Error: rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
File:                     gw8nolWHc_MWi4g8BLAjjqV1I7U.mft (raw, json)
Hash identifier:          NYA/kbRLeFS1caez388PRCEg6uxtnzvdb3rMhWNy47c=
Subject key identifier:   B4:F4:96:33:74:AE:7A:2B:42:70:85:35:52:A9:6B:44:77:49:1C:D1
Authority key identifier: 83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
Certificate issuer:       /CN=F36D9B5BAR/serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
Certificate serial:       0E4A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
Manifest number:          0E4F
Signing time:             Sat 10 Oct 2026 01:07:13 +0000
Manifest this update:     Sat 10 Oct 2026 01:07:12 +0000
Manifest next update:     Mon 12 Oct 2026 01:07:12 +0000
Files and hashes:         1: gw8nolWHc_MWi4g8BLAjjqV1I7U.crl (hash: bNTdERmNoDNUkQ6xQvIu4FD4UJUUugSHn+PdBlvcAaY=)
                          2: D24E31E2DE7C11EBB05A5E63F8AEA228.roa (hash: M2UxYeTNruKkNVITsjU6u+dRgieWPfDpSGMbsu/uKcE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
                          rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3658 (0xe4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9B5BAR, serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
        Validity
            Not Before: Oct 10 01:07:12 2026 GMT
            Not After : Oct 12 01:07:12 2026 GMT
        Subject: CN=6ac98fc1-02eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:2d:93:87:02:6e:9b:e7:4d:39:69:fc:22:
                    56:b8:42:3a:e1:b5:1f:79:9f:80:25:82:23:3d:b2:
                    15:c6:a8:96:53:2e:7f:f2:41:04:8a:3b:dc:70:7d:
                    36:e9:ea:3e:87:e1:c6:f7:8f:d0:1f:12:ad:49:97:
                    b3:33:6c:4d:da:1f:d2:48:6b:32:f7:dd:b5:de:34:
                    01:e7:96:a3:b0:6a:60:87:78:1a:87:7c:3c:1a:6f:
                    07:78:84:36:9f:3f:e8:b7:e7:57:de:3f:1f:a3:6a:
                    de:8a:93:f9:0c:78:58:63:b1:b9:80:88:44:50:aa:
                    49:f4:db:05:f9:b7:8e:43:ba:35:d4:0c:85:c1:6e:
                    c6:2b:7f:41:10:bb:b4:68:87:05:7a:80:c7:31:03:
                    3c:32:94:a2:49:ea:36:5a:c5:69:56:e7:29:42:f7:
                    59:9b:7e:94:b6:3d:d6:7b:16:21:61:8e:bf:b7:1c:
                    e9:53:3c:a1:6e:2d:18:6d:0e:07:74:82:13:e0:25:
                    5d:27:18:9e:ee:5a:96:c7:88:10:1d:77:91:79:66:
                    06:ee:89:78:c0:65:8e:61:a0:95:ab:ee:9e:82:d3:
                    0a:72:5c:d4:89:47:17:08:53:da:80:12:33:cb:3a:
                    a5:47:82:34:6a:47:77:1b:f3:2d:44:6b:3b:4c:38:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F4:96:33:74:AE:7A:2B:42:70:85:35:52:A9:6B:44:77:49:1C:D1
            X509v3 Authority Key Identifier:
                keyid:83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8e:8d:e2:50:5b:4d:13:64:99:dc:44:47:64:39:d6:2a:31:
         62:ae:4a:ca:34:01:7d:02:66:98:56:71:3f:e1:94:56:1c:11:
         ca:65:c1:97:1d:ca:61:3f:6c:8a:0e:df:03:81:02:f5:9a:27:
         b8:e5:87:1f:76:f8:1d:bd:c9:a5:65:ab:14:94:7a:47:d6:1f:
         62:49:ea:ce:f9:76:4f:f1:95:39:cc:db:32:1f:60:0e:a1:c9:
         48:0c:0a:4a:ed:3a:88:2b:85:5c:42:e0:67:3b:39:32:1a:49:
         f2:c1:f7:02:16:c1:ca:dd:f2:70:8e:af:99:a2:68:76:d3:9c:
         a6:77:47:62:53:08:8a:7c:01:75:02:bf:ab:c1:36:e8:32:31:
         0c:ab:d0:b7:42:13:db:f5:1b:2b:9a:d3:20:b0:bc:10:af:1d:
         95:1b:4b:d9:04:08:66:26:36:0a:cb:84:cb:12:73:c3:81:c5:
         8b:6c:cd:a7:b1:72:4b:fa:93:10:0f:6a:ec:95:50:da:ae:65:
         4e:1d:52:05:d3:04:43:05:88:ac:8b:dd:35:8e:14:60:84:9b:
         51:74:5b:e2:95:ae:de:28:7c:f8:7d:85:29:a5:dc:8e:61:37:
         3a:c2:66:78:d2:6c:c4:7d:c0:31:0a:cb:ec:db:50:53:8f:40:
         2a:21:17:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:35:05 2026 by rpki-client