Error: rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
File:                     rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft (raw, json)
Hash identifier:          3DBgHhF5p5hTEm0fAXU1xm9/HYOsZWJDQHPNae/ZLLI=
Subject key identifier:   F6:D3:6D:AB:A3:A4:27:35:E6:D6:E6:E0:9F:50:17:AF:ED:C7:53:5E
Authority key identifier: AC:34:F2:3C:B2:6B:19:1F:A6:C2:57:36:66:A4:16:3D:D9:86:83:89
Certificate issuer:       /CN=F36E4353AF/serialNumber=AC34F23CB26B191FA6C2573666A4163DD9868389
Certificate serial:       0759
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
Manifest number:          0755
Signing time:             Wed 23 Sep 2026 02:23:56 +0000
Manifest this update:     Wed 23 Sep 2026 02:23:55 +0000
Manifest next update:     Fri 25 Sep 2026 02:23:55 +0000
Files and hashes:         1: rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl (hash: Tk2rrDZy5+t/pTSjMamdAUf4c5QP81MNWMnE6CQYD0A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4353AF, serialNumber=AC34F23CB26B191FA6C2573666A4163DD9868389
        Validity
            Not Before: Sep 23 02:23:55 2026 GMT
            Not After : Sep 25 02:23:55 2026 GMT
        Subject: CN=6ab3383c-86c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:6b:fc:c9:05:bc:3b:b0:48:5e:19:22:b5:
                    68:af:a7:03:22:b4:4e:9d:f9:73:af:8a:79:b0:9b:
                    db:27:ef:66:55:0a:e5:b5:2c:18:5e:cf:3f:92:a1:
                    3a:ed:1d:9b:42:5f:17:25:0a:32:5b:ad:6c:12:b1:
                    b8:a7:d2:6c:90:46:60:8b:bc:ab:49:cf:1a:49:aa:
                    bf:e1:55:87:cf:ae:f2:64:24:c4:91:76:2f:2d:ba:
                    7f:1e:17:5b:d6:88:3c:bf:fc:8c:e8:81:fe:21:e5:
                    66:77:54:11:0b:7f:d9:3f:e8:1c:00:ac:c1:6b:84:
                    a9:f0:ec:d7:fa:99:2e:64:d0:3a:00:f6:fa:9f:be:
                    7b:58:3e:c5:54:90:f9:79:11:4d:e1:97:8f:d8:d5:
                    8d:39:6c:9a:92:32:5f:a7:79:cd:bb:d5:76:58:c4:
                    69:cc:a2:36:bf:a6:0d:51:e8:25:02:01:a8:65:ff:
                    c8:26:3b:2f:a6:26:9e:e7:f3:8f:18:bf:7b:ec:18:
                    c2:55:4c:86:6e:95:e9:02:ae:64:7e:45:47:dc:6d:
                    ba:07:4f:36:5b:19:b7:07:74:db:4a:e0:88:23:39:
                    ea:89:fa:bd:fb:4d:5f:52:22:6e:43:1e:7a:75:d4:
                    a7:2c:3e:09:65:8b:18:84:7c:af:84:c4:04:bb:e6:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D3:6D:AB:A3:A4:27:35:E6:D6:E6:E0:9F:50:17:AF:ED:C7:53:5E
            X509v3 Authority Key Identifier:
                keyid:AC:34:F2:3C:B2:6B:19:1F:A6:C2:57:36:66:A4:16:3D:D9:86:83:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f2:a5:77:a6:75:a5:0f:8d:03:f5:03:f7:59:a9:0e:9a:72:
         f9:80:ad:2d:fe:af:4b:83:7e:6e:5d:0c:b0:64:5c:c7:82:76:
         05:9c:0c:eb:70:7c:ce:73:85:4c:49:89:fd:bb:60:f9:dd:c0:
         0b:68:e1:01:97:a9:83:75:bb:d5:33:92:f3:68:8f:c1:d6:7b:
         ef:9e:42:c8:c1:0a:bc:90:08:0d:19:9c:12:02:bb:39:34:47:
         84:ae:c8:30:3f:bb:90:af:ad:ed:90:3c:ce:f5:7c:04:0e:34:
         31:73:a5:38:41:b5:4c:cd:b3:33:92:96:af:d5:09:6e:d6:c8:
         38:f2:7f:b6:00:0b:a3:41:10:e9:77:6d:02:10:0d:11:e6:bf:
         b4:8a:77:2c:51:61:02:c6:52:75:8a:0f:dc:4d:d5:1e:d5:c3:
         78:c3:2c:02:4d:a3:67:65:09:4f:3c:a9:b8:27:17:77:db:61:
         66:03:b4:a1:b9:19:d2:94:1d:d3:af:59:c2:12:f1:a6:db:f0:
         40:6c:e3:c6:9e:2d:1c:c6:15:30:8f:65:52:17:9a:1c:72:f4:
         20:8c:db:ac:22:99:c5:56:90:4e:c7:31:2e:4d:1b:7d:51:46:
         af:9e:de:1c:b2:00:3a:c5:de:8e:90:4a:02:72:58:cc:d0:45:
         8a:3f:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:41 2026 by rpki-client