Error: rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
File:                     3Y7gOV77NMQJjlduH6lWEvCuEIw.mft (raw, json)
Hash identifier:          V6E/Q650gpe/u83OSn6CwdUh4Rut0phgoonKein0WTM=
Subject key identifier:   0C:D3:A7:99:EA:F0:86:48:58:4A:1A:50:A2:69:56:D4:2B:04:A7:BA
Authority key identifier: DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C
Certificate issuer:       /CN=F36EE14CAF/serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
Certificate serial:       03BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
Manifest number:          03BB
Signing time:             Thu 24 Sep 2026 04:05:01 +0000
Manifest this update:     Thu 24 Sep 2026 04:05:00 +0000
Manifest next update:     Sat 26 Sep 2026 04:05:00 +0000
Files and hashes:         1: 3Y7gOV77NMQJjlduH6lWEvCuEIw.crl (hash: FMg8nVKAsYEMZetGdsI3ktSGXEX09DW61m8GSii4yus=)
                          2: 41ED69D60D1511EFA8396400017001B1.roa (hash: x3aVslqCzMfioshN80Dla6JteewrsmH2GjIbIFA+j2M=)
                          3: 1A07CB8EDBEA11EEA45EFA81775412E6.roa (hash: Pkjs2jgzXCv29HKkqLFfvU1IeY4hITiyODVD/2YyWlE=)
                          4: A07BB004DBEA11EE8E03CC82775412E6.roa (hash: 5FeX+dqvUeIECgzm38Ru/fnBhkIsH4lq/tNWx1MCZM8=)
                          5: 6B9CD7800D1511EFB6A61201017001B1.roa (hash: ssvUYk5x0OzQ7Q0Xp7UErygVy3MmZIG7nazU7zgnCUM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE14CAF, serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
        Validity
            Not Before: Sep 24 04:05:00 2026 GMT
            Not After : Sep 26 04:05:00 2026 GMT
        Subject: CN=6ab4a16d-d616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:1f:24:6c:bd:58:b4:7e:49:28:b7:f8:ef:
                    e0:fe:c2:52:df:f9:4a:4e:40:44:b0:fa:47:8e:7f:
                    8d:fa:11:76:90:83:a4:c3:9e:8c:05:04:4f:6a:6a:
                    e3:7a:19:50:62:f0:79:5e:e2:1e:01:4a:c0:e3:55:
                    3e:15:2c:4e:31:fe:0f:43:5d:3f:ca:ad:c5:6c:dd:
                    75:ee:3c:af:6f:c1:a0:7c:30:b3:d7:8f:0d:de:91:
                    2a:8d:0c:2b:b4:83:d1:9d:f0:9f:f6:f3:76:47:32:
                    da:ba:03:36:48:9f:c2:1d:37:6a:05:8f:ff:1e:08:
                    f7:16:fe:78:b4:e6:e2:19:77:0b:b3:f0:eb:f0:e5:
                    74:64:a8:64:55:aa:cf:ad:35:e1:3c:95:84:12:f1:
                    52:2e:08:a6:e3:21:be:2b:dd:df:f0:67:bd:e4:77:
                    08:38:5c:92:82:3d:6c:5b:26:9b:90:40:8c:80:a1:
                    88:c0:45:74:19:35:7b:0a:86:fd:98:23:d8:41:8c:
                    38:4b:14:7c:28:2f:f3:6c:9c:01:b2:12:6f:f0:bf:
                    e8:8a:7a:6c:3d:0b:82:91:fa:b6:f7:de:24:0a:e5:
                    06:6c:eb:8a:6b:70:2c:ce:a5:33:6a:24:5b:e0:d1:
                    9a:b1:82:b3:2b:a0:d4:90:77:4e:bf:f3:62:84:cf:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D3:A7:99:EA:F0:86:48:58:4A:1A:50:A2:69:56:D4:2B:04:A7:BA
            X509v3 Authority Key Identifier:
                keyid:DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c3:a7:3e:68:45:9a:42:f2:69:93:3f:96:fc:cb:13:9f:62:
         57:96:19:ca:c6:01:a0:d2:21:58:63:6b:86:81:fe:3b:52:ca:
         af:d8:3c:9c:14:6c:46:80:42:65:97:b4:f6:73:34:8e:e8:59:
         4e:26:b2:d3:21:55:68:0f:ae:a0:26:3b:e1:37:c2:f5:0e:8b:
         5e:16:b4:14:40:38:72:5a:fc:58:e0:f0:8e:d4:2c:76:aa:d7:
         ec:cd:ec:19:89:a5:ed:5d:df:1d:da:fc:a4:b5:da:dd:63:49:
         b0:1b:5c:fa:3f:2e:4c:ca:2b:1e:cd:44:b1:0b:14:79:ec:d4:
         83:ab:c5:c2:47:a2:78:b1:cc:76:d2:23:25:8a:c0:be:33:9e:
         7b:c4:3e:ef:0c:95:a1:06:14:b1:7e:63:20:8d:f5:9f:c4:75:
         b2:b8:15:b3:5b:9c:b3:a9:1e:05:14:68:87:68:1b:67:0a:fb:
         1c:2c:f9:0d:43:e3:cb:cd:2c:4b:47:74:1b:a4:bc:e3:0c:d9:
         73:23:e7:da:5f:73:c4:c0:9a:90:12:06:c0:5e:47:48:58:a8:
         b1:fa:31:7a:ed:0d:f9:62:24:2d:86:07:ed:66:dd:94:27:14:
         b0:f1:7f:65:b3:10:38:3b:41:c8:51:6d:65:3e:0f:88:0c:75:
         69:d5:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:00:23 2026 by rpki-client