Error: rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          +32auTdcdT+vXfsiuJSstJrUVx+tG1soowjz7Oyb5pk=
Subject key identifier:   4D:59:1C:6D:1A:FE:CA:6C:4A:1D:29:0D:B7:BE:E9:14:2A:FF:52:3B
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       0364
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          0363
Signing time:             Tue 22 Sep 2026 04:11:18 +0000
Manifest this update:     Tue 22 Sep 2026 04:11:17 +0000
Manifest next update:     Thu 24 Sep 2026 04:11:17 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: ZvMuB4P4UTcWTQqqCsBxJFEqH04yUB0lMnkcY5wahww=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Sep 22 04:11:17 2026 GMT
            Not After : Sep 24 04:11:17 2026 GMT
        Subject: CN=6ab1ffe6-d7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:14:c8:28:1e:eb:ad:b8:9a:9a:cc:88:0d:
                    e6:91:d6:ca:ef:c1:46:15:16:f9:b5:8f:04:96:93:
                    00:3b:03:30:7c:c7:31:d6:50:e6:f2:b9:eb:12:27:
                    a9:90:2f:8a:f3:6a:fd:74:65:32:71:c4:fd:8c:b1:
                    c2:86:7d:2f:fa:7f:b5:10:de:4c:9a:de:fd:d5:03:
                    27:f5:34:43:89:28:28:2b:37:9f:9f:89:65:4d:ea:
                    5e:0c:9a:50:2b:82:a4:16:85:07:47:8b:0a:00:2c:
                    fb:df:69:26:16:3f:04:36:90:de:3c:91:80:6f:de:
                    6c:0e:b0:10:da:05:ae:01:a4:60:b2:56:b4:96:32:
                    05:8b:30:47:c6:f4:28:da:58:53:97:ee:c6:e3:b0:
                    c4:75:e2:bb:b7:81:0a:d1:92:35:d7:e5:d7:16:e5:
                    50:b0:c9:e5:3b:91:cc:0b:e6:3a:39:9d:13:c4:6c:
                    0f:7b:39:c1:91:06:ba:38:6e:b5:ec:f4:db:e1:91:
                    d7:f6:2a:0a:30:b4:bf:92:91:a4:29:50:f9:ac:c1:
                    21:42:a8:38:44:da:3a:1c:f7:26:ac:2c:e6:1b:5d:
                    93:2c:66:1b:b9:e9:2e:6d:16:3e:91:a2:13:b2:9b:
                    48:e9:18:bf:29:7f:d2:9e:58:cf:48:04:42:3a:58:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:1C:6D:1A:FE:CA:6C:4A:1D:29:0D:B7:BE:E9:14:2A:FF:52:3B
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fe:47:13:cf:31:7f:55:18:ac:1e:21:7e:c3:84:dc:b0:32:
         a8:e8:e0:56:86:0f:85:5a:2b:a4:39:00:c6:48:b7:f6:a3:66:
         0b:8a:86:9a:10:3b:f1:bf:d8:aa:9a:40:31:18:1e:4a:56:f8:
         65:81:a9:71:1a:0d:3c:4f:6a:2b:6a:8c:7f:4c:84:ba:93:0f:
         38:a3:f1:77:53:ac:8e:13:48:ec:25:bb:86:aa:f3:63:61:24:
         41:fc:0d:10:c2:4c:af:a6:bb:d7:fe:e0:b4:a4:97:44:f7:66:
         ab:0f:6c:ec:93:51:2d:e5:34:3e:c5:af:ed:af:ad:fd:80:a4:
         30:0e:4a:f3:3d:66:c2:02:7f:1b:0f:bf:9d:a0:6f:8d:9c:2b:
         1b:64:a9:ad:43:d4:ee:d9:e1:6b:5d:09:14:26:db:cb:9d:f7:
         07:75:65:77:44:b6:40:9a:90:93:bd:0c:e9:c0:0b:bc:c7:82:
         cd:09:e3:80:48:a7:56:e5:e3:29:4c:73:de:8b:30:73:df:d2:
         c9:77:a0:01:54:2d:a5:be:d0:d9:1d:69:42:66:4c:e5:3f:12:
         be:d1:0c:8a:2a:8c:b0:71:6d:49:aa:df:d3:a8:56:e3:89:19:
         34:12:3b:70:59:06:8a:c7:1d:ae:a6:b6:10:83:d4:a6:7a:cc:
         34:1e:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:45 2026 by rpki-client