Error: rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
File:                     sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft (raw, json)
Hash identifier:          KaihRwFGOWCDAixVvNRSKdRj+F9/HpYXK+2P2TFyR/U=
Subject key identifier:   08:82:5A:C1:85:F5:CC:6A:AD:D6:C1:C7:CC:71:06:D4:8D:F7:5D:05
Authority key identifier: B1:B3:DD:CE:55:30:72:00:10:A9:9E:14:F2:52:B9:74:30:8A:B7:14
Certificate issuer:       /CN=F36BD97CAF/serialNumber=B1B3DDCE5530720010A99E14F252B974308AB714
Certificate serial:       073A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
Manifest number:          073A
Signing time:             Sun 27 Sep 2026 02:29:08 +0000
Manifest this update:     Sun 27 Sep 2026 02:29:07 +0000
Manifest next update:     Tue 29 Sep 2026 02:29:07 +0000
Files and hashes:         1: sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl (hash: RHuoFJcyd4aA69D4IhkcBLfu3SBajMI7ohTe6KV+NdE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850 (0x73a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAF, serialNumber=B1B3DDCE5530720010A99E14F252B974308AB714
        Validity
            Not Before: Sep 27 02:29:07 2026 GMT
            Not After : Sep 29 02:29:07 2026 GMT
        Subject: CN=6ab87f74-a94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:3f:fb:15:a5:18:df:e5:0b:04:ff:35:d8:
                    83:08:0c:77:f5:1b:f5:ae:a6:2d:0d:16:b3:43:be:
                    f7:3f:3e:52:bf:42:77:d4:62:8c:5e:d6:d0:f4:98:
                    78:b3:7a:6e:13:82:f5:5f:5c:62:9f:a9:30:13:3d:
                    f7:62:f5:95:f9:5d:cc:6a:a1:b4:df:44:4b:b2:af:
                    a2:13:bf:8e:0d:ce:3c:3a:2f:c2:86:cf:2b:cf:6d:
                    41:b1:9f:81:0c:76:3e:68:cd:d7:ae:af:ff:da:f7:
                    da:79:bc:38:36:4c:68:57:db:17:e1:29:2c:0f:3f:
                    98:43:26:07:97:92:7b:8d:bc:6a:f8:8e:a6:af:36:
                    30:52:ac:58:b3:de:31:70:a8:da:73:71:cd:19:7a:
                    1e:1e:9d:19:6a:ad:1d:53:bd:fc:84:98:9c:e4:d9:
                    91:38:33:62:44:3c:32:af:a0:8f:25:53:dd:cd:7b:
                    f5:9f:85:42:bb:04:e9:6d:36:a7:e6:55:62:8d:a9:
                    3e:23:70:f3:b7:cc:71:54:bd:47:f5:e2:d0:a2:e1:
                    c7:de:8c:b6:60:c2:09:09:43:10:bd:0d:c0:66:18:
                    30:ff:9f:6a:7e:42:91:c3:eb:d8:cd:c2:80:49:01:
                    fc:e0:3c:58:0e:82:fe:e8:d0:0a:25:98:44:f9:4b:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:82:5A:C1:85:F5:CC:6A:AD:D6:C1:C7:CC:71:06:D4:8D:F7:5D:05
            X509v3 Authority Key Identifier:
