Error: rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
File:                     PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft (raw, json)
Hash identifier:          FH4DxyS0ITm8xDa6qthHo3hU6EIOH5SXIIFNkB9OZlk=
Subject key identifier:   5A:9C:0A:4B:B8:21:62:5C:AA:06:24:76:DA:FD:3B:92:29:BD:03:6E
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Certificate issuer:       /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial:       05BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
Manifest number:          058A
Signing time:             Sun 11 Oct 2026 03:17:24 +0000
Manifest this update:     Sun 11 Oct 2026 03:17:24 +0000
Manifest next update:     Tue 13 Oct 2026 03:17:24 +0000
Files and hashes:         1: PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl (hash: B9ag9IFdY/N5kNmIfks4iDWOgdXTiTA8qSEe0AXznWA=)
                          2: A3918A548C1C11F19273FED9CE1D38B0.roa (hash: hF2dEVZkD0Ggf+lQuG/vPMQF/5HRXVpdinwiBOpx39s=)
                          3: 34264AD8164711F1B352B4F1DAE4EC9C.roa (hash: klCDYvFVBjZ3oiEdBt07KN4j6VYueC0votUF9VvFxWo=)
                          4: 4D0338788A9511F184230300CF1D38B0.roa (hash: t9IRq+toZsXNBmaE+ZpRm1vEIhItOa5ZwQgpCblZhzI=)
                          5: 3CBEB5CE164511F1A59262E5DAE4EC9C.roa (hash: OG1AZjOphf+scFlo1ouZYzEDVGkXMX/NrBYlcyp5+6U=)
                          6: 8AC4F086164911F1A8774280DAE4EC9C.roa (hash: TsEXsAOb1P1Z9SBrBAp6WkxB87bKGdHI81a+X5aibs8=)
                          7: 58036B02164211F188DEC5D4DAE4EC9C.roa (hash: qBvs+zBtSWZ2syrfcr2Sybpe86KxjWYVw0mHSHIH5u4=)
                          8: 7D919404164511F18A849AE5DAE4EC9C.roa (hash: Arm2hMJT3U6HXbhseUSybg4jmYI715/aw8K4eS7R4LQ=)
                          9: EF38CCF8164511F197C88AE9DAE4EC9C.roa (hash: 3Od/gwdm8Wl29GBZU7GWEUTDGRNRpY32PEFWtqP1X/M=)
                          10: A06E66B0164911F19FC75D80DAE4EC9C.roa (hash: zQG6NBde7f60yejhCyQCfywn4EgQqwkyQn47sGDO1nM=)
                          11: 9CA81DC2164511F1A1815FE7DAE4EC9C.roa (hash: Sb/v0PBhIkOqNzHtr0zcsQuWwyO6uld2vdtueV+uHWo=)
                          12: 6127A85E164911F198970680DAE4EC9C.roa (hash: lvJbkV9iOualn8rIcX9xHM4+DO+zDl5ClBfAxui6rfA=)
                          13: D3889C5416FE11F1868C37DDDAE4EC9C.roa (hash: e9aj0AyfiLUBHA5SdIZzslx9F5Gw9A9kMebTQ3dTtAg=)
                          14: 365143168C1D11F1883C10DECE1D38B0.roa (hash: /Uc5b7yoavZNs+iYDnoEsqLI1Tv+J/339qlE9yuicL8=)
                          15: BE851408164111F19290A0CFDAE4EC9C.roa (hash: 09vsbYIiJwzWVsF7G8Ziw4EcwesZAX6sNWXeTtzD58A=)
                          16: 65BA9240164A11F183199984DAE4EC9C.roa (hash: 0PpnjPDEZX2Uyo4ELJgCnz4oxks68BGasobjbPLelzY=)
                          17: 0C01B516164611F185CEA9E9DAE4EC9C.roa (hash: MmsGyXA8xUkCHxnXraWAox4Zhvs8Iq+PCNsjK9YBGY8=)
                          18: D380DA288A9411F1976AF7FBCE1D38B0.roa (hash: uTjYz9/X9gCbOTJlU7RYAGsETCEB37t1llBGHImuB9g=)
                          19: F50135428C1C11F1924B01DECE1D38B0.roa (hash: Js+BheTI1SaXbPkJrEShKicPgauq6Ja+ijmKK3wgL58=)
                          20: 220602C48A9311F1B633AEF3CE1D38B0.roa (hash: gFjavoDJQPcxCaRNT4k544rzazhj6zhLdZAdXbkDoUk=)
