:             Sun 15 Nov 2026 04:03:13 +0000
Manifest this update:     Sun 15 Nov 2026 04:03:12 +0000
Manifest next update:     Tue 17 Nov 2026 04:03:12 +0000
Files and hashes:         1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: 4OGtQe0uvMKObrLn0YxIcrWwH9xRhOXAozUYDslQ27k=)
                          2: D7D2E2A452A611F19BD02DF2CE1D38B0.roa (hash: b+2jKegvzCwZfq+fb5FZqDtq1CY8HBge8hnfwp6Km68=)
                          3: 38B7F27252A611F193771CEECE1D38B0.roa (hash: VujmE/3tHBn8mLb5BtmFjZUZZTvVtkiSObpapiNv1LQ=)
                          4: 1D81231A52A711F1A84AD4F5CE1D38B0.roa (hash: ZcEp6winc684xewT0hJzkqUYVlWOfnDVdOhpHbygoic=)
                          5: 48F8F5D652A711F1B352EDF5CE1D38B0.roa (hash: ce02ImdLwo/7RXTluhZpqtmk35loPw9NQKUYoqpIyRA=)
                          6: 9938B42452A611F1A083D6F1CE1D38B0.roa (hash: a0lXwM6/HyZeCuqShxjjgi5zdBu0nuAUd14gda8F38w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                          rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
        Validity
            Not Before: Nov 15 04:03:12 2026 GMT
            Not After : Nov 17 04:03:12 2026 GMT
        Subject: CN=6af92f01-b42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:72:62:7c:46:9a:b5:88:09:cc:10:3c:4b:
                    fa:55:40:d4:1a:d9:5e:41:c0:19:b9:e3:3d:ab:8d:
                    91:7b:f3:5b:82:ed:dd:e9:4c:b1:e8:46:25:49:1a:
                    47:75:70:5d:74:88:a8:60:b9:43:7b:51:bc:78:78:
                    34:47:62:33:13:fa:dd:dc:a9:0e:73:98:a6:1e:83:
                    e5:d9:33:8f:f4:dc:17:c4:61:1e:8e:89:35:f4:97:
                    2d:88:72:ef:4d:36:4d:8e:12:ce:26:ec:fa:ac:34:
                    44:a0:99:17:68:3a:48:20:92:ee:33:87:7d:70:6c:
                    71:94:2f:13:55:ea:e7:9f:03:6d:49:05:0d:8d:20:
                    6a:ce:82:54:56:7d:9d:43:27:5f:50:fc:6f:87:01:
                    68:32:15:cf:38:77:fe:dd:b2:62:e5:3c:71:21:4f:
                    6e:6f:65:c1:25:5b:4c:52:9a:f3:40:a3:d1:0a:d5:
                    dc:6f:9e:07:c8:5c:3c:fb:46:47:e7:1f:72:c2:11:
                    dd:3e:a1:80:0b:38:31:29:38:2d:73:01:9d:84:06:
                    43:04:08:62:e6:a3:f3:75:56:79:bc:0c:a9:6b:19:
                    7d:6a:07:1c:b0:f6:91:4f:64:1a:82:19:9e:cd:d3:
                    3d:a7:64:b2:ef:bf:95:23:c4:bb:24:d3:2c:a6:9c:
                    86:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:64:B4:E8:11:69:AB:7E:8A:DF:5A:67:26:4F:0D:34:81:57:05:D4
            X509v3 Authority Key Identifier:
                keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:32:eb:92:da:fe:90:71:39:fe:99:04:a2:6a:c6:f2:01:43:
         99:3d:2f:17:30:1b:0e:d0:ec:7b:86:4e:ee:7f:47:f1:d9:8e:
         e1:32:e4:f6:1d:c5:b3:6c:7c:ab:e4:26:9b:4a:bc:33:22:cc:
         b3:aa:fd:83:34:88:cd:c5:c9:f0:28:d3:36:44:d8:05:7a:b5:
         3a:99:f5:5b:7d:01:af:cf:00:c8:81:a3:29:27:c9:64:21:50:
         7a:d5:36:3e:ba:fa:d7:db:f8:c2:fd:67:e5:cd:01:80:f5:7b:
         94:7b:a5:58:7e:a9:c3:03:7b:1e:38:bf:d4:41:a7:2a:3a:b5:
         73:72:cd:0a:32:4a:d1:35:73:23:58:4b:d2:c3:18:9b:c7:be:
         ad:37:dd:ad:bd:c5:41:ae:5c:34:63:e0:ff:d2:4f:cd:ef:dd:
         b6:f8:a6:4a:74:48:8c:6b:c8:3c:15:f3:17:d8:66:12:11:e6:
         09:26:22:5e:96:ca:69:f9:d3:ad:5a:af:44:73:ae:07:0c:37:
         c8:3b:01:68:5e:69:85:b6:1b:ad:76:10:87:50:18:45:e9:b7:
         2c:dc:89:da:4b:ff:d7:16:91:12:c7:34:0d:d3:1e:5a:86:01:
         88:4f:5f:bb:41:39:55:a9:2f:be:7a:a5:6f:2a:a0:07:d0:b8:
         f0:15:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:04:40 2026 by rpki-client