Error: rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
File:                     6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft (raw, json)
Hash identifier:          fAV77YbKyl/JW1+5lhQ9aLbo6JBkD5veyM5UHz6wBCE=
Subject key identifier:   FF:AF:0C:5A:26:21:6E:4E:28:86:1F:2A:D7:14:0A:B6:B0:AF:93:6C
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Certificate issuer:       /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial:       0778
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
Manifest number:          0767
Signing time:             Thu 24 Sep 2026 02:24:14 +0000
Manifest this update:     Thu 24 Sep 2026 02:24:13 +0000
Manifest next update:     Sat 26 Sep 2026 02:24:13 +0000
Files and hashes:         1: 6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl (hash: kUgFUSpGmteGyYmVE0LntRo/jqWaZdorxDb8lsel2no=)
                          2: 12C30C386ED911F1AA9BFFB5CE1D38B0.roa (hash: ny6Qirp/TPtOg7f0rDMPDEbvSvgIuv756XryNV1Rv58=)
                          3: EDC3F166AE8711F09155758EDAE4EC9C.roa (hash: qrpEwoN4bqccVV8hRmdHHa1nf7DJFBvB/v1V8q4KvmY=)
                          4: A104B9E26ED911F1996895B6CE1D38B0.roa (hash: 1zsdJY465Xz/ObwV+v28QHRsAQ+DwcvWszitsFW7O/Y=)
                          5: 4459B99A6ED911F1803F17B6CE1D38B0.roa (hash: Ch2RN+Gqd1vqPPkfxLYdfmIBMrPYTiTs+812RDESRG0=)
                          6: 494CFA8CAE8811F08C0FDC8EDAE4EC9C.roa (hash: yhad+BFB3rkLcu1ckI0YSXhxOby95eauRp/yhzhsWCY=)
                          7: 20CA242CAE8811F08579A28EDAE4EC9C.roa (hash: fsxmXnslbAUwwYawnmsD45MhR7pqaGgeQtYlfmeLKUs=)
                          8: C6D08762AE7911F0865B5AB3DAE4EC9C.roa (hash: bUSiJqRSq5rymPhrVLnmkhbhEBlGLZN5B0EkvrcOa1o=)
                          9: D8B7CB286ED811F19A665DB2CE1D38B0.roa (hash: mMNXtOYCnuBwvr7qzFaW+gy6yRDfvySr9zLAUot0/c4=)
                          10: 86FAFC606ED811F19718EFB1CE1D38B0.roa (hash: 8VMTgnIFRkQabFuzrAgfswAcv5AWFmRifF/txsjL0aA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1912 (0x778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F151EAF, serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
        Validity
            Not Before: Sep 24 02:24:13 2026 GMT
            Not After : Sep 26 02:24:13 2026 GMT
        Subject: CN=6ab489ce-e28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:83:4e:94:32:d0:7e:75:06:c9:4d:54:80:
                    e3:c6:94:8b:98:93:f1:9f:9d:14:33:65:01:65:7a:
                    99:fa:e2:d4:eb:0d:8b:93:aa:73:20:17:08:ff:7b:
                    1a:4d:cb:f1:d4:ec:a7:c5:a3:32:86:50:06:53:d4:
                    57:01:21:16:77:89:7e:5e:2a:60:19:eb:d0:c5:16:
                    88:b2:62:fb:17:fd:ec:a1:2a:c8:34:54:4f:c9:d2:
                    05:e5:1f:41:bd:85:24:fa:5c:89:7e:22:2a:02:74:
                    0e:fa:d3:9a:55:50:f2:38:21:4f:82:7b:ef:76:31:
                    97:74:57:80:35:28:13:3f:f9:17:f8:83:d3:0c:f8:
                    24:3f:0b:cf:a9:2d:fa:00:e0:b9:26:9d:20:df:d8:
                    c9:b5:40:17:05:dc:ef:02:96:e3:7d:22:98:c0:09:
                    cf:6a:a5:73:0e:6c:eb:2c:cf:fc:0f:b5:2c:19:ab:
