Error: rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
File:                     GsSe57FYhufc3nkyHoJCyZMkg8k.mft (raw, json)
Hash identifier:          uwcNhKAJzt/tpILCtbINGoaHtQ4qy0Nu9XZ+e1JggII=
Subject key identifier:   43:83:EE:46:4D:0E:9E:F5:B0:23:D0:BA:AB:F4:A8:F1:12:11:57:C0
Authority key identifier: 1A:C4:9E:E7:B1:58:86:E7:DC:DE:79:32:1E:82:42:C9:93:24:83:C9
Certificate issuer:       /CN=F36A7FC6AF/serialNumber=1AC49EE7B15886E7DCDE79321E8242C9932483C9
Certificate serial:       04F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
Manifest number:          04F2
Signing time:             Thu 24 Sep 2026 03:25:31 +0000
Manifest this update:     Thu 24 Sep 2026 03:25:30 +0000
Manifest next update:     Sat 26 Sep 2026 03:25:30 +0000
Files and hashes:         1: GsSe57FYhufc3nkyHoJCyZMkg8k.crl (hash: rcx9/FU0FaMKEfGVDCuAFrui49q1hCHauuWErgvj3is=)
                          2: AA9ABA5642D411F0B38EE4DEDAE4EC9C.roa (hash: pdHoehgzkEsYPixEIbNAhE6JMM6V0LCrLDRC9qMstoA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7FC6AF, serialNumber=1AC49EE7B15886E7DCDE79321E8242C9932483C9
        Validity
            Not Before: Sep 24 03:25:30 2026 GMT
            Not After : Sep 26 03:25:30 2026 GMT
        Subject: CN=6ab4982b-6e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b6:bc:96:37:45:4a:5b:8b:ae:f7:16:be:c1:
                    e9:04:40:cb:d2:6a:4d:59:32:61:25:21:49:ec:b0:
                    c0:5d:cd:67:aa:c1:79:a1:08:47:e8:11:67:24:f0:
                    80:dc:07:77:8d:29:70:f2:20:47:05:e3:69:45:f3:
                    a5:37:97:09:e6:51:bc:0c:2f:83:fe:30:f1:3f:7f:
                    d6:a8:6b:94:12:28:e0:f6:28:62:67:b5:de:51:41:
                    c4:f0:fd:2f:5f:21:00:63:c4:ba:42:b4:15:a2:6b:
                    be:a4:ad:0e:71:e1:53:2a:3a:94:53:54:25:a1:02:
                    29:29:f6:70:be:01:b2:b9:d5:87:a6:5a:da:90:bf:
                    3e:06:ff:aa:f4:8f:ec:fd:ad:e6:1f:b1:4d:db:07:
                    c3:dd:e9:ce:36:38:45:19:6c:45:b8:28:0a:e0:18:
                    90:b0:83:0e:0b:14:a4:ae:fd:23:c5:1e:b5:32:4d:
                    75:0d:3f:75:43:12:9e:ed:7a:2b:58:c5:26:05:1e:
                    56:6b:40:20:c1:e4:bf:6b:8c:a1:dd:e6:78:9b:34:
                    c9:6d:44:07:55:96:de:c0:c5:79:0a:59:43:6f:4d:
                    38:2d:3b:0d:a2:dd:a2:98:aa:2b:3c:f7:c3:5c:e0:
                    74:a9:c4:91:bf:4e:a7:49:8e:81:38:fd:f5:4e:6f:
                    4e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:83:EE:46:4D:0E:9E:F5:B0:23:D0:BA:AB:F4:A8:F1:12:11:57:C0
            X509v3 Authority Key Identifier:
                keyid:1A:C4:9E:E7:B1:58:86:E7:DC:DE:79:32:1E:82:42:C9:93:24:83:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fe:60:fd:05:00:d4:44:50:29:11:8a:af:20:a1:2d:32:c2:
         b6:20:7b:7a:8c:b8:e5:67:cf:9d:2a:67:45:44:58:ed:b3:97:
         2b:16:db:b5:f9:a8:82:fe:c7:cb:bf:68:68:12:e8:bc:c4:1b:
         5b:cf:2c:2e:ea:89:b8:67:a6:8f:04:a0:f4:e4:12:b3:3e:ad:
         c2:ca:d6:02:32:fb:b3:fe:a4:c4:13:e7:2e:e0:65:0e:08:55:
         8f:db:ec:9e:e1:8a:c5:cf:6a:20:57:86:c2:58:c4:06:c3:8f:
         63:87:6c:20:ff:9c:f1:8e:27:65:48:d4:f3:59:ce:71:a5:78:
         9f:5e:7f:6e:56:fd:3b:fe:9d:63:30:97:db:a0:c7:e6:1f:1f:
         f5:67:24:8c:89:9f:1a:9f:aa:2e:8f:31:d2:51:e9:b3:a3:63:
         de:b7:e8:ad:a5:57:73:7b:c6:92:1a:64:bd:24:6d:15:eb:5c:
         ee:cc:eb:63:34:ff:8b:15:75:cc:62:56:14:a7:70:1c:96:5d:
         2e:80:20:69:72:a2:bd:be:e1:a3:95:60:26:e7:5e:41:2e:41:
         a0:47:1f:44:c6:ca:79:2f:76:7a:ed:5d:dd:59:37:f0:29:4c:
         a5:69:83:f5:5f:9a:30:e5:2b:f7:87:5c:35:52:98:cc:7a:87:
         50:cc:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:12:19 2026 by rpki-client