Error: rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
File:                     9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft (raw, json)
Hash identifier:          iciXxhQEoYtM0KnAxGVjK0iulypd53mXzeR1YeCCbYc=
Subject key identifier:   82:F2:99:72:9E:0D:D4:89:0A:F6:D9:08:EF:A5:52:8A:CE:45:A5:4D
Authority key identifier: F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
Certificate issuer:       /CN=F36848BCAF/serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
Certificate serial:       020B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
Manifest number:          0208
Signing time:             Thu 24 Sep 2026 04:51:48 +0000
Manifest this update:     Thu 24 Sep 2026 04:51:48 +0000
Manifest next update:     Sat 26 Sep 2026 04:51:48 +0000
Files and hashes:         1: 9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl (hash: SD7mhzzs9P06atKpAn27h6q6LVDQMd2lvIvmNTCIsqg=)
                          2: 91C51C4457F911F0AC734B88DAE4EC9C.roa (hash: jLmJyUTO89F5T9pEtytMOZ40rOclSZZKyrwwRKMAe9A=)
                          3: 37918F14420411F18E38FBD0CE1D38B0.roa (hash: huC/6fmrz67aK5tVBCfKdufN8eEHqz7qMufHoZTK9SA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 04:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36848BCAF, serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
        Validity
            Not Before: Sep 24 04:51:48 2026 GMT
            Not After : Sep 26 04:51:48 2026 GMT
        Subject: CN=6ab4ac64-da2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:02:aa:58:3a:a1:42:42:f7:19:50:62:50:
                    9d:df:7d:d4:5a:5f:ed:ec:aa:de:e1:8e:c9:4f:e6:
                    33:22:07:e7:e7:f2:51:4a:98:15:e8:be:7d:1b:dc:
                    b4:74:cc:2d:9d:c0:63:7a:29:dd:55:32:f8:0e:2b:
                    2c:43:19:99:0c:59:c6:43:fb:e1:1e:ba:e0:c8:2c:
                    d2:95:c1:e5:f7:86:7a:70:af:e0:28:e6:8b:30:94:
                    8e:b0:91:0f:db:ef:fc:e2:03:9e:e9:d1:21:28:a8:
                    84:b2:63:1c:1e:14:b1:89:95:d4:f0:e6:17:66:cf:
                    f9:fa:04:d7:5a:b6:4c:82:1d:dd:cf:f2:4b:7f:67:
                    84:55:c3:76:0f:3e:27:1a:86:76:da:37:0c:0c:63:
                    f3:ce:0a:26:53:5b:a7:f8:01:6e:fd:0a:37:9b:50:
                    f2:f7:85:c8:48:f7:6d:57:0b:67:a4:9c:5f:54:2e:
                    92:a8:b8:f6:9e:75:e4:92:82:d3:03:1c:3e:74:61:
                    70:7e:ac:59:f1:fb:e6:3e:f5:e2:72:21:85:ca:d2:
                    97:c5:37:4c:68:f4:38:32:89:6d:22:6f:07:7d:1e:
                    ea:4a:b0:4b:ed:5f:aa:7d:0f:0a:2c:4b:bf:8a:04:
                    e1:d9:02:f3:62:ad:45:36:f2:b4:f0:07:a0:c3:c0:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F2:99:72:9E:0D:D4:89:0A:F6:D9:08:EF:A5:52:8A:CE:45:A5:4D
            X509v3 Authority Key Identifier:
                keyid:F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:68:f5:02:dc:4e:c4:6c:d2:f1:47:5b:ea:a2:bd:a3:c5:a8:
         e2:98:34:33:65:d4:76:53:c7:ce:50:cd:fc:a4:34:19:89:82:
         f0:6a:97:6e:72:c5:ec:e1:c0:84:bf:c2:e0:ef:07:79:13:e1:
         d3:c7:61:5d:9e:ab:9b:b0:f7:ef:47:b5:18:ce:c9:7a:10:cc:
         3e:49:e1:0c:72:9b:8a:3f:a2:2c:95:c5:b5:9a:1f:5f:e5:51:
         f0:45:aa:62:9d:f3:19:f3:17:5a:01:51:ba:ac:52:34:63:7c:
         be:12:15:a6:b3:4e:3b:80:58:2e:d9:db:95:aa:a8:57:fd:d7:
         bd:c8:ac:70:3a:83:fb:1f:87:01:5e:08:d8:db:ba:c7:6f:60:
         3f:5d:48:38:47:f8:8f:84:99:20:c8:9d:c8:d5:6a:5d:eb:ee:
         f0:f5:18:b0:41:f8:a6:b4:1e:78:02:a8:39:4c:c7:df:94:7f:
         1e:67:b7:f6:87:08:a7:a6:95:3b:5b:73:88:9f:f4:33:f2:60:
         7d:10:a9:9c:f0:cd:91:f5:f3:78:ba:af:02:79:c6:30:2a:bc:
         c7:a9:d8:7a:f0:5c:7d:9f:c5:0c:7f:52:12:fb:2b:cd:ec:4e:
         57:20:03:c2:14:24:42:d1:11:fc:6f:f5:c7:fd:bf:95:d3:9a:
         37:04:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:23:21 2026 by rpki-client