Error: rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
File:                     rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft (raw, json)
Hash identifier:          tiOB5wWkPEl1lJGJAgWp3pVj5jyZo47WKUS9ThXWzwo=
Subject key identifier:   AC:85:6D:9E:07:83:4A:45:DD:CD:28:80:F7:A6:1B:87:73:E8:1A:AC
Authority key identifier: AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F
Certificate issuer:       /CN=F36A4C9EAF/serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
Certificate serial:       062D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
Manifest number:          062A
Signing time:             Wed 23 Sep 2026 02:51:20 +0000
Manifest this update:     Wed 23 Sep 2026 02:51:17 +0000
Manifest next update:     Fri 25 Sep 2026 02:51:17 +0000
Files and hashes:         1: rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl (hash: RB9cAe3SOX8LUGCGhEYBDCFuV/ZAb8+vx97YmkpNDcg=)
                          2: 6F27B5E28CB511F18D0AA307CF1D38B0.roa (hash: X/8eYGF/63BXbAo7SJEY5dctGMMZyTbvyC7szGLqilY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4C9EAF, serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
        Validity
            Not Before: Sep 23 02:51:17 2026 GMT
            Not After : Sep 25 02:51:17 2026 GMT
        Subject: CN=6ab33ea7-5a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:bf:9c:f1:37:a1:a2:29:48:91:6f:fa:b6:
                    d1:57:a1:77:51:ae:f4:47:9c:00:0b:50:6a:f9:21:
                    64:d9:ac:c0:de:4b:6d:d7:10:84:7b:e9:49:7f:47:
                    be:66:0d:d1:24:0d:6e:d2:81:c3:6e:52:04:d8:c7:
                    1c:3a:69:fe:61:07:9e:07:82:06:a3:e8:dd:00:b2:
                    91:62:13:6f:d1:bb:e4:21:94:b9:27:99:b2:bb:85:
                    e9:da:47:13:05:6a:51:7a:13:c4:d5:53:8c:4f:f4:
                    36:fe:3c:ba:b0:c0:ed:1e:e2:6d:76:6d:9a:57:7c:
                    37:08:7d:41:44:04:52:d1:17:4e:91:cf:70:74:08:
                    83:39:bb:2e:12:55:b5:86:0a:87:dc:cc:52:0d:7c:
                    64:0f:bb:26:61:80:29:d9:40:5e:e8:25:96:d7:0e:
                    ba:88:93:9d:be:2b:07:32:45:eb:ae:1a:83:1f:ab:
                    26:90:e6:e0:21:41:47:5f:bf:c2:73:41:cd:a4:fe:
                    c3:1e:6d:af:9e:34:bc:97:65:45:63:b8:42:a1:4f:
                    78:6f:0b:da:aa:53:55:fc:cf:a9:43:be:ee:00:8f:
                    33:8e:18:ad:88:e3:38:27:8a:c3:99:0b:1a:ca:83:
                    8b:9b:c8:b4:0a:b6:07:41:2a:d4:8f:1b:0f:4e:2d:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:85:6D:9E:07:83:4A:45:DD:CD:28:80:F7:A6:1B:87:73:E8:1A:AC
            X509v3 Authority Key Identifier:
                keyid:AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:01:52:d1:05:4d:ab:0d:57:cf:f2:05:41:96:61:c2:f1:90:
         22:d4:e9:ca:cb:78:db:cc:b1:d0:50:f1:9e:64:f2:f1:6c:8c:
         06:46:10:8e:93:93:84:75:0e:ad:4b:43:f1:e7:c3:5e:df:3b:
         fb:fa:15:a6:64:ff:e1:42:c6:34:02:94:a7:e4:8f:23:07:f9:
         7b:c8:69:a9:47:06:04:4d:06:58:f9:bd:77:4f:93:68:68:32:
         eb:1e:9b:b9:85:23:9f:9b:b8:43:58:53:90:bc:a1:56:ff:c5:
         db:4c:58:41:eb:67:53:8b:88:66:19:70:f5:66:29:a4:f3:60:
         5b:66:30:9e:cd:56:1b:5e:4c:db:65:d7:70:d4:02:1e:f4:d4:
         ec:8d:df:db:2e:b6:b6:6b:91:f6:b0:14:20:cd:11:a2:32:cc:
         1b:0d:61:11:d1:44:e6:79:f4:2c:8f:4b:2f:9f:ce:f6:8a:4d:
         51:36:55:60:dd:ce:6b:6a:61:87:b5:29:aa:27:a8:f5:68:5c:
         a0:9f:8f:d8:47:9e:c9:c3:ab:cc:c5:ce:c2:93:08:20:62:96:
         c9:f4:48:aa:c7:54:5b:a8:59:ba:9a:82:d9:d2:3f:9d:c7:77:
         37:dc:4e:74:91:15:ed:18:97:59:08:24:de:d6:f7:c9:88:68:
         88:50:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:48:47 2026 by rpki-client