Error: rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
File:                     oTgA5gK0z7bek2kV92nQGZHNe-Q.mft (raw, json)
Hash identifier:          xmq0jqY7HUO2Z/LngTbDhmncJufbURIvi2qRffcIr/w=
Subject key identifier:   B5:F8:5C:0C:A7:BA:6A:DC:C2:7D:B2:7A:A1:B8:1D:F1:E3:03:00:39
Authority key identifier: A1:38:00:E6:02:B4:CF:B6:DE:93:69:15:F7:69:D0:19:91:CD:7B:E4
Certificate issuer:       /CN=F36700DBAR/serialNumber=A13800E602B4CFB6DE936915F769D01991CD7BE4
Certificate serial:       0784
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
Manifest number:          0782
Signing time:             Tue 22 Sep 2026 02:20:10 +0000
Manifest this update:     Tue 22 Sep 2026 02:20:09 +0000
Manifest next update:     Thu 24 Sep 2026 02:20:09 +0000
Files and hashes:         1: oTgA5gK0z7bek2kV92nQGZHNe-Q.crl (hash: QSb5Gbnst6dmKBP2pqeQkhOngEdAxTJqZk4PCkHhkZY=)
                          2: A13CDE6C898711F197F4BA15CF1D38B0.roa (hash: 9MPRLXvbYnX00aXuK6FEkEZWt/9YDwvo1T8TqF4u9t8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
                          rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36700DBAR, serialNumber=A13800E602B4CFB6DE936915F769D01991CD7BE4
        Validity
            Not Before: Sep 22 02:20:09 2026 GMT
            Not After : Sep 24 02:20:09 2026 GMT
        Subject: CN=6ab1e5da-f83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:d0:47:f3:34:29:4f:42:f7:b4:da:23:34:
                    21:56:90:4a:81:ef:df:a3:d7:d7:47:b8:cf:a1:ae:
                    bd:68:f0:87:e6:02:13:04:ed:89:56:72:85:9d:1d:
                    08:99:08:b4:e6:39:ef:eb:fe:48:cc:63:b3:37:b0:
                    e7:bb:a9:03:29:cc:9e:23:81:46:17:c3:92:dc:3c:
                    85:bc:c5:0d:51:5c:49:c6:ea:34:aa:c3:45:66:68:
                    4a:0b:a4:8a:aa:11:4c:79:19:e3:27:93:5a:4b:91:
                    98:48:72:4f:43:46:3a:3d:9c:6b:48:c9:76:3a:bb:
                    81:05:eb:cc:98:49:d8:86:d0:1a:8d:bc:39:62:a0:
                    5b:c0:d1:e8:98:32:65:66:cf:07:ed:b5:59:04:3f:
                    e7:da:49:03:a5:66:1f:c9:cc:90:e5:15:82:60:07:
                    b7:78:82:14:38:1e:54:d3:50:65:68:9d:2e:8b:a1:
                    40:b9:7a:ac:d1:e3:88:45:e7:01:0c:fe:b7:d2:79:
                    17:56:30:60:b7:da:7d:b3:42:8b:e2:21:86:61:d9:
                    7f:3f:2c:5a:f5:a1:ec:89:61:38:d4:2a:91:7a:60:
                    ca:9f:57:8e:a7:d8:55:e7:cf:09:7a:9b:2d:1b:dd:
                    ea:be:a5:c9:9d:5c:f3:93:d5:12:61:27:70:d5:71:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F8:5C:0C:A7:BA:6A:DC:C2:7D:B2:7A:A1:B8:1D:F1:E3:03:00:39
            X509v3 Authority Key Identifier:
                keyid:A1:38:00:E6:02:B4:CF:B6:DE:93:69:15:F7:69:D0:19:91:CD:7B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f0:56:dd:21:d3:e3:13:c1:3c:b4:fb:31:0c:92:20:a3:6e:
         40:39:23:cd:76:72:52:8a:b7:ff:3b:24:03:c7:46:e8:a8:c7:
         6f:72:c4:90:86:25:c2:c7:3b:b5:17:96:4e:fb:91:b7:da:d2:
         ed:16:b7:90:99:e3:88:15:b6:97:fe:0a:84:0e:10:42:36:1b:
         35:34:a5:61:8c:0f:a3:79:a0:7b:f2:05:01:4a:de:c9:6d:fa:
         11:72:e1:75:a3:c6:af:d9:98:af:98:13:83:45:cd:6a:be:ee:
         8d:df:e8:46:e2:59:94:27:5e:8a:3c:92:d4:ac:48:0e:e2:e6:
         83:fb:bf:a1:ac:89:56:73:2f:89:76:7c:43:5a:25:54:a3:13:
         61:75:83:d9:34:6a:05:96:38:d2:32:29:dd:6c:49:70:75:6a:
         5e:fe:fd:37:49:c9:5a:fe:57:8f:b5:00:0d:a1:11:dd:92:35:
         83:42:41:99:77:07:d8:f0:ea:c3:6a:43:4b:61:99:17:15:7f:
         c7:ef:a4:7c:64:1d:6e:9f:6c:26:40:82:41:7a:8b:80:b9:a0:
         33:36:34:91:f2:fd:4f:1b:f6:16:bc:b1:50:c0:82:76:13:63:
         15:70:72:39:29:f1:ee:0f:b4:14:82:a5:26:b6:4d:48:3b:a9:
         fa:ae:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:15:30 2026 by rpki-client