Error: rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
File:                     g2HVptDz1JxnYMDqaGxnxBSd1t8.mft (raw, json)
Hash identifier:          tctZs0sCrcH4/JheHD7mt1IRT9XdludgBiBjZMzoHHw=
Subject key identifier:   E1:A5:D7:19:E5:94:BA:03:90:E6:10:1A:E2:E7:4B:EE:7D:21:D6:17
Authority key identifier: 83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
Certificate issuer:       /CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
Certificate serial:       0492
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
Manifest number:          048D
Signing time:             Mon 28 Sep 2026 03:43:05 +0000
Manifest this update:     Mon 28 Sep 2026 03:43:04 +0000
Manifest next update:     Wed 30 Sep 2026 03:43:04 +0000
Files and hashes:         1: g2HVptDz1JxnYMDqaGxnxBSd1t8.crl (hash: hLWrj4hBcwz/l7Ex0zW+1XPzcE6w22u96SA+95kOO1Q=)
                          2: 1C32F8941A4511F0A5CA51D56DB8BCC6.roa (hash: KQ8ojeNuY+CC6+HeJZiLg2NTwLb/0OvPStW386IgOFQ=)
                          3: 5CA7913C41CF11EEABA50B154AD9E6FC.roa (hash: mPw4RDOXZXo/bpdC9fVPFx1LHe7Ee57R4RWVqSxmsVQ=)
                          4: F6014E24370D11F0A9AE9EC6DAE4EC9C.roa (hash: /c4sEFV6yDMdPKbHf6tAF/ORJg3oZvCxiMncTFmAdSI=)
                          5: 1E76759CB6E311EFB3CF7A44762E951A.roa (hash: W/c0Kk3I+J2yYg1lYlt6Jh0twnCYr8+m8FqL7jZfB8o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36580B0AF, serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
        Validity
            Not Before: Sep 28 03:43:04 2026 GMT
            Not After : Sep 30 03:43:04 2026 GMT
        Subject: CN=6ab9e249-400b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:e1:92:1e:dc:8e:07:2d:95:82:05:b6:31:
                    d8:19:b5:90:c4:bc:f9:4f:1b:8d:07:f4:c9:3f:da:
                    d3:66:e3:5d:ac:20:00:78:25:ff:a1:0d:6e:cf:70:
                    79:45:98:b8:00:ee:e4:a0:6f:5d:ff:d6:77:dd:97:
                    3f:0a:b0:71:da:42:35:07:40:c2:eb:7b:61:27:a4:
                    0c:33:6f:6a:ec:8a:18:9d:a6:9f:6b:ef:bd:52:8e:
                    1e:af:05:a2:01:dc:6d:43:ab:d3:17:cc:74:28:28:
                    a9:a4:8a:32:ad:ff:6a:44:ff:4e:93:35:b9:e2:bd:
                    94:f0:bd:86:91:60:c1:73:8b:4e:99:6c:d1:15:aa:
                    8b:86:1f:bb:0a:f2:8a:39:b8:2f:e4:a8:7c:c2:36:
                    87:80:b6:e3:1c:c9:a4:9e:72:6b:98:90:31:c4:48:
                    12:3c:cc:93:87:70:eb:8e:39:71:05:98:25:a3:1b:
                    f1:f7:35:76:a1:44:6e:27:4d:72:10:50:fb:e0:4f:
                    45:f7:ff:d4:c9:0b:7a:7e:b0:ff:62:7d:2e:a3:f3:
                    b8:1b:af:0d:35:e5:80:9d:c7:6a:78:6d:e2:c4:fa:
                    fb:83:e9:1a:51:fd:78:36:b7:a1:6a:2b:c9:bd:01:
                    e2:db:4e:6d:26:b6:6a:23:62:61:b7:85:32:21:13:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A5:D7:19:E5:94:BA:03:90:E6:10:1A:E2:E7:4B:EE:7D:21:D6:17
            X509v3 Authority Key Identifier:
                keyid:83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b8:0f:1c:fa:14:8f:50:f7:f8:f6:36:64:1e:0f:3a:46:47:
         8a:4b:51:6b:68:50:bf:74:b1:3e:a1:4a:c5:ee:25:f2:fb:bf:
         94:9f:09:1b:29:03:9a:87:d6:22:a7:a2:0b:04:ab:ce:76:fb:
         e2:96:81:0a:f1:03:03:f6:e9:c6:4f:7e:12:58:3b:1b:71:b3:
         6e:6b:c2:e9:d5:09:5a:49:91:22:61:b0:95:3a:5f:15:46:31:
         be:1f:6d:35:14:c8:b4:79:4a:72:7c:9d:ea:0e:c8:56:dd:ee:
         a9:53:43:f8:8c:19:10:7a:cc:1b:31:0b:2b:5c:c8:02:d4:b8:
         1e:96:4b:00:eb:68:f4:9f:ec:c9:49:48:bf:41:fc:40:ed:28:
         9b:45:f1:db:fa:9a:55:c0:1c:2e:cb:b5:69:a1:cf:4d:30:d4:
         43:55:a9:c0:9c:a3:d5:ab:ae:c8:1c:45:aa:4a:db:51:37:2d:
         3a:ab:1c:c7:36:1c:15:1b:1b:ad:a4:48:c3:95:ac:bf:7e:15:
         7b:9c:76:f4:b1:10:42:4c:2b:fa:02:97:c5:9c:28:ab:14:39:
         55:27:bd:45:fc:b5:24:3f:f4:a8:79:c2:16:47:1f:25:81:53:
         91:a8:aa:f8:5a:0d:3d:de:42:2b:f8:df:2d:44:48:0a:43:71:
         a2:c3:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:11:35 2026 by rpki-client