Error: rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
File:                     E3S5w_RfdBg91PcrFhAlKt-xJiA.mft (raw, json)
Hash identifier:          Mfh8d8xsKeTpTizh0s65yU5v4s0SwkWjGFX+hUw11Hg=
Subject key identifier:   37:E2:F5:0B:25:29:42:48:17:BD:21:D8:4E:84:63:7E:CC:F1:8E:03
Authority key identifier: 13:74:B9:C3:F4:5F:74:18:3D:D4:F7:2B:16:10:25:2A:DF:B1:26:20
Certificate issuer:       /CN=F36B2802AR/serialNumber=1374B9C3F45F74183DD4F72B1610252ADFB12620
Certificate serial:       09FA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
Manifest number:          09F9
Signing time:             Sat 26 Sep 2026 01:39:31 +0000
Manifest this update:     Sat 26 Sep 2026 01:39:31 +0000
Manifest next update:     Mon 28 Sep 2026 01:39:31 +0000
Files and hashes:         1: E3S5w_RfdBg91PcrFhAlKt-xJiA.crl (hash: kWN7FZMXAVuTBWuHjRhrJHBfrxf1XsQu0dEYqKR/V+4=)
                          2: 0339DB7E0F8C11EAB91E1463F8AEA228.roa (hash: VEE0Ckp6I2VcUJ5B3ZZaJwDqeoS1pgqeABgMWtZnTH8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
                          rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2554 (0x9fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2802AR, serialNumber=1374B9C3F45F74183DD4F72B1610252ADFB12620
        Validity
            Not Before: Sep 26 01:39:31 2026 GMT
            Not After : Sep 28 01:39:31 2026 GMT
        Subject: CN=6ab72253-cd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dc:2d:c8:06:3b:47:67:57:79:5b:d3:55:29:
                    5b:e1:0e:c7:23:d5:4d:42:87:f8:cd:e5:b1:2d:e0:
                    27:a3:5d:b9:e4:fc:8b:3f:79:88:e3:97:4e:64:dd:
                    d9:48:f8:2d:02:63:87:94:42:4f:96:93:15:5a:60:
                    e4:6c:e8:43:23:ef:a2:b7:b3:a6:e8:e5:95:c7:40:
                    e9:17:c1:59:15:77:21:97:4c:c3:e8:92:d0:5e:7a:
                    18:3a:de:61:6b:f7:40:3a:15:57:e7:96:9e:a8:9b:
                    ef:d3:7f:8d:ac:b8:c5:d5:42:09:22:52:14:cb:92:
                    44:64:83:8a:6f:46:23:4f:20:f4:28:23:da:51:89:
                    00:b8:5d:da:46:65:3f:8c:c6:f4:3d:e7:48:31:84:
                    4b:0c:04:1d:2d:2c:eb:dc:de:e4:01:3b:c4:02:13:
                    dd:9f:05:f9:64:28:4e:d8:42:d5:c7:f5:b5:f7:95:
                    53:2a:5f:cc:f7:71:22:0c:99:5b:f0:41:bb:19:34:
                    8b:ac:d4:60:5b:53:f2:e4:51:22:79:f8:63:95:ef:
                    ff:b9:71:c9:df:e3:c3:2f:f0:11:7e:44:ab:8a:6a:
                    61:f1:a7:a8:bc:eb:84:f0:ae:52:a1:9e:4c:c1:bd:
                    e4:67:7f:3f:44:dd:df:6f:8f:dd:b2:a2:b4:30:0b:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E2:F5:0B:25:29:42:48:17:BD:21:D8:4E:84:63:7E:CC:F1:8E:03
            X509v3 Authority Key Identifier:
                keyid:13:74:B9:C3:F4:5F:74:18:3D:D4:F7:2B:16:10:25:2A:DF:B1:26:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:ea:61:b8:ac:b2:6a:09:e3:f3:ac:81:75:b6:be:57:7e:
         a1:92:81:fb:66:7a:a1:47:14:c2:c7:7b:67:42:62:47:24:45:
         c8:b2:c0:df:87:5e:e8:24:4f:dc:c6:fb:8d:02:26:c7:67:cf:
         6f:e2:81:0c:eb:11:8d:70:21:b2:b2:90:b5:68:f4:0f:8b:f1:
         92:c2:17:b1:48:06:54:b4:7d:b5:e5:3e:9c:1a:39:a8:51:6e:
         db:e5:41:a4:75:41:05:e4:c2:51:57:9a:dd:a5:65:17:d2:5e:
         ba:0e:77:94:d9:48:be:31:cd:83:b8:21:23:2b:11:b7:73:69:
         2a:9c:17:cb:4b:7e:9f:b2:c8:3c:bb:c9:f6:4d:63:6b:c8:0b:
         bf:b9:e1:c9:e5:20:2e:05:55:b2:52:ac:b9:86:5c:09:9e:5b:
         ce:c2:40:07:93:1c:e0:1c:43:90:13:21:68:ea:93:e9:0b:f1:
         c3:db:33:89:fa:96:93:cd:34:f0:c1:fd:33:e0:fa:de:c5:3f:
         6a:23:3e:80:9c:c5:6a:00:51:d5:58:f6:bc:d3:e1:e6:07:6b:
         e3:f6:98:dc:d1:0d:78:41:a1:02:18:a4:6d:a3:1b:9c:15:18:
         79:43:31:9c:94:61:b9:d4:80:75:5d:5c:ce:03:e8:31:9c:ff:
         20:7c:85:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:22:43 2026 by rpki-client