Error: rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
File:                     yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft (raw, json)
Hash identifier:          vUXdmP2KzFrPnVsITIjDtEp4qJ//ifIlvipbto4RNRw=
Subject key identifier:   5A:CD:3D:21:0B:4E:1A:C5:DF:43:6A:F1:A7:1D:AE:04:35:0C:91:02
Authority key identifier: C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
Certificate issuer:       /CN=F36C5C48AF/serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Certificate serial:       01F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
Manifest number:          01F0
Signing time:             Tue 29 Sep 2026 04:54:26 +0000
Manifest this update:     Tue 29 Sep 2026 04:54:25 +0000
Manifest next update:     Thu 01 Oct 2026 04:54:25 +0000
Files and hashes:         1: yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl (hash: L86pL6uWSy96b31G9C73u7uHwic+g/OhxZ9VWyQPKlE=)
                          2: 7810FC3C3C6511F09E134B93DAE4EC9C.roa (hash: f1/GvpZGuXTR7gHR1RFHDPtCJrb5runsWbtXK95Q83A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5C48AF, serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
        Validity
            Not Before: Sep 29 04:54:25 2026 GMT
            Not After : Oct  1 04:54:25 2026 GMT
        Subject: CN=6abb4482-6200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:1e:bd:b0:4d:23:1a:70:5c:dc:60:5c:1f:
                    93:0d:90:fd:2a:a7:30:de:03:28:2a:ad:af:03:20:
                    03:40:10:51:6e:52:03:fa:7e:aa:3f:cc:7c:a1:89:
                    6f:7b:f5:1c:63:54:5a:8b:22:70:5a:35:4c:57:c3:
                    40:52:5b:97:a8:de:4f:a4:fe:f0:dd:cb:c5:0c:48:
                    f9:01:55:93:c3:95:c5:57:81:44:dc:8c:a5:70:b5:
                    bf:e3:44:e5:73:f6:53:ef:d2:c0:9a:ae:b0:1b:bc:
                    e4:dc:4b:85:7e:ca:92:9f:90:e3:11:c2:24:8f:04:
                    40:e0:92:8b:f9:ec:27:60:52:30:b7:f4:55:cc:62:
                    14:f0:03:2f:09:f8:3c:10:b7:fb:4b:21:9c:df:4d:
                    f6:7f:3d:d8:bb:35:ac:b1:c9:a6:6b:00:ef:e3:73:
                    0c:5b:05:87:d8:c7:81:59:68:b1:d6:71:9a:cf:63:
                    ad:e1:2b:e9:87:30:79:99:88:31:bb:56:44:b9:c7:
                    f4:f8:83:e4:fc:30:bc:88:ef:c5:48:78:69:d7:a6:
                    4c:f9:84:6b:f3:a1:2a:2f:e4:7c:04:54:7c:fe:9e:
                    3a:b9:68:6c:df:7c:f4:f2:8a:6d:62:88:3b:e9:5a:
                    14:ce:6b:90:ea:1d:17:1d:44:3a:32:3e:70:09:ee:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CD:3D:21:0B:4E:1A:C5:DF:43:6A:F1:A7:1D:AE:04:35:0C:91:02
            X509v3 Authority Key Identifier:
                keyid:C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:90:51:71:50:c3:ff:e1:6e:29:65:ed:0b:c4:c6:ba:d4:4c:
         25:60:ab:f1:94:6a:d3:f4:4e:a0:d4:df:2e:e5:f5:ca:df:5a:
         0b:88:1d:df:b5:b9:b0:e2:08:fb:9b:ee:15:3c:ca:36:64:44:
         bc:8a:3f:b2:f8:5c:ca:14:22:88:d4:cc:56:5a:2d:7e:e2:91:
         8e:8b:c5:e4:7e:91:52:a7:35:e2:8e:6b:b4:63:be:36:15:c9:
         80:eb:61:6a:86:d8:a1:d7:a0:9e:b1:a0:70:6f:d7:8a:c5:46:
         30:83:dc:c3:a1:b0:a9:88:b3:2a:a6:d8:4d:e5:47:88:db:50:
         54:1b:bc:fb:68:2a:e8:3a:01:e1:60:6c:5c:0a:8d:4d:34:f6:
         7a:e2:32:f7:bb:ca:48:65:d3:30:8f:09:b5:e1:e8:25:35:78:
         6a:63:47:f2:1c:36:79:2d:70:a7:6b:84:9a:79:73:e0:b5:60:
         8d:09:62:1c:1a:2b:53:85:bf:1a:8a:5d:95:12:5e:8c:65:87:
         3b:df:39:01:52:9a:98:77:1d:c2:b3:48:b2:42:bf:8a:de:6d:
         c2:64:52:96:32:0c:c5:15:44:dd:5f:6a:9a:ab:55:f2:73:95:
         12:26:dc:80:ae:24:66:19:ba:8e:23:e7:56:a9:63:47:82:ef:
         27:85:69:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:12:15 2026 by rpki-client