                keyid:B1:B3:DD:CE:55:30:72:00:10:A9:9E:14:F2:52:B9:74:30:8A:B7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f7:42:b1:4f:00:85:9b:7a:42:2a:c9:89:8f:ab:91:5c:96:
         0a:be:29:ad:a2:19:f8:30:74:16:ca:c8:c5:6a:b0:08:11:30:
         ee:c5:be:4d:51:74:c9:6e:20:52:b1:6c:6b:47:97:27:b2:21:
         90:dc:58:1b:0d:3f:28:ce:c9:68:f8:c9:06:6a:38:66:1e:76:
         e8:c3:da:08:ea:3b:f0:75:ca:be:4e:af:a3:f2:c4:05:22:5a:
         6e:5d:da:85:4e:14:ee:15:4a:fe:6b:4e:fe:90:dc:db:af:32:
         0f:a8:5a:af:8b:56:78:6b:a8:28:c1:ff:13:91:01:f2:ef:39:
         05:55:bd:e8:62:0d:12:5f:e8:c6:fc:09:fd:cd:ec:10:dc:91:
         d1:3f:7d:f1:4b:50:1c:aa:35:3e:5c:14:b2:eb:3b:dc:79:2a:
         e7:b4:1f:68:cd:e7:c0:79:c0:21:d4:7d:da:ca:18:06:e6:33:
         f8:94:fd:1e:9a:8e:a5:45:d0:a0:ba:7c:93:4d:43:cb:ff:6a:
         33:78:05:d6:e6:20:cd:36:4f:30:a2:99:a5:9c:70:04:31:61:
         e8:d3:90:b1:1d:3a:6a:fb:40:e1:d4:7e:5e:03:eb:58:c2:d5:
         ae:26:61:57:09:d8:69:96:72:bc:a8:2d:bc:6a:f2:a9:6c:b0:
         3f:5e:98:fe
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBzowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQ5N0NBRjExMC8GA1UEBRMoQjFCM0REQ0U1NTMwNzIwMDEwQTk5RTE0RjI1MkI5
NzQzMDhBQjcxNDAeFw0yNjA5MjcwMjI5MDdaFw0yNjA5MjkwMjI5MDdaMBgxFjAU
BgNVBAMTDTZhYjg3Zjc0LWE5NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCm3j/7FaUY3+ULBP812IMIDHf1G/Wupi0NFrNDvvc/PlK/QnfUYoxe1tD0
mHizem4TgvVfXGKfqTATPfdi9ZX5XcxqobTfREuyr6ITv44Nzjw6L8KGzyvPbUGx
n4EMdj5ozdeur//a99p5vDg2TGhX2xfhKSwPP5hDJgeXknuNvGr4jqavNjBSrFiz
3jFwqNpzcc0Zeh4enRlqrR1TvfyEmJzk2ZE4M2JEPDKvoI8lU93Ne/WfhUK7BOlt
NqfmVWKNqT4jcPO3zHFUvUf14tCi4cfejLZgwgkJQxC9DcBmGDD/n2p+QpHD69jN
woBJAfzgPFgOgv7o0AolmET5SzWvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCIJa
wYX1zGqt1sHHzHEG1I33XQUwHwYDVR0jBBgwFoAUsbPdzlUwcgAQqZ4U8lK5dDCK
txQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJEOTdDL0M0Mzg0NUNDMkQ5NDExRUNBMkFBNjM0NUQ4QTAxNENFL3NiUGR6
bFV3Y2dBUXFaNFU4bEs1ZERDS3R4US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NiUGR6bFV3Y2dBUXFaNFU4bEs1ZERDS3R4US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkQ5N0MvQzQzODQ1Q0MyRDk0MTFFQ0EyQUE2MzQ1RDhB
MDE0Q0Uvc2JQZHpsVXdjZ0FRcVo0VThsSzVkRENLdHhRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL90KxTwCFm3pCKsmJj6uRXJYKvimt
ohn4MHQWysjFarAIETDuxb5NUXTJbiBSsWxrR5cnsiGQ3FgbDT8ozslo+MkGajhm
Hnbow9oI6jvwdcq+Tq+j8sQFIlpuXdqFThTuFUr+a07+kNzbrzIPqFqvi1Z4a6go
wf8TkQHy7zkFVb3oYg0SX+jG/An9zewQ3JHRP33xS1AcqjU+XBSy6zvceSrntB9o
zefAecAh1H3ayhgG5jP4lP0emo6lRdCgunyTTUPL/2ozeAXW5iDNNk8wopmlnHAE
MWHo05CxHTpq+0Dh1H5eA+tYwtWuJmFXCdhplnK8qC28avKpbLA/Xpj+
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:05:42 2026 by rpki-client