Error: rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
File:                     6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft (raw, json)
Hash identifier:          TDB/frL8KA5Vsfpk64kbcdTTb3L8Ie0ygrSazqrr+ZE=
Subject key identifier:   3A:26:DB:17:B5:3A:63:8B:FD:CE:49:ED:88:95:64:BD:BC:2F:D0:8A
Authority key identifier: E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C
Certificate issuer:       /CN=F36150C1AR/serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
Certificate serial:       0EA3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
Manifest number:          0EA3
Signing time:             Sat 17 Oct 2026 01:05:56 +0000
Manifest this update:     Sat 17 Oct 2026 01:05:55 +0000
Manifest next update:     Mon 19 Oct 2026 01:05:55 +0000
Files and hashes:         1: 6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl (hash: OnDPHLSaMxHqA+eLuyj0X+OyWCip3S/5LArzGDcofrw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                          rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3747 (0xea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36150C1AR, serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
        Validity
            Not Before: Oct 17 01:05:55 2026 GMT
            Not After : Oct 19 01:05:55 2026 GMT
        Subject: CN=6ad2c9f3-83cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:6b:73:06:3a:75:68:45:69:78:15:35:40:
                    2f:52:cb:91:ca:dc:a0:e2:73:bc:e7:7d:af:c7:2d:
                    bc:95:47:b1:ab:55:19:9e:5b:4d:9b:21:d4:3a:08:
                    20:c0:b9:45:d7:d7:fc:dc:9d:6d:08:7b:d1:88:b6:
                    06:5a:8a:38:4e:b8:95:7a:c8:c3:fd:26:da:d8:81:
                    e9:71:9b:25:3d:67:46:3a:89:b4:72:6a:04:b0:d0:
                    eb:41:8a:a1:6b:c1:ad:8f:fa:92:52:a7:5f:ff:94:
                    dd:a0:47:c9:41:98:5f:1f:64:26:43:a5:82:82:5e:
                    58:1f:98:a5:f5:d0:ff:50:31:d5:3d:27:5f:20:d8:
                    eb:8e:f7:65:07:a0:30:74:dc:77:ed:60:50:53:e7:
                    82:20:83:20:0b:fe:f8:ef:19:9c:5b:d0:a9:27:20:
                    ac:1a:27:60:b2:c2:34:86:a4:b3:60:26:90:42:53:
                    26:5a:e3:54:80:96:f0:b2:49:4d:ef:73:a7:8f:0c:
                    19:25:26:45:48:7e:9f:fd:5c:6c:ae:39:0b:7f:50:
                    9f:55:38:75:57:32:e5:95:0b:c5:7d:35:3a:f1:d3:
                    d2:8c:f9:e1:a3:0d:b7:8d:35:8b:21:4f:2b:ee:28:
                    0b:eb:e9:24:b3:24:53:48:cf:2c:d1:d7:7b:39:22:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:DB:17:B5:3A:63:8B:FD:CE:49:ED:88:95:64:BD:BC:2F:D0:8A
            X509v3 Authority Key Identifier:
                keyid:E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1c:7b:27:77:2f:e2:a7:85:4e:04:5b:ae:71:09:bc:0d:f6:
         ff:4e:e8:52:79:f8:01:3b:d9:36:4d:9a:4b:cc:07:aa:e7:85:
         0e:85:53:3e:5f:93:f3:a2:e5:af:1f:55:36:2e:b9:3c:ef:b2:
         80:fa:8f:1a:9b:bd:1e:80:4f:4c:3d:d7:c7:ee:a3:9f:db:61:
         c3:a9:7a:81:fe:fb:0b:73:dd:11:ff:c4:bf:e2:73:96:1f:a0:
         8a:af:98:04:85:5b:b1:6a:e9:66:43:c6:81:e8:75:89:d2:a9:
         7b:08:8c:be:5d:32:65:ee:82:03:cc:43:8a:4a:cb:0b:5b:a4:
         6c:66:05:62:61:46:f4:52:6a:53:e5:a5:01:5d:a9:2d:df:94:
         90:d9:15:2b:80:9d:3d:19:85:5b:a5:ae:65:a1:bd:6c:97:a2:
         fd:dc:9f:83:6c:29:9d:50:8c:80:fd:66:9b:56:87:2f:78:8c:
         07:f4:a8:38:17:ad:6a:d9:c6:bb:4a:ac:4c:3b:a7:8a:61:e3:
         14:3c:32:9f:12:20:df:f8:c5:ea:b5:09:0b:12:f4:78:26:33:
         47:a7:c8:76:a6:8f:33:e8:d1:a8:78:e0:65:a4:38:ea:dd:ff:
         0e:1b:ba:c7:0a:50:1b:ee:cb:d9:53:dc:e5:0b:69:e6:d6:b3:
         9f:0c:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:13:26 2026 by rpki-client