Error: rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
File:                     G-LsVuSB2cQGqMGrnFIvumhbdwk.mft (raw, json)
Hash identifier:          m3FWm+LtEop0hJhjcQpQjKsPdIc87qzVDSFaFn1B2bY=
Subject key identifier:   84:CE:4D:B2:E6:21:4F:B5:33:36:16:4A:D8:80:9C:E3:6E:0F:85:91
Authority key identifier: 1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09
Certificate issuer:       /CN=F36C8DB2AF/serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
Certificate serial:       0B95
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
Manifest number:          0B90
Signing time:             Thu 24 Sep 2026 01:15:51 +0000
Manifest this update:     Thu 24 Sep 2026 01:15:51 +0000
Manifest next update:     Sat 26 Sep 2026 01:15:51 +0000
Files and hashes:         1: G-LsVuSB2cQGqMGrnFIvumhbdwk.crl (hash: OJol1ZB6aMAACuzmwQV1Mio5nq7aEBgW7X/6CnKIE50=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 01:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2965 (0xb95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8DB2AF, serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
        Validity
            Not Before: Sep 24 01:15:51 2026 GMT
            Not After : Sep 26 01:15:51 2026 GMT
        Subject: CN=6ab479c7-bc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:0f:a3:16:fe:88:83:ce:29:df:97:cd:e4:
                    c0:1f:6f:07:e5:55:34:e5:45:05:17:43:0a:b4:6d:
                    8d:64:14:f3:48:3e:0b:cf:da:a1:55:a3:84:a8:5c:
                    09:31:1b:9c:ad:9e:05:35:fe:34:9a:96:5e:48:ce:
                    01:42:9b:55:f8:93:f6:ea:7c:32:73:a9:48:ef:f1:
                    cf:24:5f:5d:3c:97:53:05:8e:57:72:dd:80:1c:60:
                    ff:71:b8:ab:98:2c:cb:09:ae:97:66:08:6f:8c:b8:
                    96:28:50:9f:08:b1:da:f3:73:95:d8:81:b6:2b:ec:
                    a8:e3:32:a8:81:4b:1a:f6:9d:32:34:2d:86:d9:3b:
                    b4:54:0f:20:97:0d:0f:10:36:5f:c2:d6:a6:20:79:
                    a5:09:8e:b3:4b:c1:ec:d9:22:41:c9:c0:a3:17:86:
                    1f:62:31:0b:b5:a2:87:1e:65:22:5a:ba:fb:5c:3e:
                    4a:36:80:3a:bc:27:c0:aa:a8:24:b7:0a:ef:c2:92:
                    b9:ce:26:78:96:c3:4c:26:09:6c:3e:55:fa:2d:6e:
                    a0:a3:48:2c:15:14:06:97:5a:e8:4a:0c:62:63:cc:
                    1a:56:9a:ac:82:7b:f3:d6:23:4e:f6:e1:a8:6b:a7:
                    61:c0:78:4a:e3:74:b3:9f:47:cf:fa:04:13:ad:8d:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CE:4D:B2:E6:21:4F:B5:33:36:16:4A:D8:80:9C:E3:6E:0F:85:91
            X509v3 Authority Key Identifier:
                keyid:1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:50:6b:db:a3:fe:44:63:78:60:9e:73:68:2e:2d:96:74:
         69:fe:08:bc:f1:63:2a:cb:f7:5f:c9:19:9b:55:00:bd:0d:98:
         c6:a0:81:83:3d:1a:b9:6e:2e:b4:b0:56:09:cc:63:35:f5:a6:
         f9:99:6a:7c:75:44:32:60:2e:cd:02:4a:6c:13:63:5d:64:00:
         22:fd:d1:2c:38:73:bf:93:b9:c2:c0:b4:ef:6b:b2:27:72:aa:
         33:ee:1e:ca:14:55:09:dd:1d:00:8d:9a:14:e3:c0:dc:2a:3a:
         df:10:8a:72:2e:da:e9:7b:a6:9d:59:b7:5a:77:76:e4:ba:b5:
         d6:12:9a:f3:67:c0:d6:5a:af:f6:f1:ab:99:c1:31:33:6f:a0:
         c0:c1:d7:7e:62:c7:c5:bf:eb:e6:d2:33:5b:53:de:46:06:b6:
         1f:2d:0d:12:5f:13:10:f9:c2:3c:11:6a:a8:b5:23:d8:0f:58:
         8a:a1:59:b3:98:d7:21:7a:a3:68:3a:fe:b4:45:fd:40:68:25:
         4c:fd:9c:ed:96:50:cd:f2:e9:9b:0d:36:e6:1d:ce:da:74:c0:
         01:02:7b:b0:c8:4f:52:e0:14:34:34:7b:8b:ca:1e:4a:eb:9a:
         4a:bc:18:d2:ec:d3:87:e4:d0:23:16:cc:01:40:26:c5:aa:cd:
         f3:5f:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:05:33 2026 by rpki-client