Error: rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.mft (raw, json)
Hash identifier:          Mi5ev2PJ41tH77Nq3oe2TD/4VczmxW4f3Beqrgq7Lno=
Subject key identifier:   92:AC:79:53:8C:7C:A1:0C:6A:BE:64:5E:42:CB:3B:12:CA:A6:24:76
Authority key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Certificate issuer:       /CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Certificate serial:       09F4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
Manifest number:          09F0
Signing time:             Mon 21 Sep 2026 01:40:33 +0000
Manifest this update:     Mon 21 Sep 2026 01:40:32 +0000
Manifest next update:     Wed 23 Sep 2026 01:40:32 +0000
Files and hashes:         1: GDcf6QPvCG9cH_b2hAumd2cmdnA.crl (hash: yYJ0rGTT29xXmBmLhCkuMO2gPXbIelUKsoyVShDFJ08=)
                          2: 5072AEFE89D111F18B20B5CDCE1D38B0.roa (hash: F8n2BcR3ryzUl8HMLoSq2Rf5j6pryb+IcWt69b/OZWk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                          rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548 (0x9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AR, serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
        Validity
            Not Before: Sep 21 01:40:32 2026 GMT
            Not After : Sep 23 01:40:32 2026 GMT
        Subject: CN=6ab08b11-e60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:bf:46:a5:a7:93:21:17:9d:0f:20:b3:e7:
                    ba:85:2b:41:98:44:d8:e7:71:79:a5:c3:e1:51:78:
                    41:cf:70:03:26:91:b9:be:d3:6e:ec:0c:95:e9:0b:
                    2a:87:5b:40:ef:98:ac:43:17:2f:5f:22:0d:b0:84:
                    eb:35:b1:e7:b9:a7:1d:80:98:80:00:81:4a:38:a5:
                    ea:c7:67:90:6b:ab:e5:8f:02:db:4e:82:fe:ed:70:
                    80:d6:16:98:f3:63:f1:86:90:96:ee:07:e9:b4:2c:
                    b1:f2:e3:77:17:a3:67:58:a6:2e:1a:e3:25:3d:32:
                    6f:1a:f3:74:0e:a3:0c:fa:55:74:80:b6:19:46:50:
                    20:fd:f7:62:a6:17:10:85:53:c7:21:77:66:17:de:
                    f6:c4:30:0e:26:6d:bd:ee:61:c2:20:4f:90:c5:99:
                    15:42:a9:fc:fc:d7:a7:de:33:c1:e8:54:dc:9f:fc:
                    0e:86:aa:74:ec:7f:52:c2:ae:3f:cf:93:52:eb:5a:
                    dd:c2:ee:de:0e:64:57:29:f0:43:e9:c5:8b:8a:d2:
                    9a:b2:5e:b3:4d:5b:1e:a4:09:76:d1:a3:90:92:a5:
                    2b:d8:aa:a7:c8:34:73:68:b9:c5:2b:b8:57:ad:0b:
                    e7:b1:fb:55:2f:82:93:e5:a6:95:d4:7c:41:d5:6f:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AC:79:53:8C:7C:A1:0C:6A:BE:64:5E:42:CB:3B:12:CA:A6:24:76
            X509v3 Authority Key Identifier:
                keyid:18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:33:0c:89:63:f0:e5:be:66:cb:ab:85:6b:90:60:25:93:af:
         07:47:a2:22:1e:db:7b:3b:c1:80:11:bc:67:84:11:c7:5a:b0:
         ae:89:6b:8a:12:be:f6:35:37:4e:75:c9:49:28:a3:79:93:48:
         42:ac:6e:d2:23:5a:db:1e:16:b0:6e:3c:56:0c:6e:a2:f7:31:
         d2:53:88:c3:44:aa:4e:21:f7:3c:2f:6e:ff:ec:45:56:b2:58:
         28:00:ca:36:4e:9b:ab:8e:b1:a8:61:0d:4f:21:88:a7:11:ae:
         70:16:e9:bc:8f:9a:af:3d:91:2f:3f:e7:a8:37:7c:c2:64:22:
         a2:13:ed:0c:5c:15:0a:cb:9c:c6:99:a5:e0:1b:06:30:83:6d:
         ab:0b:e6:48:96:0c:bf:42:ff:fa:d0:b7:d1:c6:16:28:8e:01:
         8c:ec:e8:b5:46:9b:87:bb:d4:2f:ab:96:cc:35:70:6b:0e:ca:
         3b:92:d4:33:9a:07:12:3e:d0:17:40:24:66:ed:f5:21:ab:7a:
         f2:d5:83:06:8e:18:63:51:df:73:41:c6:bb:b7:8a:d9:1c:0e:
         19:53:95:01:44:1a:1e:9d:44:ac:fe:3e:6a:47:f2:d8:d7:9c:
         42:4d:03:15:85:ee:58:c6:bc:95:80:63:f5:34:17:c7:81:49:
         c7:8f:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:12:40 2026 by rpki-client