Error: rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
File:                     rTNWCjX9wk4yt-GkeeIbDolqKw8.mft (raw, json)
Hash identifier:          k4pivKmjqnCAwFrNAvOVhOz9IAYZdU+wZl8bP9HG2+E=
Subject key identifier:   6F:74:BE:D0:A3:83:FF:8C:D0:80:D1:C7:C9:1A:9B:73:2A:4A:30:E0
Authority key identifier: AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
Certificate issuer:       /CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Certificate serial:       06FA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
Manifest number:          06EF
Signing time:             Sat 26 Sep 2026 02:35:05 +0000
Manifest this update:     Sat 26 Sep 2026 02:35:04 +0000
Manifest next update:     Mon 28 Sep 2026 02:35:04 +0000
Files and hashes:         1: rTNWCjX9wk4yt-GkeeIbDolqKw8.crl (hash: jzZl7ejZZ7g7VqVN3s+7lA60Vw8dixidFmCR6HhAkkQ=)
                          2: 5E81A05CF6C111F090F814B9DAE4EC9C.roa (hash: CXgFQ1uTo16cJcLpTaAS0b6W9qW/z2voqXHY06fFv7o=)
                          3: BF8F48A6F6BF11F095810AAFDAE4EC9C.roa (hash: VEsebwVhKZL3/XUSHJqAh+mFFUO9Y2ZvSaUxglQg0CQ=)
                          4: 7229C2C2F6B911F0BB42E288DAE4EC9C.roa (hash: NGWL7WTp2+vDw0UYE0HTCquOeakOVgnzWPmFK84KCSI=)
                          5: 3ECF1FD6C4BF11EE8B2737C5775412E6.roa (hash: 3Te+eK/mIojMdAzwZB8nPJY3HNmC7bWhD0CTw4iHG3c=)
                          6: B0C41976F6BC11F0AC80729EDAE4EC9C.roa (hash: 2ZnGHKJr9GknAn0GSNTFw5APOwhZJEhr/CLUu2Z00eE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1786 (0x6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F9BF2AR, serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
        Validity
            Not Before: Sep 26 02:35:04 2026 GMT
            Not After : Sep 28 02:35:04 2026 GMT
        Subject: CN=6ab72f59-9e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:43:0b:94:32:ca:00:2b:3a:c3:14:06:d0:
                    49:d7:7e:61:a1:5e:c6:6e:e6:c6:5c:01:d5:db:7f:
                    38:d3:24:15:47:ed:1b:c7:53:71:4e:aa:40:ca:2b:
                    6d:04:72:ce:22:51:e6:73:f4:b8:e3:db:4b:31:b3:
                    11:96:65:c6:47:72:f4:1b:36:d4:3b:4a:b4:f2:44:
                    59:0b:78:45:d2:d9:32:31:61:51:88:a0:6d:b0:7e:
                    f1:53:96:66:b6:5e:3d:ad:4d:22:42:f7:85:dd:1c:
                    9e:fc:dc:87:d2:81:c7:7b:74:a3:3c:55:2c:af:98:
                    90:37:ec:1b:84:8f:e4:b8:35:3d:d1:1b:44:8f:ed:
                    f4:76:25:9d:58:2a:52:49:80:85:88:45:18:ae:da:
                    05:8b:30:f0:22:50:fd:1b:46:fa:30:1d:6e:25:53:
                    69:45:90:8f:9b:08:94:e7:9f:d8:f9:45:17:3c:22:
                    4a:cb:7d:89:86:fd:55:bd:52:57:2e:9f:9f:7a:67:
                    fa:10:4b:cf:c6:aa:bc:29:57:81:2b:ae:58:a9:18:
                    86:b1:fc:fa:56:9e:80:76:d4:2a:ae:8b:21:7c:d5:
                    73:e5:c4:dc:f0:a6:0a:2e:f8:0f:f8:04:5f:18:0c:
                    c1:c4:04:92:a8:ad:22:8b:2c:fd:c8:8c:bd:2d:94:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:74:BE:D0:A3:83:FF:8C:D0:80:D1:C7:C9:1A:9B:73:2A:4A:30:E0
            X509v3 Authority Key Identifier:
                keyid:AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:e1:8c:cd:ce:67:67:7b:ac:f1:41:f3:dc:7c:3c:a8:93:b9:
         a6:e8:81:09:4e:9c:d4:9e:67:22:c8:dc:51:e0:b3:d7:2d:d7:
         c4:5b:3b:79:3d:36:71:bb:b6:1d:06:cc:c3:4d:76:0f:9a:23:
         ec:13:ef:9f:ea:d0:d5:cc:81:01:45:3c:a9:00:4e:cc:1b:2d:
         4d:32:6c:81:6c:d2:cb:74:ff:46:08:4b:aa:c3:f2:ff:a0:a9:
         84:fd:fe:72:12:d7:2d:4f:e4:11:35:eb:71:87:92:3c:5f:ca:
         d8:c9:26:bf:3f:cb:aa:a1:fc:4f:41:9f:ff:d2:09:ec:ee:28:
         d6:b7:d1:37:45:5e:e8:6d:06:12:0f:ad:87:f6:0d:06:0d:01:
         a3:e1:6f:ea:0c:3c:ee:ea:71:52:84:93:54:29:fb:50:72:35:
         aa:29:de:22:97:63:09:b4:d1:ed:8f:43:1e:9d:37:54:7a:55:
         00:bd:25:2d:af:07:8f:8c:75:0d:d9:02:b2:d7:a1:8f:81:6e:
         9a:bb:c2:73:37:9d:66:ea:c2:0d:24:53:22:32:2c:e4:09:2d:
         fc:66:df:50:47:a4:c7:b1:a8:f4:a1:2f:64:f7:5c:21:9c:ae:
         bf:7d:cc:a4:a3:3e:29:e8:7e:f7:c2:f6:64:e0:58:0b:41:8a:
         a7:90:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:33:42 2026 by rpki-client