                    8f:53:48:73:35:66:4b:26:bd:aa:71:92:67:57:60:
                    27:d5:1a:71:e4:2f:02:35:65:1f:13:22:24:6b:98:
                    52:01:7a:83:04:7e:b2:78:eb:25:6a:4a:8c:7d:ab:
                    82:8e:b4:24:e8:51:04:09:e5:b5:f2:0f:18:b4:9c:
                    13:44:67:da:58:a4:03:ed:fe:a3:32:83:00:8d:88:
                    6d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:0C:5A:26:21:6E:4E:28:86:1F:2A:D7:14:0A:B6:B0:AF:93:6C
            X509v3 Authority Key Identifier:
                keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d8:68:39:3d:ab:e5:08:fe:75:cb:cf:6b:4d:9f:6b:2c:0e:
         bc:04:4f:09:94:07:8a:4b:dc:c4:18:7f:7d:ed:38:f0:fc:63:
         01:8c:95:0b:61:84:13:ec:d1:cb:e7:20:98:46:bc:96:48:b0:
         8b:bc:9c:6c:31:3a:f9:62:b7:cb:2a:e6:8e:65:d8:69:2d:52:
         79:5d:d9:45:cc:08:12:98:28:97:21:bb:41:b4:06:b9:7d:9a:
         ae:95:fa:2f:ee:96:7b:e4:e0:61:1b:e1:bd:82:bb:29:27:96:
         96:91:d8:52:e1:c8:12:67:18:ae:2a:73:f1:a9:87:44:ae:86:
         8f:ed:ea:d9:17:8f:f1:41:60:6a:44:12:b8:ff:da:98:23:3d:
         da:8b:4d:16:d8:6d:9e:1e:3f:53:64:3a:e7:01:80:01:e3:f6:
         66:12:f5:5f:a9:d0:93:70:de:13:17:b3:f3:95:1f:27:01:61:
         53:26:1c:86:1b:f3:1d:5a:dc:c9:43:89:2b:d1:94:91:e1:eb:
         e0:ff:bc:94:c5:23:4d:bb:a6:3c:1b:ab:16:91:c2:72:93:27:
         07:00:cb:b0:83:d1:ae:21:40:b6:98:af:e5:5b:a5:33:2a:ab:
         e9:41:a0:fb:cf:a3:70:ad:9b:a9:62:ad:8e:bc:9b:52:45:f1:
         9e:b3:b6:a1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjE1MUVBRjExMC8GA1UEBRMoRUE5NTkxMzU1MTgyN0JBNkQ2NTNCQTg2QUU5M0E0
RUUxRjU4Q0Q1RDAeFw0yNjA5MjQwMjI0MTNaFw0yNjA5MjYwMjI0MTNaMBgxFjAU
BgNVBAMTDTZhYjQ4OWNlLWUyOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDU8oNOlDLQfnUGyU1UgOPGlIuYk/GfnRQzZQFlepn64tTrDYuTqnMgFwj/
expNy/HU7KfFozKGUAZT1FcBIRZ3iX5eKmAZ69DFFoiyYvsX/eyhKsg0VE/J0gXl
H0G9hST6XIl+IioCdA7605pVUPI4IU+Ce+92MZd0V4A1KBM/+Rf4g9MM+CQ/C8+p
LfoA4LkmnSDf2Mm1QBcF3O8CluN9IpjACc9qpXMObOssz/wPtSwZq49TSHM1Zksm
vapxkmdXYCfVGnHkLwI1ZR8TIiRrmFIBeoMEfrJ46yVqSox9q4KOtCToUQQJ5bXy
Dxi0nBNEZ9pYpAPt/qMygwCNiG2fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/68M
WiYhbk4ohh8q1xQKtrCvk2wwHwYDVR0jBBgwFoAU6pWRNVGCe6bWU7qGrpOk7h9Y
zV0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYxNTFFL0Y5OENEQjdDMUExOTExRUM5MzkzNDUyREQ4QTAxNENFLzZwV1JO
VkdDZTZiV1U3cUdycE9rN2g5WXpWMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzZwV1JOVkdDZTZiV1U3cUdycE9rN2g5WXpWMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjE1MUUvRjk4Q0RCN0MxQTE5MTFFQzkzOTM0NTJERDhB
MDE0Q0UvNnBXUk5WR0NlNmJXVTdxR3JwT2s3aDlZelYwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAc2Gg5PavlCP51y89rTZ9rLA68BE8J
lAeKS9zEGH997Tjw/GMBjJULYYQT7NHL5yCYRryWSLCLvJxsMTr5YrfLKuaOZdhp
LVJ5XdlFzAgSmCiXIbtBtAa5fZqulfov7pZ75OBhG+G9grspJ5aWkdhS4cgSZxiu
KnPxqYdEroaP7erZF4/xQWBqRBK4/9qYIz3ai00W2G2eHj9TZDrnAYAB4/ZmEvVf
qdCTcN4TF7PzlR8nAWFTJhyGG/MdWtzJQ4kr0ZSR4evg/7yUxSNNu6Y8G6sWkcJy
kycHAMuwg9GuIUC2mK/lW6UzKqvpQaD7z6NwrZupYq2OvJtSRfGes7ah
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:31:08 2026 by rpki-client