Error: rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
File:                     sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft (raw, json)
Hash identifier:          gHuX8TvtfSu46gDwmCmmttyNMqrXaBuIvLaADiWkzTA=
Subject key identifier:   0D:6F:52:F4:62:46:2E:0B:5C:66:FD:2B:39:6B:95:CA:79:55:E0:D1
Authority key identifier: B1:02:D3:28:DA:3A:4C:5B:41:6C:27:A8:3D:54:87:90:2D:06:38:FD
Certificate issuer:       /CN=F36A7FC6AR/serialNumber=B102D328DA3A4C5B416C27A83D5487902D0638FD
Certificate serial:       0528
Authority info access:    rsync://rpki.afrinic.net/repository/arin/sQLTKNo6TFtBbCeoPVSHkC0GOP0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
Manifest number:          0526
Signing time:             Sun 15 Nov 2026 03:23:07 +0000
Manifest this update:     Sun 15 Nov 2026 03:23:06 +0000
Manifest next update:     Tue 17 Nov 2026 03:23:06 +0000
Files and hashes:         1: sQLTKNo6TFtBbCeoPVSHkC0GOP0.crl (hash: UbcdgsCSLSjf0kBoJWaUPxsflTrHNYy5igvsZXVn3Rg=)
                          2: A486AA4E42D411F0B4F8DBDEDAE4EC9C.roa (hash: 4xKKYuuFJh/zKzeLBQTXL6axi1L1p5+TaD3uqW3PPwQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
                          rsync://rpki.afrinic.net/repository/arin/sQLTKNo6TFtBbCeoPVSHkC0GOP0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7FC6AR, serialNumber=B102D328DA3A4C5B416C27A83D5487902D0638FD
        Validity
            Not Before: Nov 15 03:23:06 2026 GMT
            Not After : Nov 17 03:23:06 2026 GMT
        Subject: CN=6af9259b-7fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:b9:e3:7e:3e:b1:6d:53:53:ff:1f:6e:c2:
                    36:5c:31:a0:26:f9:ff:11:f2:11:55:d8:5b:39:a8:
                    3c:9e:f4:e1:52:31:6d:e5:21:f9:66:97:17:63:59:
                    b0:19:ca:8f:f5:e9:f1:c6:cd:15:56:83:e4:94:8f:
                    82:05:1b:bf:b3:79:f4:80:2a:92:a3:c4:61:7b:a2:
                    26:3c:c9:f9:22:31:d4:22:a0:cb:ee:4b:bd:b2:2c:
                    54:38:f8:ef:73:07:7b:e0:f5:3f:6e:b0:2c:9b:53:
                    83:20:68:ac:c2:ee:6a:a5:a2:b2:c5:c5:3c:07:66:
                    cf:6e:d6:f1:4f:a3:d3:5b:12:77:1d:98:28:7f:43:
                    7d:48:66:27:d9:b5:5c:4b:c1:1a:ae:d2:7c:9a:1c:
                    2a:cc:05:15:ae:89:77:8d:04:30:3e:db:25:58:a8:
                    1e:49:b8:61:95:73:0e:9f:68:9e:14:40:bc:4f:17:
                    7e:88:26:39:9b:53:33:a5:b2:f5:5f:d6:da:47:4b:
                    03:43:fb:c8:8e:19:d1:01:c1:2e:23:ac:d0:64:6c:
                    65:f1:a1:d3:0d:73:e8:e9:ac:dc:67:75:98:b5:a0:
                    8d:27:bc:9e:21:84:69:40:85:7d:25:70:6c:17:46:
                    62:a9:ad:6e:01:d1:f9:44:17:36:cd:c2:17:40:59:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6F:52:F4:62:46:2E:0B:5C:66:FD:2B:39:6B:95:CA:79:55:E0:D1
            X509v3 Authority Key Identifier:
                keyid:B1:02:D3:28:DA:3A:4C:5B:41:6C:27:A8:3D:54:87:90:2D:06:38:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/sQLTKNo6TFtBbCeoPVSHkC0GOP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:be:c9:dc:4a:d3:e8:7f:c1:5e:52:d4:ff:0f:96:ac:56:5c:
         0c:37:00:9d:9c:d9:23:9d:5d:b2:65:2b:93:7d:9b:6f:57:96:
         0f:52:dc:e5:26:33:63:98:93:a6:87:87:3a:70:65:4a:33:74:
         86:dd:12:e8:77:40:d7:55:c1:af:ad:f2:d4:1e:a1:42:48:b2:
         c9:12:ef:67:98:cf:28:16:66:c7:05:43:a9:f4:0e:70:6b:7b:
         71:bd:0d:c2:9c:0c:f7:78:1c:10:c9:3a:3d:99:9d:9d:2f:a0:
         8d:7e:ea:65:0c:47:17:85:67:b7:94:cc:0d:18:15:19:d1:1d:
         8f:d2:8b:47:0c:0d:c6:7c:3f:5b:09:2b:95:d1:92:4e:9a:86:
         f4:e9:ee:63:0c:b0:31:32:17:12:63:2e:69:b4:69:ca:1a:48:
         58:5e:21:e7:15:ee:df:1c:8a:f9:68:7f:d6:b1:4c:8b:36:6d:
         3a:16:10:1f:2e:19:2f:c9:fc:5d:d0:13:63:de:c2:29:fc:e5:
         99:64:6c:0e:47:cf:b6:a1:0d:22:76:ca:40:4e:f1:44:3b:bb:
         5a:7b:19:ba:36:24:79:d5:8d:f8:2c:1c:ee:a4:b3:d0:91:77:
         eb:76:1c:12:5c:5d:48:75:b9:c2:58:ad:e4:45:cf:3f:8f:e0:
         a2:09:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:27 2026 by rpki-client