Error: rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft
File:                     eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft (raw, json)
Hash identifier:          VhcKajFgE+DZyTj5wO6E+7HN7bT/zkrPKNsiHK135pU=
Subject key identifier:   D1:9D:AA:40:38:70:40:4C:AF:5D:B1:DE:00:9F:6F:13:2A:5A:B4:AA
Authority key identifier: 78:D1:CD:77:9C:79:9F:A6:4D:6E:90:FA:FC:7B:86:E8:1B:C2:FC:1A
Certificate issuer:       /CN=F36722D4AR/serialNumber=78D1CD779C799FA64D6E90FAFC7B86E81BC2FC1A
Certificate serial:       0314
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft
Manifest number:          0311
Signing time:             Mon 12 Oct 2026 04:27:35 +0000
Manifest this update:     Mon 12 Oct 2026 04:27:35 +0000
Manifest next update:     Wed 14 Oct 2026 04:27:35 +0000
Files and hashes:         1: eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.crl (hash: IsUIdBdhxRhb3kyzfURFMFpVQ1cB7TjSLgrBusiHXac=)
                          2: 2C40B2D6283A11F19ED36BDADAE4EC9C.roa (hash: RO1PZMcn+2BdP26YxmqjVpw98emd74IGxt47U3YTrHY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft
                          rsync://rpki.afrinic.net/repository/arin/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 04:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36722D4AR, serialNumber=78D1CD779C799FA64D6E90FAFC7B86E81BC2FC1A
        Validity
            Not Before: Oct 12 04:27:35 2026 GMT
            Not After : Oct 14 04:27:35 2026 GMT
        Subject: CN=6acc61b7-4570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:dc:72:ae:85:b6:df:9f:b1:41:b2:11:ad:
                    e8:51:f4:1e:e8:5c:ac:b3:2d:5c:4b:5b:48:96:44:
                    2f:6e:cf:86:b9:2f:6c:d3:0b:c8:90:49:92:3e:8b:
                    da:1d:1b:7d:ed:3e:9c:d6:52:33:00:fa:a6:f0:07:
                    69:76:fb:36:3f:4b:e2:e3:0e:23:79:35:d0:eb:c7:
                    c9:86:39:4a:19:47:14:13:84:2b:c1:15:dc:c1:c7:
                    dd:0c:0d:6f:09:a3:e3:93:48:fa:18:02:30:90:a6:
                    2e:6e:fa:25:4f:9d:e7:b7:73:9d:f9:4c:09:73:4c:
                    78:9a:f8:aa:00:3d:a4:ab:0e:3d:72:a9:91:af:aa:
                    77:ee:24:96:e4:ac:1d:89:24:f7:26:05:ce:68:4d:
                    f3:4e:83:5d:99:4a:cf:34:40:e6:b6:15:ef:47:4d:
                    3d:b9:bb:41:fc:49:6a:36:ca:4b:99:16:9b:e2:f5:
                    84:94:b0:f4:32:be:81:67:3f:e6:87:90:37:78:1f:
                    9b:3b:e6:40:37:33:f1:38:10:83:63:e9:08:92:30:
                    6b:20:da:d2:31:a8:bb:cb:af:80:40:16:2d:9f:f5:
                    20:96:b0:4c:6a:03:39:09:07:51:c8:fb:3b:1e:aa:
                    0b:51:97:bd:37:48:af:6c:89:6e:87:18:56:ec:ac:
                    8c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9D:AA:40:38:70:40:4C:AF:5D:B1:DE:00:9F:6F:13:2A:5A:B4:AA
            X509v3 Authority Key Identifier:
                keyid:78:D1:CD:77:9C:79:9F:A6:4D:6E:90:FA:FC:7B:86:E8:1B:C2:FC:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:50:44:13:7f:d9:b3:4f:b3:48:00:f1:be:5d:a7:b7:aa:ea:
         b3:a9:0d:1b:56:a0:5b:00:d4:7b:ab:64:62:44:7a:53:49:60:
         07:f4:49:07:8a:9e:bd:73:90:45:6e:cd:c1:70:2f:33:68:60:
         2e:a1:8c:c5:7e:93:f0:a6:5e:9c:79:ed:49:78:a1:1d:dc:64:
         ab:9a:6a:87:bb:34:ea:69:07:f5:89:5b:85:25:e2:9d:7c:64:
         1e:38:0c:7c:23:3a:f3:66:0c:c4:68:09:09:45:96:ec:ed:3f:
         c3:d4:62:38:83:9a:0a:77:f9:cf:00:f0:99:81:dc:27:b3:4e:
         f1:3e:ee:de:0d:38:ee:5d:80:b5:cb:5d:e6:96:b0:78:b3:8f:
         e9:dd:77:91:71:86:ac:1c:2f:03:7b:49:74:d8:f8:b6:b4:87:
         d7:03:4d:ee:cc:e0:cf:af:bf:5e:e9:89:76:c3:31:54:23:53:
         5a:73:a0:f1:44:34:a8:75:e9:dc:2b:00:83:90:6d:c5:a7:f7:
         5f:a7:a1:e1:ba:5f:42:51:c0:f2:b8:f0:3a:f8:3d:9f:cc:39:
         a6:65:0f:69:cc:a1:68:d2:f2:31:83:6a:0b:de:4b:3a:eb:3e:
         9c:95:4f:23:5b:29:91:20:d6:7c:dc:ac:a9:22:ab:bd:52:2b:
         10:0f:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:55:21 2026 by rpki-client