                          21: 49A743C4164911F1A002F37FDAE4EC9C.roa (hash: 6ziOXL7xTMB7y5RXWLYaaIXiB3GajxxgogmWFu6io7s=)
                          22: 2CFC017C635311F19D993FE1CE1D38B0.roa (hash: V7H3wtUO2XKKRWwYHk9LANumJZEQooTT5n654l3o9Ow=)
                          23: 2CB9DC088A9411F19A99A4F9CE1D38B0.roa (hash: oaKBGoRMDwTNiV9HPdcfvbUfbqccc1dM936/D4gdD4k=)
                          24: 7A0D547C164411F1BEFD3EE1DAE4EC9C.roa (hash: 1yqgoCPv+tTcS1c+xWc3aFjlpsc66OUaItf6n/p3XP4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 03:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
        Validity
            Not Before: Oct 11 03:17:24 2026 GMT
            Not After : Oct 13 03:17:24 2026 GMT
        Subject: CN=6acaffc4-6a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:90:5c:d4:a2:28:ed:0d:c2:f5:f1:aa:98:
                    d7:2f:d9:bd:80:e7:1d:de:ab:01:a9:83:3b:8b:9b:
                    a3:da:76:4d:97:09:d1:4b:10:2a:44:52:6e:77:55:
                    19:8b:5a:28:8f:d6:fe:62:70:ad:87:32:99:2e:ac:
                    57:fd:92:fa:0d:b2:d3:3a:39:ff:54:27:ae:aa:a4:
                    c6:fd:08:af:be:9b:ba:38:f2:65:ff:18:a6:f2:c9:
                    50:06:e2:eb:cb:cb:ff:d0:23:fe:c0:67:90:ad:d7:
                    e8:ee:b0:78:c7:c3:cc:23:36:8f:5d:78:38:9c:e8:
                    45:e1:99:bc:8c:89:f7:ec:2c:40:a3:63:6f:c5:51:
                    bd:4d:c4:59:f6:b3:ff:6b:8c:d7:d3:ae:16:5f:8a:
                    37:6d:76:96:15:0a:bf:57:f2:11:f8:21:cf:8f:af:
                    c5:43:7d:73:11:fb:a1:bd:7c:60:06:6e:e4:fc:75:
                    3b:ec:6b:cf:5d:96:4d:9c:62:79:f5:be:8f:a5:c9:
                    9f:23:69:67:4b:58:f6:c6:7b:49:9c:a6:21:66:ff:
                    df:28:74:ef:fe:be:bc:e3:e6:96:5c:56:e4:2a:52:
                    b9:c1:38:b1:e9:90:ac:e4:cd:79:80:84:43:3e:d9:
                    8a:02:2e:35:dc:cd:a3:6b:48:6f:fa:7d:3f:cc:d4:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9C:0A:4B:B8:21:62:5C:AA:06:24:76:DA:FD:3B:92:29:BD:03:6E
            X509v3 Authority Key Identifier:
                keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3f:70:68:dc:c6:70:59:30:b8:85:d1:72:8e:59:9f:0b:52:
         6a:5b:19:72:82:c0:af:ee:00:d0:8f:28:7e:24:ff:8e:70:c0:
         a3:c8:ec:d6:9f:1d:b2:36:13:16:74:a0:d5:9e:0a:86:c8:48:
         4d:bb:a0:72:f7:25:69:8a:83:cd:07:af:30:c3:16:99:f3:2e:
         13:51:47:0c:f6:9f:8f:9c:96:24:b1:54:19:45:d4:d5:f2:7e:
         48:cb:42:61:a7:10:df:64:b2:78:38:13:0c:e8:c0:5f:02:b8:
         48:af:18:3f:21:8c:0f:7e:68:c2:46:ee:a2:70:21:03:28:be:
         c0:91:08:94:f9:92:20:66:30:24:3d:8c:be:5a:d9:7c:dd:13:
         e1:d2:36:f0:de:72:af:50:03:7f:85:94:5c:8d:a8:20:fd:b5:
         35:22:fe:93:1e:1b:d7:3e:fd:f7:66:5d:6c:79:ab:90:7b:28:
         07:05:b5:9e:b6:06:6a:08:26:6b:55:5b:b9:0b:19:91:be:3d:
         0a:bf:48:df:e2:3c:e4:37:96:9d:a3:fc:9a:66:b7:24:79:78:
         4d:c7:59:a4:78:de:a6:04:e0:11:48:04:ce:f0:5d:6a:cb:39:
         5d:61:69:b8:c5:00:bc:79:71:78:7e:e7:90:89:51:f1:d1:2e:
         e2:d0:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:18:07 2026 by rpki-client