Error: rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
File:                     YgYKORQeYf1_hIcoAdkqSoCYD2o.mft (raw, json)
Hash identifier:          6a4sP/7jDvLeTtDI0tunAOQmDPsqM11bU9JcOgzApP0=
Subject key identifier:   C5:B5:8C:AD:4F:8F:E9:46:00:36:AC:19:FC:85:B8:5D:65:09:D9:1F
Authority key identifier: 62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
Certificate issuer:       /CN=F36C4E2CAR/serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
Certificate serial:       0660
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
Manifest number:          065F
Signing time:             Sat 14 Nov 2026 02:49:16 +0000
Manifest this update:     Sat 14 Nov 2026 02:49:15 +0000
Manifest next update:     Mon 16 Nov 2026 02:49:15 +0000
Files and hashes:         1: YgYKORQeYf1_hIcoAdkqSoCYD2o.crl (hash: QyTugQKqr2lH2Aiptu3682luyOVnM81aLR/l7k2A2UU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                          rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAR, serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
        Validity
            Not Before: Nov 14 02:49:15 2026 GMT
            Not After : Nov 16 02:49:15 2026 GMT
        Subject: CN=6af7cc2c-866f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ff:f0:67:59:67:4c:28:35:53:8c:ab:02:82:
                    b6:d2:30:7d:8b:90:69:df:ac:94:3a:24:c9:6b:ec:
                    06:27:e4:3d:5e:6f:1b:0d:cd:cd:db:2b:e6:92:18:
                    62:01:7f:5c:01:4c:84:20:02:bf:96:1f:91:b1:59:
                    cf:9e:d0:d2:fd:59:62:01:f0:ef:ef:30:a5:ac:0b:
                    a0:ea:8d:fa:68:2a:cf:89:99:24:bc:79:de:17:5f:
                    e0:70:4d:7e:14:8c:3e:2a:2a:48:0b:71:60:60:b9:
                    26:25:73:4a:51:7f:b2:5b:e1:48:8e:74:be:a9:e7:
                    d9:04:e2:7c:a0:9c:47:f3:44:eb:6d:da:44:87:fa:
                    04:8c:2c:a3:30:bc:bb:31:c4:65:01:13:6d:61:c8:
                    4e:00:a4:f0:57:a0:15:2e:54:3f:a9:f9:1c:34:8b:
                    ea:f9:96:e9:4f:7b:07:41:89:99:89:70:7e:e2:ce:
                    e2:9a:a6:2b:85:bc:94:31:1f:7e:35:6c:11:ac:10:
                    34:83:df:27:ee:d6:e7:c5:9a:c4:88:f5:9d:b3:eb:
                    c0:f9:0e:38:bb:16:2a:34:bc:08:a0:4e:e3:97:6f:
                    7a:40:bf:71:2b:5a:e0:29:34:9a:be:cc:49:43:79:
                    f4:3f:fa:e8:e8:fd:99:29:4d:af:d9:86:90:c9:c7:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B5:8C:AD:4F:8F:E9:46:00:36:AC:19:FC:85:B8:5D:65:09:D9:1F
            X509v3 Authority Key Identifier:
                keyid:62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:d1:d2:ca:46:04:69:d8:24:8f:ea:8c:95:a4:6c:42:db:
         3c:4b:fb:71:b7:c8:d6:36:87:36:6f:d5:06:9d:a7:ae:ad:1b:
         ba:47:3a:87:e6:86:c0:29:70:36:f1:48:28:01:ea:0e:a5:12:
         b5:07:ff:db:8b:6e:16:6f:18:df:1f:d2:63:65:a6:7b:0e:c7:
         a6:f9:7a:2c:f5:29:24:d2:b5:b0:b8:f9:68:26:fd:e7:90:cb:
         ee:64:de:ee:d1:4d:68:e8:f1:9e:45:75:25:96:dc:94:7a:b9:
         dc:d9:84:09:3f:f8:66:be:37:07:8f:31:cc:c8:0f:72:51:66:
         b7:51:1a:0f:d1:dd:a7:9b:39:d2:56:3f:86:01:9a:c5:43:1c:
         4c:41:3b:22:ec:21:8b:fa:ba:70:cd:50:f3:7b:12:25:a1:42:
         49:64:40:5a:23:a6:b1:37:a1:dc:a3:32:ae:58:7a:b9:6b:8a:
         50:31:5c:c2:0f:00:b0:10:e4:41:6d:77:fe:f3:59:7f:c3:af:
         ed:43:ef:62:d1:85:f1:0b:c4:9d:a5:99:10:fe:9f:54:e3:9a:
         e4:87:31:87:1f:51:ef:78:3f:14:6d:8f:33:13:df:38:d7:5b:
         06:73:61:da:24:1b:d9:37:c1:88:e0:cc:44:11:ee:f6:21:02:
         bd:ac:a9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:52:39 2026 by rpki-client