Error: rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft
File:                     FYtqLCVMV_R84q9RE2jZtjz44NI.mft (raw, json)
Hash identifier:          d5+9AjQWCCgOUH1bvlb6GjWexQXUjKh1444eqnesY1s=
Subject key identifier:   3B:AD:6D:CA:8C:4D:31:7D:17:4B:37:15:96:06:34:E3:FC:32:EE:C0
Authority key identifier: 15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
Certificate issuer:       /CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Certificate serial:       0AEB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft
Manifest number:          0ADB
Signing time:             Sat 10 Oct 2026 01:21:19 +0000
Manifest this update:     Sat 10 Oct 2026 01:21:18 +0000
Manifest next update:     Mon 12 Oct 2026 01:21:18 +0000
Files and hashes:         1: FYtqLCVMV_R84q9RE2jZtjz44NI.crl (hash: UCefu0VtGYkOI+o8DJkEUlqNL7Eg1A7aDu2yX8Bql/g=)
                          2: D6331B72083B11F18A9892A4DAE4EC9C.roa (hash: L0HQjZQdcJ4UK8/c1v+7YcsQ/yAdwETv10wnZiS2sKo=)
                          3: D5732EDCA63F11F19349560DCF1D38B0.roa (hash: uoex2NMZibdzYxCta8VEsPtoDJtXo0i9+IYVxE8s6Do=)
                          4: DD207954846E11EF979821A8762E951A.roa (hash: AI9si2nhZz8J2jqDAtjUn0vG9ddLMKUEmZw4wMIEDpg=)
                          5: BA290AC4846E11EF92EC03A8762E951A.roa (hash: wcG8k07mQfDJcFKYWAJy1egkiEiey2YspQqvCKzNu2U=)
                          6: 3BF8BD54083C11F1B725D1A6DAE4EC9C.roa (hash: 0XqSHDRJD5ACc8YRC3imx9fkGnAp/tVZmKtbhAmaFHQ=)
                          7: F935F568083B11F1A5F2A4A6DAE4EC9C.roa (hash: 79yr1uYpp2CQk5nRvj55hzwcpakTGMeeElzFIohYMnc=)
                          8: 8D279298846E11EF894DF2A5762E951A.roa (hash: P3/1kTpK5odvmu/RTvEUq0JDe9HQ56ZEmrC5mYeivrk=)
                          9: ADFEC778083B11F19DDDCAA2DAE4EC9C.roa (hash: NEJd+22TjWW+46tfJE9zkvU+A6ZFF+Jr4sFP6Odgli4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft
                          rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795 (0xaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AR, serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
        Validity
            Not Before: Oct 10 01:21:18 2026 GMT
            Not After : Oct 12 01:21:18 2026 GMT
        Subject: CN=6ac9930e-a52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:15:85:77:21:98:ff:5c:d8:73:ce:a2:8a:
                    24:ea:95:b5:a8:3a:c7:09:99:51:d0:2f:f1:ed:5a:
                    e9:ec:c1:db:b2:c3:7d:49:bf:6d:ef:08:d4:88:ec:
                    b8:eb:fc:ee:51:ec:7a:4e:9c:36:e8:e5:11:de:06:
                    f1:b9:fe:27:cd:df:46:f6:f3:45:ff:5a:fc:c4:e6:
                    04:c1:1e:fb:02:25:10:44:07:97:a4:d2:a6:a8:70:
                    c4:28:7b:f0:b9:2b:85:5c:3d:47:16:cb:98:d9:c3:
                    ae:39:65:19:94:a6:e3:e6:2e:38:b2:1f:16:c3:70:
                    57:72:fb:3c:55:e9:89:df:a0:5c:ff:39:63:0b:e5:
                    e8:e9:12:23:46:46:ef:2d:ce:94:4e:d6:4d:8b:ea:
                    b9:c5:b3:e7:70:d0:b8:c0:6d:5e:c8:75:b4:84:55:
                    e0:1c:1f:77:0a:2b:ff:c2:9e:dd:aa:57:4c:fa:c6:
                    5b:b5:3b:df:dc:32:ff:0a:9a:60:94:95:ae:44:29:
                    10:d7:e9:e1:ef:bb:cd:b5:b4:00:5a:2f:00:2f:bf:
                    9a:d2:28:67:ec:07:57:30:6d:a2:66:f6:4f:dd:dd:
                    c4:77:7d:68:0a:bf:df:1c:bb:ca:df:63:29:a7:03:
                    be:3f:f9:61:77:d4:a0:33:55:0b:a5:64:e9:07:74:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AD:6D:CA:8C:4D:31:7D:17:4B:37:15:96:06:34:E3:FC:32:EE:C0
            X509v3 Authority Key Identifier:
                keyid:15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:8f:34:60:e0:fe:b7:4a:b4:7c:0b:e1:a1:32:15:51:e1:
         26:68:4a:07:33:c6:93:2b:3e:06:a9:36:09:39:04:a8:7a:b1:
         ef:b9:92:c8:86:b3:a0:e8:24:71:82:15:28:39:a2:75:8b:0e:
         19:c7:57:8f:5e:89:89:ba:7d:c5:25:a7:fb:24:26:6a:df:a2:
         89:08:bd:79:06:c0:17:af:9c:1d:94:93:e0:0f:55:17:6a:1b:
         98:f6:16:79:25:2b:15:20:a3:35:d3:e2:67:c3:b4:17:64:35:
         50:00:d1:69:7a:6c:52:8a:3c:39:f7:68:a7:43:8b:71:8f:d5:
         37:11:70:28:ae:7d:1c:19:cf:18:31:54:aa:88:f2:c2:45:0d:
         c6:da:ac:5f:fa:8f:b3:00:64:39:db:61:7b:fd:70:65:df:72:
         74:f3:58:8c:f8:d9:7c:d6:48:61:09:7f:05:fb:31:4c:22:e1:
         85:be:d8:e4:08:93:d5:de:51:40:bf:4d:73:0f:b6:d1:ab:32:
         58:54:a9:6d:7f:48:e3:17:f3:48:a9:aa:c8:62:79:fc:d3:0b:
         51:b3:34:82:9b:ec:5c:7b:bd:fd:22:17:c3:a6:fb:53:d7:5a:
         af:4c:18:62:97:2e:c6:d8:2a:f6:e0:48:13:5e:38:74:7d:52:
         05:9e:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 08:00:55 2026 by rpki-client