Error: rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
File:                     7363z88lTJmL2c4HwPSOB9YbfD8.mft (raw, json)
Hash identifier:          xfi7KovlbA2LGbntc/79KSYywRh7ukdSolhhXapsH9A=
Subject key identifier:   A3:9E:DF:E1:F5:34:9E:85:1A:86:8B:D4:65:F9:2D:81:18:B9:0C:9C
Authority key identifier: EF:7E:B7:CF:CF:25:4C:99:8B:D9:CE:07:C0:F4:8E:07:D6:1B:7C:3F
Certificate issuer:       /CN=F36BA80DAR/serialNumber=EF7EB7CFCF254C998BD9CE07C0F48E07D61B7C3F
Certificate serial:       09A1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
Manifest number:          099D
Signing time:             Wed 23 Sep 2026 01:44:15 +0000
Manifest this update:     Wed 23 Sep 2026 01:44:14 +0000
Manifest next update:     Fri 25 Sep 2026 01:44:14 +0000
Files and hashes:         1: 7363z88lTJmL2c4HwPSOB9YbfD8.crl (hash: JROw1u5W69iGuVAj2QWasNu677jHXI/ydJ/cHedOQPM=)
                          2: 37F5CA1C8DA711F188D9EDC3CE1D38B0.roa (hash: IbzZRWq+YoJAGJ1pBYTPRd+rnICSSevxY6WfqJWQ2hg=)
                          3: 1F90EA80C23A11EB8001DA1FF8AEA228.roa (hash: mcxexODswgAAU9SdPTRFqjA9BdfIB4DaMGkNObAgToU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
                          rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 01:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465 (0x9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA80DAR, serialNumber=EF7EB7CFCF254C998BD9CE07C0F48E07D61B7C3F
        Validity
            Not Before: Sep 23 01:44:14 2026 GMT
            Not After : Sep 25 01:44:14 2026 GMT
        Subject: CN=6ab32eef-3a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:19:cb:58:3e:3d:e7:51:12:dc:5f:dc:16:
                    29:55:0c:6b:83:4c:84:72:21:b4:89:27:1b:63:57:
                    f9:fd:d5:f8:b1:09:a3:cf:12:9b:ce:c3:ae:5c:94:
                    f7:81:29:af:e4:8c:33:89:6c:6a:58:c9:5b:49:da:
                    f9:5f:e6:cd:a1:5c:05:2f:de:49:12:01:f9:78:9f:
                    c5:88:6f:a5:fc:1d:d2:8a:76:0f:e4:48:73:60:11:
                    63:e7:00:2d:51:92:26:6e:0a:84:63:e4:44:30:f4:
                    f6:69:f4:07:e6:35:70:95:9c:1b:04:17:31:76:fe:
                    be:d0:bf:1f:f9:b5:70:d4:d9:7f:6d:78:8c:b4:c7:
                    1c:b0:88:69:00:67:a0:f4:36:0d:f6:33:91:dc:cd:
                    bc:d6:b7:15:a5:be:af:36:bb:50:93:ab:67:b5:0d:
                    4e:bb:98:96:49:c2:7b:b7:5d:5a:47:45:a9:72:33:
                    ca:03:b0:ab:72:9d:c2:df:9b:dd:c5:03:84:03:2d:
                    05:53:1c:cb:f3:78:93:b5:bd:36:a7:4e:46:c2:85:
                    3b:d0:df:b8:fb:1e:21:40:a2:0d:5d:dd:1b:a4:1f:
                    5e:ae:88:bb:23:e2:d5:ae:53:ea:98:33:0f:aa:0c:
                    74:44:da:95:97:dc:49:07:82:50:06:f3:99:fa:63:
                    f8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9E:DF:E1:F5:34:9E:85:1A:86:8B:D4:65:F9:2D:81:18:B9:0C:9C
            X509v3 Authority Key Identifier:
                keyid:EF:7E:B7:CF:CF:25:4C:99:8B:D9:CE:07:C0:F4:8E:07:D6:1B:7C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:37:49:c2:15:47:01:63:66:4e:50:19:3d:70:53:88:c4:72:
         94:9d:b0:af:46:22:66:cb:4d:cf:0e:b7:fc:54:b8:b4:09:b0:
         3f:0b:d5:42:e7:46:eb:b9:e3:15:7a:5d:38:3d:ff:37:9b:6d:
         3a:60:95:72:c7:5e:04:24:93:33:71:a2:50:03:b8:74:7f:7c:
         74:d5:6a:56:82:b6:de:cf:86:c6:54:bd:de:bd:e7:3b:8c:bb:
         e1:29:2e:0b:a2:9f:62:a7:4a:a4:e2:45:9c:b9:b0:a0:34:9a:
         3a:df:f8:ec:3d:1c:a7:c4:e5:ca:f9:70:62:6b:5a:e5:6f:97:
         7a:95:cc:ae:fb:20:6a:2f:4a:77:1d:b9:2c:22:94:18:67:04:
         de:f5:59:b3:da:e2:25:ed:63:d1:0f:1b:f3:68:eb:bb:47:05:
         b5:8d:44:81:d5:7c:38:29:3d:8b:62:da:b2:2f:71:4e:47:35:
         f7:ff:4d:82:9a:52:29:5c:ba:df:bf:92:5e:f7:18:3e:73:14:
         21:60:18:89:4d:37:1a:fe:30:38:0d:b9:9c:ff:15:34:36:1f:
         a2:0c:3b:c2:ab:ab:cb:b8:4f:65:c8:4e:d6:84:c9:60:fa:bb:
         16:03:bc:5e:30:dc:18:4b:14:89:bf:ed:5f:62:4d:44:b2:72:
         b1:e1:a5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:04:22 2026 by rpki-client