Error: rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
File:                     8ZI823Vz-wlzku4GArwdsbV78OM.mft (raw, json)
Hash identifier:          r8JnC5JznumShK0Hi7rAVnvEFcTadl26DYJPWFb9aY0=
Subject key identifier:   7D:C0:FC:6E:10:4C:4D:FF:A1:30:1F:3D:B4:68:9E:C5:ED:69:7F:5A
Authority key identifier: F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3
Certificate issuer:       /CN=F36F731FRI/serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
Certificate serial:       0494
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
Manifest number:          0493
Signing time:             Mon 28 Sep 2026 03:41:04 +0000
Manifest this update:     Mon 28 Sep 2026 03:41:03 +0000
Manifest next update:     Wed 30 Sep 2026 03:41:03 +0000
Files and hashes:         1: 8ZI823Vz-wlzku4GArwdsbV78OM.crl (hash: 68ge9adzmbUddya2CbfKBdBQDjp/OLxNBK3tkQ6TEZw=)
                          2: FC67525472E011F0A5185D9CDAE4EC9C.roa (hash: fxMVUdc7VNQmTcNtjievYVXO75cad81vUMPfW3dLOxg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                          rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FRI, serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
        Validity
            Not Before: Sep 28 03:41:03 2026 GMT
            Not After : Sep 30 03:41:03 2026 GMT
        Subject: CN=6ab9e1d0-b1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:b4:8e:94:4d:af:e3:e4:27:5c:3d:11:81:
                    6f:6c:63:72:95:0a:f4:f6:58:71:8d:47:2e:83:49:
                    5f:f2:4f:fc:22:ce:25:af:e8:19:48:56:c3:36:a8:
                    b3:b0:6e:52:09:ef:73:65:7d:ad:62:48:e2:06:a8:
                    aa:5d:ce:49:11:53:b1:62:07:86:0f:0b:30:52:a6:
                    37:bd:11:53:c6:06:d1:00:9b:19:a7:66:6b:4a:79:
                    d8:5f:f6:c7:80:c0:4d:ca:81:52:12:a2:5f:b4:9f:
                    7a:16:d3:f1:94:be:c0:11:86:be:76:40:9d:5a:9c:
                    82:de:3b:f1:db:8d:31:e1:f2:af:98:d1:f3:c3:43:
                    1d:2e:22:d0:1d:80:86:b5:1b:68:ae:44:18:0d:40:
                    96:7c:25:a4:65:ce:6b:0c:e3:39:ba:bd:b8:48:42:
                    d7:ea:76:7e:36:1e:4e:9c:7b:ae:2f:4d:b7:7e:fa:
                    d2:8e:10:6d:2d:31:8a:08:3e:f7:fb:e0:0e:d7:bf:
                    b0:85:ea:c7:1c:00:c9:da:11:53:28:22:62:1f:4c:
                    bc:92:19:99:69:5c:39:75:91:f4:e9:c0:e3:3a:8b:
                    e9:05:db:f4:19:43:dd:df:8d:2e:5a:23:c7:12:51:
                    71:be:d4:a6:19:7f:f5:e0:44:ac:09:a6:53:4b:da:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C0:FC:6E:10:4C:4D:FF:A1:30:1F:3D:B4:68:9E:C5:ED:69:7F:5A
            X509v3 Authority Key Identifier:
                keyid:F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:4a:2e:c2:ea:b6:10:70:20:e6:c4:45:ed:59:b4:65:41:8d:
         c1:48:2a:ed:a9:2a:2d:c0:62:de:34:32:37:1d:e9:86:af:04:
         65:57:e5:04:21:65:40:79:bc:97:f7:85:33:91:7f:6a:9a:2f:
         39:e4:41:a4:18:52:28:22:bc:01:e4:0b:5c:cd:22:de:a7:87:
         56:bf:34:e1:b3:ea:4c:83:10:5e:92:31:02:31:2e:d4:da:43:
         ea:61:11:79:f1:68:40:77:b8:5a:2b:26:70:4c:3d:49:42:a3:
         89:b4:2d:4c:7f:d2:5a:1d:00:51:28:11:5a:2f:14:d3:4f:a7:
         34:12:67:2e:38:b5:3c:85:26:10:58:08:a7:f7:81:66:3a:58:
         d2:bf:d3:4d:5b:89:89:13:7b:60:c7:fc:45:84:5d:9e:27:b7:
         14:70:0e:f7:89:6c:62:1e:58:42:1c:92:6a:26:f5:b2:d6:17:
         2f:f8:88:c5:6b:84:07:48:5b:55:40:c9:19:3f:75:e5:38:32:
         84:50:59:de:83:09:48:d6:2d:51:f9:cf:88:d3:f1:cf:24:94:
         79:24:97:cc:2c:ca:71:ff:6a:fb:e7:95:3e:03:62:a2:0b:ea:
         1d:85:af:03:d3:fc:0c:0d:55:17:45:6c:71:48:42:9c:88:ec:
         de:db:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:13:47 2026 by rpki-client