Error: rpki.afrinic.net/repository/member_repository/F36AF647/9C4709A2029411F194D21BECDAE4EC9C/7GZzYZuWO5hjz-_8oRm4NO7c5wQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AF647/9C4709A2029411F194D21BECDAE4EC9C/7GZzYZuWO5hjz-_8oRm4NO7c5wQ.mft
File:                     7GZzYZuWO5hjz-_8oRm4NO7c5wQ.mft (raw, json)
Hash identifier:          Ybg3hDmueyRY0/cPhUo1cp+r4qh53nreRHe9elMrqTE=
Subject key identifier:   BD:14:E4:CE:1D:67:43:D1:B3:D4:26:1B:54:38:B0:6C:D2:F4:20:71
Authority key identifier: EC:66:73:61:9B:96:3B:98:63:CF:EF:FC:A1:19:B8:34:EE:DC:E7:04
Certificate issuer:       /CN=F36AF647AF/serialNumber=EC6673619B963B9863CFEFFCA119B834EEDCE704
Certificate serial:       EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7GZzYZuWO5hjz-_8oRm4NO7c5wQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AF647/9C4709A2029411F194D21BECDAE4EC9C/7GZzYZuWO5hjz-_8oRm4NO7c5wQ.mft
Manifest number:          EA
Signing time:             Fri 25 Sep 2026 05:26:13 +0000
Manifest this update:     Fri 25 Sep 2026 05:26:12 +0000
Manifest next update:     Sun 27 Sep 2026 05:26:12 +0000
Files and hashes:         1: 7GZzYZuWO5hjz-_8oRm4NO7c5wQ.crl (hash: 6oJRwUEE/ZhAzPmn6bf0eLbfXc/zU0AiTkwkuVvzD/g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AF647/9C4709A2029411F194D21BECDAE4EC9C/7GZzYZuWO5hjz-_8oRm4NO7c5wQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AF647/9C4709A2029411F194D21BECDAE4EC9C/7GZzYZuWO5hjz-_8oRm4NO7c5wQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7GZzYZuWO5hjz-_8oRm4NO7c5wQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AF647AF, serialNumber=EC6673619B963B9863CFEFFCA119B834EEDCE704
        Validity
            Not Before: Sep 25 05:26:12 2026 GMT
            Not After : Sep 27 05:26:12 2026 GMT
        Subject: CN=6ab605f4-5749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:50:4b:84:1a:47:5d:ed:d4:7d:a9:5e:2d:6a:
                    8f:11:34:35:f8:5c:1a:ee:7c:ac:5f:53:73:6a:94:
                    2f:0e:fc:02:a0:12:61:c4:76:6d:b9:3a:8a:26:69:
                    dc:60:56:d4:39:03:07:28:13:b0:50:b4:3b:32:f8:
                    26:2b:e7:b6:67:e4:be:5d:a5:d9:4c:05:e4:39:9b:
                    c1:f8:04:e1:dc:6f:51:2f:a8:2b:2e:8d:d9:b8:91:
                    68:cd:7c:b5:30:5e:68:90:52:15:06:5c:e6:ff:44:
                    d9:e6:f1:c3:fb:d3:f6:3c:b8:b6:d0:9b:9b:73:c3:
                    e3:50:e0:ab:3a:b7:b3:e0:10:ca:6c:5b:6c:ab:38:
                    bc:ee:ca:5f:19:79:d5:2b:06:96:8b:60:f8:4a:8b:
                    2f:b4:6b:4c:24:eb:5c:98:1e:81:8a:68:82:10:48:
                    44:43:14:12:bb:dc:bf:e6:ca:d9:6e:13:e5:aa:52:
                    f5:ca:fa:23:45:d4:aa:76:08:68:a5:27:ea:ff:9d:
                    70:de:50:f4:68:8a:4c:f7:78:74:f6:75:cb:9f:ad:
                    47:9a:94:1e:e9:44:47:76:a5:62:09:e8:81:9c:c8:
                    d4:16:d8:b1:5a:f6:ca:68:08:cd:01:06:f6:8a:3d:
                    40:2e:fb:9a:22:6f:4a:ca:04:78:cd:2c:2a:51:aa:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:14:E4:CE:1D:67:43:D1:B3:D4:26:1B:54:38:B0:6C:D2:F4:20:71
            X509v3 Authority Key Identifier:
                keyid:EC:66:73:61:9B:96:3B:98:63:CF:EF:FC:A1:19:B8:34:EE:DC:E7:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF647/9C4709A2029411F194D21BECDAE4EC9C/7GZzYZuWO5hjz-_8oRm4NO7c5wQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7GZzYZuWO5hjz-_8oRm4NO7c5wQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF647/9C4709A2029411F194D21BECDAE4EC9C/7GZzYZuWO5hjz-_8oRm4NO7c5wQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ce:8c:3f:e7:0d:61:81:bc:c8:e6:3d:ba:8e:20:50:72:9a:
         89:c0:fe:84:7f:f1:bf:58:e7:98:d8:5b:21:ec:54:ee:93:e1:
         07:4d:05:e6:05:37:36:de:05:69:f9:12:ea:e8:8e:78:88:56:
         46:d7:02:83:36:6a:b4:8b:d9:78:af:97:73:95:15:6b:d6:de:
         14:a8:11:5c:05:99:7a:d0:88:78:0a:32:47:6f:de:7b:5a:f5:
         19:f8:48:35:19:01:62:94:84:cd:c6:3b:d6:26:e4:47:62:9f:
         e4:be:f4:a9:da:ac:16:61:78:7e:ba:fa:76:84:ee:46:68:c0:
         ba:64:43:42:a0:90:b7:5d:a4:8e:45:19:29:a7:2f:50:08:15:
         f9:75:74:cb:54:b2:e5:5d:3e:2d:8d:cb:e4:84:fc:04:25:95:
         02:1b:13:eb:65:de:0c:78:8f:7c:31:83:1f:86:cf:de:81:53:
         97:24:e5:93:20:80:b1:fd:31:cb:30:b6:bf:02:61:16:b1:3c:
         49:dc:cb:79:cb:8c:99:22:c0:81:37:00:42:96:b0:e5:44:ac:
         a7:f8:48:72:41:78:44:e8:e5:d1:6a:ab:ab:0e:45:bc:22:ae:
         8d:7e:92:d7:fd:15:cb:bd:44:f5:04:fc:58:f5:21:e9:a3:ca:
         50:db:01:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:46:38 2026 by rpki-client