Error: rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
File:                     KFr00NNaAfToZi1wYXSTEwgbBW8.mft (raw, json)
Hash identifier:          SO3QbbxtPP0XnHzRnU0ZHm7KUB8adHROrKbLjykeKLQ=
Subject key identifier:   D8:1F:2A:1A:BE:0B:83:F5:07:D0:05:7F:48:70:B3:1E:59:F8:08:C0
Authority key identifier: 28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F
Certificate issuer:       /CN=F36A45F8AF/serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F
Certificate serial:       019A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
Manifest number:          0199
Signing time:             Thu 24 Sep 2026 05:05:51 +0000
Manifest this update:     Thu 24 Sep 2026 05:05:50 +0000
Manifest next update:     Sat 26 Sep 2026 05:05:50 +0000
Files and hashes:         1: KFr00NNaAfToZi1wYXSTEwgbBW8.crl (hash: wltYYR1e6dkK8YQEup7n2U0LdJavWWEyu8KB0Ws61qA=)
                          2: C8DBFA287C1F11F0A46A9BE9DAE4EC9C.roa (hash: MEidKfzt+zEnon2K4l4j1oz0vKLVkgQvpvIBenvS0UU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A45F8AF, serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F
        Validity
            Not Before: Sep 24 05:05:50 2026 GMT
            Not After : Sep 26 05:05:50 2026 GMT
        Subject: CN=6ab4afaf-46d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:23:5a:d9:a6:80:59:af:14:8f:a9:2d:49:
                    ba:ad:7e:23:bb:cb:dd:b2:72:a9:8b:91:1b:d1:92:
                    ef:07:74:3b:01:a7:ba:07:8c:cb:e0:01:50:e4:df:
                    ff:47:61:35:da:ad:bd:a0:90:40:4e:81:09:3c:31:
                    49:e5:09:7c:ad:bc:24:cc:f1:8c:97:c6:48:32:83:
                    6b:92:d2:0c:14:58:30:59:5e:c8:14:f0:66:24:3f:
                    0e:2f:21:0c:61:d6:9d:ca:a7:f1:aa:ba:77:b3:b2:
                    fd:2c:c3:fd:ce:45:c6:a3:a3:97:e0:c4:ff:bf:ca:
                    fd:1a:49:3c:0e:87:a2:b6:73:2e:2b:72:34:09:31:
                    51:01:b2:50:55:97:f8:f6:03:8e:80:63:34:39:c9:
                    b7:0c:a9:17:a7:e3:37:8f:7f:62:28:57:d2:d6:38:
                    05:94:7f:7a:5c:f5:23:fc:33:fe:e8:73:66:f3:3e:
                    79:92:d4:da:20:51:23:b6:36:34:ad:fe:f7:af:fa:
                    19:74:df:1a:d0:72:ef:11:05:85:ee:35:06:30:7b:
                    cd:bb:8e:b5:1d:29:47:c4:a3:d1:c9:10:26:02:62:
                    c9:f7:a5:11:74:2c:bb:b6:b3:75:19:74:61:93:65:
                    1d:b2:f4:24:88:2f:5d:b9:d0:0b:db:44:30:40:09:
                    66:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1F:2A:1A:BE:0B:83:F5:07:D0:05:7F:48:70:B3:1E:59:F8:08:C0
            X509v3 Authority Key Identifier:
                keyid:28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ce:39:bd:96:b5:72:8a:a1:68:ea:1b:dd:57:92:7b:35:75:
         df:be:bc:61:59:82:e5:ea:24:b6:8b:37:95:ee:54:5a:85:60:
         36:cc:aa:b0:91:b1:59:39:53:e8:e4:13:29:09:05:79:0f:e3:
         d6:65:1a:56:f2:2a:d6:44:fd:a9:e7:be:d2:ac:08:89:49:46:
         44:f4:99:de:50:80:d1:1f:83:4d:6f:84:ae:e7:9f:81:7b:89:
         e5:c1:9b:01:fb:da:76:83:8c:32:cb:94:1d:1b:8e:4f:29:6e:
         64:19:ec:08:65:e5:76:35:48:13:5e:42:a6:f7:c6:e0:ec:a7:
         86:ae:e5:f9:14:1a:03:1a:71:fe:85:d8:03:49:27:cd:4e:3f:
         18:ea:da:e6:24:f6:bc:fc:e3:7d:3f:76:e1:d7:51:26:73:8d:
         cf:33:d0:af:32:7a:09:0d:41:61:31:86:70:bb:f0:6f:a1:10:
         8a:70:fc:f6:ce:e4:e6:de:c4:39:09:7e:61:a0:94:f5:71:a7:
         47:8f:48:90:87:e5:4b:17:4d:47:74:d9:0d:9f:c1:a5:58:11:
         81:84:89:d2:ab:bc:09:ea:ec:95:68:5c:87:02:a5:2c:62:6b:
         e3:87:0b:2e:6b:24:22:6c:32:93:a3:42:1b:5c:82:56:90:35:
         d3:2a:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:38:40 2026 by rpki-client