Error: rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File:                     bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier:          8EEf1oQ2xCAyd5CxWctwMmQSyMTN/VWY/2KbChuD+Cs=
Subject key identifier:   A0:15:DF:D3:49:DD:3E:60:6A:F5:BB:B7:7D:CF:FB:A8:9E:CB:F6:F8
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer:       /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial:       0789
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number:          0787
Signing time:             Fri 25 Sep 2026 02:19:51 +0000
Manifest this update:     Fri 25 Sep 2026 02:19:50 +0000
Manifest next update:     Sun 27 Sep 2026 02:19:50 +0000
Files and hashes:         1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: hjPGKXDzzlzN84+XVRO4N1Csv7pZWWLlDnnccQpmtGo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                          rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
        Validity
            Not Before: Sep 25 02:19:50 2026 GMT
            Not After : Sep 27 02:19:50 2026 GMT
        Subject: CN=6ab5da47-f19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:09:97:ba:25:94:4c:2c:22:81:59:7e:a9:
                    9e:19:4d:a9:a1:40:62:53:7e:62:df:12:96:51:b0:
                    48:f9:54:a1:6b:67:cb:8d:65:ba:e6:4e:1b:d3:fb:
                    86:f2:b3:1e:9a:69:96:06:1a:9e:58:f2:68:a2:44:
                    62:49:63:5b:b5:36:8a:24:30:88:da:b9:04:fb:b8:
                    77:82:d0:1f:76:f9:10:38:e8:aa:37:5b:3f:a3:55:
                    7b:31:7e:45:5e:47:86:a0:68:e0:84:65:62:e7:54:
                    af:f0:55:1c:d1:af:a2:83:39:f2:65:7c:9e:44:83:
                    ce:a4:62:35:04:b6:f0:58:49:31:98:98:87:c6:d4:
                    26:92:e0:e9:b5:95:e2:b7:87:9f:6e:c8:c7:61:9b:
                    2e:fc:da:cd:1c:4a:b4:b6:31:e9:b9:db:a7:42:43:
                    7a:0f:b5:40:62:d5:da:c7:78:2e:55:5e:86:1f:65:
                    42:ed:9f:73:22:44:98:2f:2a:0d:67:18:6d:ac:a5:
                    6c:af:32:b8:a9:56:60:62:78:26:28:a3:04:d9:ce:
                    18:e9:26:78:26:4c:4f:3d:0c:80:fe:5c:90:5c:c9:
                    48:53:42:3e:c8:32:2f:64:59:37:a6:8c:70:0f:6a:
                    61:bf:73:17:48:42:9c:43:ad:4b:34:be:71:06:48:
                    50:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:15:DF:D3:49:DD:3E:60:6A:F5:BB:B7:7D:CF:FB:A8:9E:CB:F6:F8
            X509v3 Authority Key Identifier:
                keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:c2:b7:85:f9:da:34:04:14:32:48:77:e1:09:87:50:fd:
         80:1d:9a:d5:75:19:c9:77:61:6b:d5:38:b2:40:6f:46:09:f1:
         8e:7d:2f:9b:31:b8:01:aa:46:40:a8:39:36:81:29:74:aa:a6:
         bd:a1:09:da:da:79:ea:b4:f1:51:ca:23:e5:6c:72:61:52:43:
         d3:4f:20:2c:84:44:62:6e:ae:6f:b4:5b:f7:e7:b6:3f:2f:08:
         5a:93:2e:3c:0d:35:81:2d:b4:56:96:95:d2:63:e9:78:b8:95:
         01:4c:fe:f3:70:31:e4:1d:8b:9b:17:8b:9e:44:7f:f3:78:2b:
         ba:14:75:ab:2b:ea:06:3c:9d:95:8f:63:09:14:05:72:7b:c9:
         24:4b:fd:99:ab:9b:dc:7a:dd:11:f1:71:76:e9:0d:00:2a:2d:
         e8:f0:0e:ad:ea:b2:82:3a:ec:26:19:c9:9d:21:09:ae:0a:6a:
         99:0e:e6:32:b6:cc:04:b2:a1:0a:b5:f8:7b:2f:bf:fa:2f:11:
         d6:3d:47:31:d0:6c:81:ab:8a:30:fa:12:ec:ae:5e:79:82:60:
         98:f0:ea:c2:19:54:cf:80:1a:57:4d:f6:93:bb:3e:a9:15:2a:
         af:d8:98:12:b6:2a:ee:dc:10:bd:dd:86:e9:40:10:ce:1a:37:
         3e:17:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:11:40 2026 by rpki-client