Error: rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
File:                     Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft (raw, json)
Hash identifier:          jYF5wLL/uL7VdP+m5bpEguBortZmTq2ksn1+/tVSBfc=
Subject key identifier:   A0:E7:AB:3F:95:FB:12:09:E1:2D:A4:90:1D:13:68:27:9C:5B:E6:6D
Authority key identifier: 56:EF:77:07:F7:CB:B8:0D:82:AE:AC:60:55:40:FD:6A:3B:31:3D:95
Certificate issuer:       /CN=F36D5C19AR/serialNumber=56EF7707F7CBB80D82AEAC605540FD6A3B313D95
Certificate serial:       0AC6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
Manifest number:          0AC3
Signing time:             Mon 28 Sep 2026 01:21:45 +0000
Manifest this update:     Mon 28 Sep 2026 01:21:44 +0000
Manifest next update:     Wed 30 Sep 2026 01:21:44 +0000
Files and hashes:         1: Vu93B_fLuA2CrqxgVUD9ajsxPZU.crl (hash: G2be3xo5m9UeNclBfOvmew6uIUWZEzMVEzFoeENTqiM=)
                          2: 26F67BB07BAA11E9BE7E693EF8AEA228.roa (hash: DK8y/9PW04BeUw4LJYq44qLXk52z7s29lnBHY4Y4J/k=)
                          3: BB6580B2E42F11F0B9E5F794DAE4EC9C.roa (hash: zMTRRvx7Vr1SvqYss7swVvmr9SUDyECR2yzYAZr6eIg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
                          rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2758 (0xac6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5C19AR, serialNumber=56EF7707F7CBB80D82AEAC605540FD6A3B313D95
        Validity
            Not Before: Sep 28 01:21:44 2026 GMT
            Not After : Sep 30 01:21:44 2026 GMT
        Subject: CN=6ab9c129-dc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:85:74:bf:a9:0c:5d:b6:8a:c9:c8:be:3e:
                    5e:68:d8:a5:06:f1:ae:0e:64:d9:a6:26:e7:61:74:
                    62:39:f0:1d:23:e0:25:b0:03:eb:c4:c9:55:22:17:
                    57:91:c1:12:e4:b6:c3:d6:7d:2e:09:07:89:ad:fa:
                    91:07:20:3e:f8:0e:9f:c5:11:da:ea:3e:ca:5e:b6:
                    91:c1:1d:27:b1:cd:52:10:e4:2d:ed:76:a3:47:4a:
                    65:4c:66:e7:3a:c3:b5:44:f3:c8:a8:ad:3f:e9:06:
                    ef:86:af:22:4d:4a:35:b1:d9:01:fb:50:31:e0:13:
                    ed:8b:6a:af:98:93:b6:05:76:88:13:05:e0:38:6e:
                    e3:d6:0c:22:aa:88:e6:ec:54:73:4b:6e:c5:77:50:
                    2a:e8:cf:51:4f:42:7a:a0:00:b8:fa:fc:02:e3:62:
                    ca:71:9c:bb:e2:3f:19:f9:80:dc:3a:31:fd:80:a7:
                    54:f2:fc:2a:4f:c4:60:45:58:34:66:27:98:3a:b1:
                    59:54:e5:4d:9c:92:04:e5:70:38:07:e9:7f:9b:c9:
                    99:e1:5f:af:a8:3d:91:ff:09:57:98:75:2b:50:ee:
                    0b:b0:3b:b8:03:36:e7:f9:85:56:03:e8:86:8a:1b:
                    e0:5e:6f:e0:69:ff:52:9e:59:72:bc:11:b7:a1:3a:
                    99:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E7:AB:3F:95:FB:12:09:E1:2D:A4:90:1D:13:68:27:9C:5B:E6:6D
            X509v3 Authority Key Identifier:
                keyid:56:EF:77:07:F7:CB:B8:0D:82:AE:AC:60:55:40:FD:6A:3B:31:3D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:45:d6:00:08:d0:b1:73:21:b4:dd:5e:6a:e1:a9:a8:32:
         c0:e5:57:13:8e:58:6c:d4:82:9c:6d:ab:2d:9b:d3:96:24:15:
         34:3f:ab:b3:0a:8b:10:b6:a9:f7:ea:79:12:c2:8e:73:17:d4:
         2b:c7:41:3c:b9:4f:0d:52:31:4f:bd:d7:08:84:7b:b7:19:ec:
         26:6e:29:fd:1b:91:d0:1b:79:26:b3:0e:d6:4a:a1:0e:33:9e:
         9a:99:a9:ad:33:6f:cd:4e:6e:92:3b:52:0f:e1:c1:ac:37:26:
         05:1a:fc:89:0c:c3:32:89:49:eb:bf:54:a6:8f:58:81:d1:f6:
         57:c0:ea:22:22:c5:98:ef:84:be:e1:03:d3:8d:e1:2f:8b:b6:
         71:ba:41:84:fc:90:3e:ed:1b:da:ea:87:7c:54:2d:62:ba:a7:
         58:40:5a:89:4e:4c:31:8b:c1:68:43:84:e1:24:bb:ed:25:32:
         5c:85:f9:4f:18:7e:37:e9:7a:b7:58:73:20:00:71:db:28:e1:
         e8:31:49:2f:7f:50:8a:8f:6c:9b:f9:30:74:77:b3:7d:ce:45:
         14:2d:06:71:a4:e5:65:8e:de:f9:4f:8f:d0:9d:a8:ad:28:9e:
         d9:f1:cd:c6:80:3e:ee:a3:df:cb:d5:11:65:8a:a6:53:89:2e:
         54:ee:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 15:03:27 2026 by rpki-client