Error: rpki.afrinic.net/repository/member_repository/F36CF351/B113B8F4F44211F0BBEB2CE7DAE4EC9C/86xUpAk_LogYbdeVXDb0utWMHr8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CF351/B113B8F4F44211F0BBEB2CE7DAE4EC9C/86xUpAk_LogYbdeVXDb0utWMHr8.mft
File:                     86xUpAk_LogYbdeVXDb0utWMHr8.mft (raw, json)
Hash identifier:          y1gSS4eoWIiZ22upp+ekMWCSE9wUwHMrA6wXBlfgl+g=
Subject key identifier:   8E:30:BE:F2:F0:C5:B0:6D:D2:73:E6:DF:7C:87:43:B3:A3:2D:6C:39
Authority key identifier: F3:AC:54:A4:09:3F:2E:88:18:6D:D7:95:5C:36:F4:BA:D5:8C:1E:BF
Certificate issuer:       /CN=F36CF351AF/serialNumber=F3AC54A4093F2E88186DD7955C36F4BAD58C1EBF
Certificate serial:       FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/86xUpAk_LogYbdeVXDb0utWMHr8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CF351/B113B8F4F44211F0BBEB2CE7DAE4EC9C/86xUpAk_LogYbdeVXDb0utWMHr8.mft
Manifest number:          FB
Signing time:             Wed 23 Sep 2026 05:23:30 +0000
Manifest this update:     Wed 23 Sep 2026 05:23:29 +0000
Manifest next update:     Fri 25 Sep 2026 05:23:29 +0000
Files and hashes:         1: 86xUpAk_LogYbdeVXDb0utWMHr8.crl (hash: jiqtwwfjkYw0pxYAgIc2hdskGpcuszl1frfEAnwBIfo=)
                          2: 8CEBB2FAF44311F0A21B46EBDAE4EC9C.roa (hash: jmy7zSLOd1neUvzn8pPX6BEzMoYCeOTgvJV9WABbFVk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CF351/B113B8F4F44211F0BBEB2CE7DAE4EC9C/86xUpAk_LogYbdeVXDb0utWMHr8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CF351/B113B8F4F44211F0BBEB2CE7DAE4EC9C/86xUpAk_LogYbdeVXDb0utWMHr8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/86xUpAk_LogYbdeVXDb0utWMHr8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CF351AF, serialNumber=F3AC54A4093F2E88186DD7955C36F4BAD58C1EBF
        Validity
            Not Before: Sep 23 05:23:29 2026 GMT
            Not After : Sep 25 05:23:29 2026 GMT
        Subject: CN=6ab36252-5da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:22:8f:12:c2:5f:88:dd:b0:96:6d:62:41:
                    c5:23:7d:cd:7f:c6:70:15:09:3f:f0:57:bc:dc:d3:
                    e2:a6:d9:ad:a4:59:2b:4d:36:37:fe:34:f4:b6:2a:
                    b1:3b:14:3d:c0:3f:4c:bb:32:25:d3:d0:b9:29:19:
                    97:4a:f5:af:cc:2f:16:5d:23:e3:dc:04:36:18:8a:
                    7d:a9:93:3d:3c:6e:58:62:6f:fa:ba:ad:97:f7:fd:
                    99:fc:5d:ba:1b:ef:b8:0c:ad:3e:91:7b:cc:ef:01:
                    c9:0f:92:e3:eb:9a:c8:a0:24:b1:91:eb:78:ad:74:
                    4e:64:a4:63:95:38:45:d2:51:30:69:67:43:f3:49:
                    7c:12:f7:7d:72:01:99:f2:41:8f:ad:49:26:11:48:
                    01:b2:e4:99:2a:b0:e6:0d:7c:5a:fd:62:91:99:16:
                    b8:9c:c2:3f:59:cb:27:e1:13:c6:f1:97:dd:f2:4c:
                    06:b3:20:6a:3b:cb:81:47:ee:ff:74:33:21:17:8c:
                    78:7c:20:ff:fa:da:ef:ee:2a:4b:f3:d3:9b:7c:14:
                    8b:d5:2e:6d:96:ae:96:14:10:30:77:72:0e:cd:80:
                    2b:d7:c0:1a:d3:0b:f7:16:0d:2d:9b:c6:02:bd:30:
                    5c:81:ad:08:eb:c9:db:29:68:71:55:d8:96:b9:8e:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:30:BE:F2:F0:C5:B0:6D:D2:73:E6:DF:7C:87:43:B3:A3:2D:6C:39
            X509v3 Authority Key Identifier:
                keyid:F3:AC:54:A4:09:3F:2E:88:18:6D:D7:95:5C:36:F4:BA:D5:8C:1E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF351/B113B8F4F44211F0BBEB2CE7DAE4EC9C/86xUpAk_LogYbdeVXDb0utWMHr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/86xUpAk_LogYbdeVXDb0utWMHr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF351/B113B8F4F44211F0BBEB2CE7DAE4EC9C/86xUpAk_LogYbdeVXDb0utWMHr8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:21:c4:a8:7b:cc:8c:95:f3:13:6c:dc:02:e6:5d:76:04:5f:
         48:94:06:93:3d:20:76:a5:11:42:be:d4:42:37:e0:d0:37:c9:
         58:d5:4b:e1:aa:e4:9a:d7:3e:f3:c9:7d:a4:d6:56:4d:d9:6c:
         35:c1:48:05:07:a6:40:b3:f6:b2:7a:96:60:ed:c9:0c:08:cf:
         96:82:16:a1:24:2d:c1:1f:7f:e6:14:80:d3:d0:8e:8d:71:2a:
         04:b8:47:4b:0d:7d:94:38:b1:dc:b9:b9:f2:70:55:12:92:b9:
         85:00:f5:3e:74:a9:f5:4f:e8:6d:ab:e3:31:20:39:11:0f:df:
         15:68:01:99:88:e8:ec:36:3a:c0:54:03:21:2d:d9:c5:54:56:
         79:c8:aa:f1:03:fe:70:7d:a9:11:8d:a9:f2:4f:d5:b6:0a:7a:
         0a:98:e8:00:52:bb:9f:7f:a3:aa:d6:ee:d8:9c:ef:38:b4:27:
         8e:08:74:d8:24:fa:83:e8:3f:e9:bc:cb:48:b5:0b:b8:64:93:
         3b:bc:58:be:4e:77:1f:54:45:f1:e6:39:b2:dc:93:37:20:aa:
         f1:af:0f:8f:a9:4e:59:6d:2a:93:10:8e:1f:f4:fc:87:ab:f6:
         fd:7d:93:57:0f:fd:98:9f:6f:cf:45:7a:f4:29:43:c8:b7:b8:
         22:4b:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:14:25 2026 by rpki-client