Error: rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
File:                     S7AyYfFNBLALJrKXJeQg7lOe-sE.mft (raw, json)
Hash identifier:          Q7/pgCjsPo14k+nMQIw1/DFF+X6yOcCl3mAW2uIbBAM=
Subject key identifier:   09:43:78:D4:FB:16:09:6F:E2:D7:B5:90:07:25:50:34:3E:6A:AF:5D
Authority key identifier: 4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
Certificate issuer:       /CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Certificate serial:       1020
Authority info access:    rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
Manifest number:          101A
Signing time:             Fri 25 Sep 2026 00:55:17 +0000
Manifest this update:     Fri 25 Sep 2026 00:55:16 +0000
Manifest next update:     Sun 27 Sep 2026 00:55:16 +0000
Files and hashes:         1: S7AyYfFNBLALJrKXJeQg7lOe-sE.crl (hash: Y2MMUheVosd11GUaIrJkznr41ZhyZltLvs9vbyYwlSA=)
                          2: 3467C85EB57811EFBB258E50762E951A.roa (hash: 7B5t76JYb0weJx5foAylkCd79y67MwjACrJXbPrLiGo=)
                          3: 3F711DA2B57511EF9BE2B9BD762E951A.roa (hash: HY6X5qdCvMeHk+soAwWe9vEEWgfGLOX8rrjzYU1Pl8w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
                          rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4128 (0x1020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F62C3AR, serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
        Validity
            Not Before: Sep 25 00:55:16 2026 GMT
            Not After : Sep 27 00:55:16 2026 GMT
        Subject: CN=6ab5c675-05de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:1e:eb:53:8f:3a:0b:85:cd:e7:ac:75:22:
                    38:f6:d2:96:a7:c0:74:81:58:08:cd:b3:94:10:c9:
                    7e:5e:f9:f1:0c:ff:1f:18:88:79:fb:71:7f:5e:ad:
                    43:d1:dc:94:15:b2:21:82:45:14:84:a1:ee:e4:aa:
                    26:c3:d5:5d:08:bc:04:4b:7f:fe:df:2f:d6:df:98:
                    d2:70:96:50:c7:35:dc:9e:07:ac:ad:d1:35:c5:96:
                    c4:e4:78:c1:71:8e:a1:51:f2:d1:68:ae:13:89:17:
                    1e:5f:79:c9:73:31:e5:77:18:a5:c1:89:9e:48:9b:
                    45:73:c0:f4:d8:e9:8a:8b:af:3f:bb:b3:69:cf:1a:
                    b3:cd:27:c5:1e:f7:e7:95:8e:ab:d7:10:33:8b:59:
                    c9:f0:ad:fd:76:c7:c5:8b:9c:c8:6b:2c:92:00:22:
                    fa:94:36:73:8c:e5:29:66:1c:f5:19:0e:af:12:7c:
                    2d:31:a1:5b:80:10:1d:95:37:d8:a4:6d:c2:5d:c6:
                    20:42:f7:ac:d5:ef:1a:34:85:72:e4:b9:25:62:1d:
                    78:d6:ad:03:39:fa:8f:ef:34:c2:f5:86:e9:61:f6:
                    98:5b:32:5b:5c:2e:3f:f3:20:04:43:61:62:2c:08:
                    fd:d2:31:09:a5:62:f8:dc:af:0f:2f:b1:46:88:1b:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:43:78:D4:FB:16:09:6F:E2:D7:B5:90:07:25:50:34:3E:6A:AF:5D
            X509v3 Authority Key Identifier:
                keyid:4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:99:e8:10:c6:3c:35:0d:c6:14:7e:ad:d2:12:12:9b:f3:
         02:bd:b9:82:9b:38:01:b5:50:8e:d2:7a:32:73:22:7c:33:5c:
         50:3b:62:cb:80:05:6f:08:d2:59:72:4b:68:45:ae:06:99:2e:
         5f:8c:15:ed:f6:ca:4d:29:e4:9d:c1:b6:2d:19:32:19:56:82:
         54:a7:47:47:e3:8a:a0:8c:a1:73:49:02:01:e4:dd:bf:85:6e:
         39:83:1c:57:79:01:10:3c:76:67:37:ea:9b:78:1f:f8:11:4b:
         b3:a7:5e:d6:70:bf:ff:a6:53:54:f7:d7:e7:b3:3d:11:3f:d5:
         cb:91:73:57:27:52:91:e6:54:a0:22:53:e7:fa:a8:39:83:fc:
         ab:cd:13:4f:a6:5e:9d:d5:5b:8f:11:1a:58:cc:4a:e4:7b:39:
         7c:ce:39:88:89:64:1b:06:87:ce:e0:12:f7:b0:0c:d8:9c:85:
         fe:f9:4f:36:6a:2d:b8:16:70:53:10:0f:94:c0:ea:9e:1c:5a:
         ed:c9:e1:e1:33:75:f6:3d:62:00:a1:95:6d:ba:ae:40:39:e9:
         43:38:d9:06:16:6d:b6:d7:6f:4f:40:c6:69:8b:a0:03:02:37:
         d5:88:37:a8:a3:b3:7b:73:a8:75:ba:58:f4:66:55:40:dd:68:
         68:ec:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:35:35 2026 by rpki-client