Error: rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
File:                     7cVihK_vMTf8afnaeD_pzHg6baw.mft (raw, json)
Hash identifier:          GkALNrXrQ8pH+lj5Fnrh4GOcHkkJyV7cO5TXm4ad4ss=
Subject key identifier:   9C:33:FB:34:98:95:20:04:E5:84:8A:B0:96:A2:94:2E:50:BD:71:A9
Authority key identifier: ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC
Certificate issuer:       /CN=F36C1D14AF/serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
Certificate serial:       0980
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
Manifest number:          097E
Signing time:             Fri 25 Sep 2026 01:44:06 +0000
Manifest this update:     Fri 25 Sep 2026 01:44:05 +0000
Manifest next update:     Sun 27 Sep 2026 01:44:05 +0000
Files and hashes:         1: 7cVihK_vMTf8afnaeD_pzHg6baw.crl (hash: MqiK3mK+/Jax1gD9I2qK1PVw9aXUvUFdeEHlaNHay0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 01:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432 (0x980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1D14AF, serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
        Validity
            Not Before: Sep 25 01:44:05 2026 GMT
            Not After : Sep 27 01:44:05 2026 GMT
        Subject: CN=6ab5d1e6-da54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:ba:1c:4a:b7:54:79:37:bc:9c:f9:21:3e:
                    63:87:c8:cb:d4:0f:54:70:f6:fc:3d:7d:23:92:d5:
                    b1:8b:b4:d6:96:6e:f8:13:bf:d2:99:58:78:15:d8:
                    19:d4:af:cb:b7:fd:5e:01:e3:2e:3f:dd:98:d7:17:
                    b9:29:94:58:0e:15:0b:45:7e:b5:96:81:12:f9:6f:
                    ef:a6:60:98:a6:2b:bc:d6:ce:35:64:26:db:65:1b:
                    e5:1a:2b:3e:55:31:69:f8:f7:cb:db:fe:08:0c:c2:
                    eb:b4:42:96:5a:3d:59:fe:ce:1c:93:f3:cc:9e:ea:
                    a3:f2:f7:d0:89:92:22:9a:52:34:6c:15:b0:2b:c2:
                    f9:78:8c:52:ab:3f:7f:02:db:31:e0:6c:cf:5a:88:
                    53:08:81:1d:f5:0b:b7:cc:a4:19:db:c1:39:85:23:
                    32:2c:86:a0:ae:51:04:73:ec:70:e3:e3:14:64:7e:
                    2c:c8:f2:86:d6:15:fb:f4:a9:83:e8:56:b9:5f:34:
                    e8:63:dc:76:7b:54:67:8e:87:33:5f:7a:99:59:7a:
                    de:9c:e6:ce:84:ca:4a:5b:6e:bc:35:bd:7d:e0:d4:
                    8c:4e:0f:4b:12:fb:99:75:e4:99:f1:4b:0b:dd:48:
                    4c:b5:d4:47:d7:c8:ab:53:41:22:a1:6c:54:b6:dd:
                    f0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:33:FB:34:98:95:20:04:E5:84:8A:B0:96:A2:94:2E:50:BD:71:A9
            X509v3 Authority Key Identifier:
                keyid:ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:50:59:df:58:a4:72:fc:e3:ca:d6:66:cf:c3:76:86:c9:3a:
         33:cc:f4:90:d3:8c:b6:98:b0:2a:67:46:2f:01:d5:93:9b:40:
         b1:e5:ff:ee:14:89:40:b2:bd:ca:ab:5a:16:0d:25:5f:47:3b:
         db:aa:46:4b:6a:99:cd:97:fc:8c:c7:28:9d:60:d7:f1:fa:da:
         a6:aa:1f:52:fb:ac:ff:f1:01:fb:2f:98:1a:08:4d:74:0d:2b:
         72:97:57:52:d2:09:1a:b1:b3:4e:03:08:85:18:cc:81:13:f3:
         b4:86:92:cb:9a:bd:18:b2:f0:bb:c0:c0:2f:08:56:68:0f:0f:
         d3:6f:c5:b4:ae:a5:d1:66:3f:49:51:4e:21:f9:4f:bf:39:2a:
         a5:dd:26:97:aa:8f:b8:f8:5d:b2:93:e4:3c:f1:1b:a2:17:d4:
         a6:c1:aa:36:99:b1:2b:ec:3a:fe:2a:82:7a:3e:70:04:1c:3d:
         99:d5:98:30:d3:8d:75:4f:0b:98:67:d1:07:cd:17:a2:db:4b:
         7d:0b:3b:b1:d4:d8:cd:98:0a:50:87:7b:12:14:29:6a:92:93:
         c8:8e:6a:e4:aa:62:20:7d:f7:07:55:56:a8:14:8c:18:f1:77:
         ed:9e:9a:24:c2:7f:13:5b:52:c9:d2:9c:40:d1:54:3b:f7:c7:
         70:7e:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:46:44 2026 by rpki-client