Error: rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
File:                     7363z88lTJmL2c4HwPSOB9YbfD8.mft (raw, json)
Hash identifier:          nDw9vWy4/9cb5LFZ8YvU1pDxdHjnI1pZlFib8q/fWDw=
Subject key identifier:   9F:FB:FD:2D:2C:C1:79:DB:85:69:BC:31:1F:29:0A:E7:62:7E:14:A6
Authority key identifier: EF:7E:B7:CF:CF:25:4C:99:8B:D9:CE:07:C0:F4:8E:07:D6:1B:7C:3F
Certificate issuer:       /CN=F36BA80DAR/serialNumber=EF7EB7CFCF254C998BD9CE07C0F48E07D61B7C3F
Certificate serial:       09D5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
Manifest number:          09D1
Signing time:             Sat 14 Nov 2026 01:42:53 +0000
Manifest this update:     Sat 14 Nov 2026 01:42:52 +0000
Manifest next update:     Mon 16 Nov 2026 01:42:52 +0000
Files and hashes:         1: 7363z88lTJmL2c4HwPSOB9YbfD8.crl (hash: RS9TK6FuvZaE5aXaL6JX4wsQ2h/9jQf2paZYgBSwCGc=)
                          2: 37F5CA1C8DA711F188D9EDC3CE1D38B0.roa (hash: IbzZRWq+YoJAGJ1pBYTPRd+rnICSSevxY6WfqJWQ2hg=)
                          3: 1F90EA80C23A11EB8001DA1FF8AEA228.roa (hash: mcxexODswgAAU9SdPTRFqjA9BdfIB4DaMGkNObAgToU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
                          rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2517 (0x9d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA80DAR, serialNumber=EF7EB7CFCF254C998BD9CE07C0F48E07D61B7C3F
        Validity
            Not Before: Nov 14 01:42:52 2026 GMT
            Not After : Nov 16 01:42:52 2026 GMT
        Subject: CN=6af7bc9c-be63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:10:c9:23:bc:25:be:6d:65:da:a0:da:fd:
                    b7:da:ee:09:a2:a0:d7:95:c6:ec:d0:90:f8:67:2e:
                    ae:56:d8:25:74:01:5a:42:8e:7b:a1:82:eb:41:e9:
                    0d:62:8a:88:da:bc:80:9c:8b:c8:8d:ae:da:24:95:
                    f6:95:07:ca:05:df:25:ef:f5:3e:d2:72:90:dc:35:
                    5a:a7:86:b6:b9:01:d3:f0:69:bf:29:17:9c:50:4a:
                    6a:58:f1:cc:aa:f7:55:a2:dd:62:91:81:e4:42:f3:
                    0e:c3:10:4e:d4:e9:9d:cf:17:31:cb:ff:ee:fd:b4:
                    90:30:3c:fe:14:c8:ef:09:04:6a:63:4c:cb:c0:5f:
                    55:a8:f8:87:24:dd:41:93:ff:4c:be:a7:e2:64:d0:
                    72:fc:54:3f:d7:2b:00:fa:3e:d3:68:88:fe:41:ad:
                    20:cc:82:05:33:b5:2a:b2:68:40:79:54:fd:2a:2f:
                    b6:3a:81:d7:fa:c2:45:b3:18:2c:80:9a:a9:8d:65:
                    30:b9:f5:01:7a:70:c1:3d:3a:46:7f:22:d9:2c:a9:
                    41:34:ed:ba:cf:28:87:3e:bf:1d:cc:0d:48:8a:d5:
                    24:2c:3d:5a:cf:06:9c:06:7a:f4:3f:91:44:aa:e4:
                    e4:f6:65:48:56:b6:dd:d6:4b:7c:90:84:fd:ba:8d:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FB:FD:2D:2C:C1:79:DB:85:69:BC:31:1F:29:0A:E7:62:7E:14:A6
            X509v3 Authority Key Identifier:
                keyid:EF:7E:B7:CF:CF:25:4C:99:8B:D9:CE:07:C0:F4:8E:07:D6:1B:7C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:35:85:5b:f2:1c:4f:14:dc:44:19:70:b3:05:5d:1b:81:c2:
         d9:dd:f6:4f:53:25:40:83:fc:fc:90:4d:14:55:be:10:8b:72:
         46:ee:be:36:0e:06:7d:6d:6a:67:06:65:25:f0:56:4c:78:81:
         e8:f3:b5:bb:88:81:aa:52:e4:54:2c:a3:65:54:d7:3a:f9:44:
         30:32:a4:3c:5a:9b:ac:23:3e:1d:19:d0:72:6b:91:20:8b:f9:
         a8:33:4a:0a:83:64:ff:0c:e1:2e:b8:37:91:b3:51:44:8e:f0:
         ae:0c:17:66:c5:df:71:62:9d:eb:30:e8:9d:25:f7:f1:6d:7a:
         cc:38:e3:f4:c7:37:40:eb:75:64:c1:9a:f3:17:5d:e7:0a:66:
         ff:4c:7e:0e:8e:bb:87:fd:9c:e3:e6:3f:6f:78:2a:63:b8:5f:
         4c:e7:65:51:8d:e8:aa:fa:39:a5:2f:ee:41:fd:6d:08:3c:9e:
         e5:f1:4d:f6:8c:39:a3:bb:32:27:32:45:91:68:a6:95:37:88:
         d6:07:ce:f9:d9:85:25:24:2d:ba:8b:88:f1:5c:b3:fd:8e:34:
         c8:34:42:43:0c:a5:d9:4e:66:89:f7:59:ab:62:fa:ad:68:0b:
         12:b2:df:51:b7:e6:d5:97:cf:df:6c:44:42:7a:7c:5e:a2:30:
         d9:cf:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:39:30 2026 by rpki-client