Error: rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
File:                     PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft (raw, json)
Hash identifier:          A/AB3J9jqT7MpgzkeK6MUE2Qz+mNhc/xYV4GUh9oURE=
Subject key identifier:   2A:95:F0:E4:49:9E:DC:8A:05:16:75:1B:C3:C5:F4:5E:62:B2:C9:BD
Authority key identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3
Certificate issuer:       /CN=F36A6DD7AF/serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
Certificate serial:       102A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
Manifest number:          101E
Signing time:             Sun 27 Sep 2026 00:57:45 +0000
Manifest this update:     Sun 27 Sep 2026 00:57:44 +0000
Manifest next update:     Tue 29 Sep 2026 00:57:44 +0000
Files and hashes:         1: PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl (hash: 6//RAPnskIyu3lTB6WExUsUf9/aKwVkUYpIHNNCUwZM=)
                          2: 27245A66C4C411F09B86D9E0DAE4EC9C.roa (hash: RhP+q0hcR9r0TqI0DJg5TlVHEkwdaQaUB4Vwe66w/4w=)
                          3: A19476D4C4C211F098DC65D8DAE4EC9C.roa (hash: ChEp6ZWIlk0DrDsY4PbxeB0oWgH6YxSvcg1AG3DA7vw=)
                          4: 699D3DA6C4C211F0BAEE54D8DAE4EC9C.roa (hash: MbciLgOo/FZXT6pICHx7XJwIWDJbakWY3mBA3T6dzSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4138 (0x102a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AF, serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
        Validity
            Not Before: Sep 27 00:57:44 2026 GMT
            Not After : Sep 29 00:57:44 2026 GMT
        Subject: CN=6ab86a09-7758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:33:10:db:67:55:f4:2f:60:0e:ab:2c:74:41:
                    7c:41:7c:3d:06:62:74:f3:89:d9:b4:65:26:a0:6e:
                    a4:ca:93:f8:8a:2c:aa:6b:56:f7:cb:ed:88:7b:8c:
                    46:f1:89:59:3c:59:95:0f:27:45:80:3b:b1:aa:c1:
                    73:fd:36:6d:0d:1f:46:91:b3:a7:d1:57:39:9c:22:
                    e4:0b:d6:36:8a:8b:6b:63:2f:48:a1:5b:3a:a7:e2:
                    fe:a0:22:7e:3a:41:6d:86:05:cc:8e:d9:ef:7a:c9:
                    ce:76:80:bf:98:39:e4:a9:e1:72:2c:15:58:e8:84:
                    e2:57:09:8e:08:14:89:30:fc:a0:81:01:ac:6f:69:
                    69:70:17:bb:0d:32:3b:27:71:fb:b6:70:76:18:de:
                    60:67:0a:a4:d1:0d:dc:80:04:10:77:5f:76:fa:4b:
                    33:92:82:12:44:ca:11:fd:f0:4e:da:95:0b:a9:e9:
                    68:c5:c7:98:44:3b:0b:3e:2d:07:bb:74:c1:ba:40:
                    26:25:50:13:ac:d7:ad:35:8c:54:ec:90:8f:25:3e:
                    1c:ae:e0:6f:ae:04:3a:0f:fc:8a:ba:66:30:1c:2d:
                    4b:ff:20:37:78:66:99:d2:f0:64:3c:51:e0:b6:48:
                    56:d9:59:d0:7b:27:3d:62:44:1c:17:c3:5e:5b:75:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:95:F0:E4:49:9E:DC:8A:05:16:75:1B:C3:C5:F4:5E:62:B2:C9:BD
            X509v3 Authority Key Identifier:
                keyid:3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:74:c4:ba:06:24:c6:48:01:86:70:a8:24:a6:da:74:cf:d7:
         f5:46:46:3b:aa:2b:2b:98:8f:26:3f:b0:1b:52:5d:de:cb:51:
         ee:96:26:72:37:6f:e6:39:1d:e5:a0:5b:36:22:6c:7a:72:ad:
         cc:5a:f4:6a:6c:5d:36:42:a0:43:08:2e:80:ea:5e:91:bd:f2:
         ae:3a:61:bb:d8:da:73:e8:e9:76:b7:ff:00:d5:7f:ca:33:b9:
         77:17:54:d0:1d:cf:32:d3:ca:30:28:f6:c3:5a:8e:d1:32:c7:
         14:c2:65:9e:9e:cc:b1:99:4d:b2:b9:38:88:00:48:96:4b:55:
         51:0d:6d:e7:db:b6:87:06:21:6c:16:71:fd:47:98:29:d0:c3:
         80:75:6b:68:23:5a:fc:e5:ab:f5:30:c5:96:19:9f:db:ae:17:
         ae:30:08:6f:bd:8d:72:a6:c9:29:b6:9e:65:06:e2:b7:2e:d4:
         35:d0:b1:ea:a9:df:fb:b4:ea:6c:c0:d4:e8:9a:c4:9e:57:a4:
         7a:9b:ab:69:12:ee:83:9b:4b:a4:39:b8:fd:f1:a6:ec:e3:ee:
         38:b3:16:32:9b:87:42:65:e4:fa:67:b1:32:69:3c:7b:87:b0:
         42:fd:2c:f4:a0:3a:8d:56:08:6e:91:59:54:4b:11:5b:46:17:
         28:21:13:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:40:51 2026 by rpki-client