Error: rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
File:                     _zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft (raw, json)
Hash identifier:          4LKaKOPZtVDYtZr/Cur8ssvqiE59EnneSsQSTYc7VxU=
Subject key identifier:   0D:C9:49:F9:08:D4:80:D4:92:23:51:43:94:B6:B4:84:EF:DB:21:23
Authority key identifier: FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
Certificate issuer:       /CN=F363C3E1AR/serialNumber=FF3363B1229D1BD9A944947D4DBBDD9E7E8249AC
Certificate serial:       0AB9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
Manifest number:          0AB6
Signing time:             Tue 22 Sep 2026 01:24:27 +0000
Manifest this update:     Tue 22 Sep 2026 01:24:26 +0000
Manifest next update:     Thu 24 Sep 2026 01:24:26 +0000
Files and hashes:         1: _zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl (hash: aLhTOzNiJtTxTKfPWNqZy2LrnHd98jCfKvKkpKnYUjc=)
                          2: E3CC02928BFA11F19DE0CB0ECF1D38B0.roa (hash: /5dwb27y0IdwkPjkO4KiyDkBMyA4REL5xPm0ATHtFLQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
                          rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2745 (0xab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C3E1AR, serialNumber=FF3363B1229D1BD9A944947D4DBBDD9E7E8249AC
        Validity
            Not Before: Sep 22 01:24:26 2026 GMT
            Not After : Sep 24 01:24:26 2026 GMT
        Subject: CN=6ab1d8cb-3373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:36:96:c7:14:63:e2:47:fb:35:c7:8c:cf:
                    6e:c7:3e:3e:db:1d:85:04:96:02:9f:7d:6d:ff:cc:
                    fa:16:93:fa:83:6d:19:2d:a0:f3:2f:97:94:97:e1:
                    40:b1:2d:b3:6f:20:33:64:e9:23:41:ec:0a:2c:5f:
                    df:3b:86:15:44:4a:f1:88:e3:a0:9f:76:ca:8c:c8:
                    b2:13:c2:b0:a9:d7:46:8a:45:5a:19:bc:99:94:90:
                    bb:38:94:86:fa:be:42:29:32:50:8b:bb:d6:5e:7f:
                    52:ee:f6:99:b0:2c:56:fb:b9:47:27:bb:77:15:9b:
                    5a:dd:ae:76:04:49:61:c6:33:16:ab:d2:37:dd:26:
                    92:55:69:8b:f1:b2:51:b6:54:60:f6:4e:77:89:c0:
                    37:6b:75:47:3b:0f:11:74:50:3f:b2:28:9f:38:89:
                    1a:a0:54:b3:ee:73:4d:88:22:aa:5b:13:7a:5b:b8:
                    91:d7:4d:cc:d7:86:05:ab:69:9e:22:12:28:7b:66:
                    a1:1e:a4:9c:aa:d0:d5:19:67:2d:c5:2b:64:53:1f:
                    78:ef:87:d9:ea:be:21:ca:dd:43:0d:b5:fd:12:f0:
                    b8:d2:89:e4:9b:36:2f:b8:1a:6a:c6:b8:30:ff:ea:
                    17:68:a6:f0:af:3d:86:72:51:37:72:8a:43:37:88:
                    3d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C9:49:F9:08:D4:80:D4:92:23:51:43:94:B6:B4:84:EF:DB:21:23
            X509v3 Authority Key Identifier:
                keyid:FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:52:44:7e:8a:82:d1:2d:50:1f:1a:46:d9:fa:2e:a2:af:
         bb:78:8c:08:05:47:3f:be:10:11:2f:d2:d8:6a:f4:89:99:7b:
         1b:ce:1a:57:ba:23:eb:15:45:00:3c:51:14:ab:08:a3:ff:6d:
         9d:f8:4e:1b:07:26:0c:42:89:86:b8:0c:c7:30:a0:2a:df:15:
         ce:e9:4c:f1:0c:13:33:b9:15:eb:c9:8d:30:ae:f4:3c:5d:59:
         03:3f:69:60:06:25:49:50:f6:42:9f:d2:2f:68:60:8a:70:bf:
         13:dc:61:e8:17:59:64:99:96:5d:a8:ab:88:4b:04:18:e0:c9:
         88:ab:58:f9:00:a0:da:36:87:03:b7:d9:9f:18:1d:15:25:03:
         ca:95:8d:2b:83:d6:8b:13:87:6a:3e:6b:48:43:64:6d:3f:f5:
         24:4e:b7:7f:01:8e:cd:db:16:69:42:c6:9f:a2:78:52:75:4f:
         79:01:60:fc:fc:04:88:7c:3a:4e:fe:15:5c:9c:e8:75:1c:b1:
         83:ba:0b:9e:1d:c5:4a:f5:aa:3d:0c:e5:f5:d6:ee:3b:f7:95:
         dd:7a:78:a5:55:d0:90:30:86:d6:f7:3c:55:d9:ba:3b:ef:e2:
         51:fb:5c:de:b5:fc:bd:29:71:45:6e:e9:9d:bb:5d:03:15:87:
         bc:92:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:41:32 2026 by rpki-client