Error: rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
File:                     R_ufMc9PLRlxHITTLiO9AG4ALpY.mft (raw, json)
Hash identifier:          OFBd9Oa4r0osh30rspK2pyf61v/ap8v6DFciKXeDUMo=
Subject key identifier:   71:19:42:86:E4:F8:F1:C4:4C:86:3F:93:49:14:09:69:47:0A:A3:68
Authority key identifier: 47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
Certificate issuer:       /CN=F36A36C8AF/serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
Certificate serial:       0759
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
Manifest number:          0754
Signing time:             Fri 25 Sep 2026 02:26:51 +0000
Manifest this update:     Fri 25 Sep 2026 02:26:50 +0000
Manifest next update:     Sun 27 Sep 2026 02:26:50 +0000
Files and hashes:         1: R_ufMc9PLRlxHITTLiO9AG4ALpY.crl (hash: TqLaTwUZhX8EE37c29wBtEeBSplcnW/M7yNooOr36RU=)
                          2: 4A1B2D24930911F1A319F3EFCE1D38B0.roa (hash: AkimXIP/uS4Nccyl+y8kNe8IaUw9M0TQEHArv02dMl4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A36C8AF, serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
        Validity
            Not Before: Sep 25 02:26:50 2026 GMT
            Not After : Sep 27 02:26:50 2026 GMT
        Subject: CN=6ab5dbeb-d8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:c7:dd:27:dc:2e:cb:69:3c:47:40:98:73:
                    eb:1f:4c:66:79:a4:ba:7c:cf:58:f5:88:0d:03:98:
                    e9:d7:08:8c:c1:7e:d3:46:82:30:77:fd:70:65:37:
                    78:dd:1b:67:0a:60:69:c3:4f:a3:c2:40:fc:2c:93:
                    db:f0:c9:6c:1a:44:dc:8b:b8:0b:5d:f1:67:fd:c0:
                    1e:2f:3f:2c:f2:c2:6a:c9:0b:7b:90:55:bd:40:30:
                    15:74:a4:c8:54:ef:b5:ef:24:ff:bb:89:49:f5:b3:
                    77:25:e3:58:a7:53:2d:f9:95:6d:90:c5:8e:7b:9a:
                    59:79:00:da:7c:1c:8f:84:aa:89:84:07:35:06:d0:
                    80:e5:a4:f1:7b:d7:c4:19:3c:69:b9:a7:11:f7:51:
                    72:ba:47:8a:9e:73:f1:d5:54:63:3b:bf:76:59:57:
                    d3:96:8a:48:e9:bf:64:5c:b5:27:bc:59:b2:c1:51:
                    b6:89:16:bb:69:fd:f0:53:85:c8:22:aa:42:02:69:
                    96:5f:94:a0:1e:f5:dc:9a:ed:7b:f9:de:e2:1b:11:
                    1d:54:a1:1f:57:0f:57:ba:d4:dc:84:0e:1e:f5:8a:
                    ae:40:65:85:2d:f0:40:d4:19:99:f7:41:f9:26:c6:
                    b8:0b:95:14:a7:9f:65:40:cb:16:b5:d5:63:eb:cf:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:19:42:86:E4:F8:F1:C4:4C:86:3F:93:49:14:09:69:47:0A:A3:68
            X509v3 Authority Key Identifier:
                keyid:47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fc:32:ae:91:8a:9b:55:a7:4d:a5:54:23:30:dd:fe:3e:99:
         86:78:5f:40:17:c8:35:8a:8f:c6:2b:aa:e0:3e:d8:39:5c:09:
         c0:b7:61:93:86:79:0a:ca:7f:d1:45:f8:37:86:01:89:82:64:
         ab:fd:4d:96:39:39:12:7d:9f:d0:5f:12:fb:1a:3d:78:8c:86:
         a4:2b:12:7a:20:2c:35:1f:8d:72:91:e8:7b:18:00:cb:c8:f2:
         40:3e:52:b9:94:7a:d1:89:1f:e3:a1:b0:52:da:8f:f2:3e:59:
         71:55:7f:cc:9c:15:27:53:a4:b9:4a:bc:14:d1:18:d2:0d:bc:
         a5:aa:e0:62:b5:93:ed:70:37:f6:48:83:eb:9e:b7:b8:4d:39:
         ab:b5:0a:24:99:27:11:4b:46:2a:64:38:ec:e4:43:80:77:2f:
         06:6f:f6:4e:be:5f:8e:e0:5e:40:30:da:36:53:b4:de:45:f5:
         5d:e7:ee:6b:db:2c:0f:00:a0:54:12:28:f1:8a:b8:f1:6a:42:
         05:79:85:96:4e:17:71:c0:66:97:5e:98:ab:42:9a:ab:83:57:
         c6:b7:a0:d9:f7:ce:2f:ff:b2:a1:3e:97:43:45:3c:9f:3c:44:
         d5:00:6d:d1:e1:ff:97:31:90:15:ed:51:24:e7:64:c3:79:20:
         f2:99:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:51:14 2026 by rpki-client