Error: rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft
File:                     a8q8TzeM0E56oT9j1SDUlbZiK-k.mft (raw, json)
Hash identifier:          YSLqcXNNM34YRUMF+ZRKquAUEJQzgtPchjUeY7mMUW8=
Subject key identifier:   A1:9A:48:46:EE:37:50:7C:46:BE:14:A8:8F:33:FF:F4:8B:D4:3D:07
Authority key identifier: 6B:CA:BC:4F:37:8C:D0:4E:7A:A1:3F:63:D5:20:D4:95:B6:62:2B:E9
Certificate issuer:       /CN=F369B304AR/serialNumber=6BCABC4F378CD04E7AA13F63D520D495B6622BE9
Certificate serial:       011A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/a8q8TzeM0E56oT9j1SDUlbZiK-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft
Manifest number:          0119
Signing time:             Mon 12 Oct 2026 05:21:53 +0000
Manifest this update:     Mon 12 Oct 2026 05:21:52 +0000
Manifest next update:     Wed 14 Oct 2026 05:21:52 +0000
Files and hashes:         1: a8q8TzeM0E56oT9j1SDUlbZiK-k.crl (hash: unDEOuDA43RMUi6IhrP6bVF+2APfZsevGUNIyThD9Ug=)
                          2: 63C36E3C7FA711F1A3AB6010CF1D38B0.roa (hash: cpxY7MTwcZ4rCm+4PLpIjuOiKLrZezkOZjvhgUKx7fg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft
                          rsync://rpki.afrinic.net/repository/arin/a8q8TzeM0E56oT9j1SDUlbZiK-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 05:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B304AR, serialNumber=6BCABC4F378CD04E7AA13F63D520D495B6622BE9
        Validity
            Not Before: Oct 12 05:21:52 2026 GMT
            Not After : Oct 14 05:21:52 2026 GMT
        Subject: CN=6acc6e70-4dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:dd:b2:68:8d:7b:5d:b5:fd:42:ea:4f:6e:
                    ba:8d:85:1d:77:70:6c:12:72:2b:5d:36:c1:e5:a8:
                    ca:88:ba:b0:a7:21:d9:32:91:75:c2:81:09:f9:b6:
                    06:21:65:11:bf:d1:f1:14:6e:e2:35:ab:25:51:a8:
                    44:42:e8:30:5f:c6:d0:6e:80:17:b1:5a:a4:58:db:
                    01:fc:fa:35:e0:a1:8c:6d:b4:7f:70:d9:2f:2f:68:
                    c5:04:5a:0b:ec:1b:93:68:e7:c6:04:d9:b5:93:9c:
                    ef:09:53:7e:dc:1b:ad:80:3e:eb:31:2c:84:19:79:
                    84:08:fa:4d:38:b2:09:e0:10:e6:22:91:f9:01:26:
                    4f:e0:b9:63:10:a6:28:03:1a:e6:01:94:af:11:3a:
                    64:f6:44:ed:a0:ee:63:cd:c7:56:04:c9:e7:2d:d0:
                    a8:7b:bb:68:be:61:8d:a8:c2:eb:ac:1b:0a:3b:55:
                    64:cf:61:a2:89:75:fd:bb:c4:2e:7f:33:b4:11:07:
                    b8:5c:5a:01:e9:e3:05:f3:49:b0:07:68:2d:f0:5f:
                    ba:29:4a:f7:54:6d:49:7b:87:ec:12:1c:83:e6:ee:
                    7f:37:e6:05:2c:a6:d1:61:20:7c:33:9c:6e:63:23:
                    15:12:a0:e1:4e:30:46:a9:98:6b:f9:4b:6c:3e:16:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9A:48:46:EE:37:50:7C:46:BE:14:A8:8F:33:FF:F4:8B:D4:3D:07
            X509v3 Authority Key Identifier:
                keyid:6B:CA:BC:4F:37:8C:D0:4E:7A:A1:3F:63:D5:20:D4:95:B6:62:2B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/a8q8TzeM0E56oT9j1SDUlbZiK-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:82:87:79:04:ca:b6:9d:48:30:e4:b2:7d:7e:36:e2:10:
         aa:28:a5:0d:53:ad:bd:0d:1f:11:33:d8:e4:99:01:cf:ed:f8:
         87:7f:7f:fb:bb:0e:3b:56:03:dd:99:36:e1:11:05:bd:19:71:
         63:f8:c5:ac:0f:f7:55:4c:f1:60:9c:9d:02:eb:cb:c1:e5:fd:
         2f:17:13:7b:90:fa:a1:f5:42:23:1b:9e:89:42:18:91:bd:6c:
         ce:70:47:c4:07:a0:ea:ab:25:89:4f:b1:f7:c0:6d:23:fc:ec:
         2d:10:8a:62:72:19:e9:86:fc:09:58:fa:d3:56:7a:70:e0:47:
         27:5b:52:f8:7a:ea:24:a5:d1:b9:30:5c:ac:41:93:91:6b:12:
         14:3c:87:b6:7e:27:82:b4:ac:de:7b:12:d6:b4:50:ed:04:80:
         d9:cb:a6:41:52:18:cc:8f:7a:cb:e1:1c:04:dc:c3:a1:ab:8a:
         94:ca:cb:b0:7a:75:80:55:9f:80:98:ad:c4:79:1f:c1:68:5a:
         18:b2:1b:3b:07:65:82:53:6a:7c:63:44:06:05:0c:02:3a:0e:
         33:b4:c2:b1:58:e0:0b:a9:f7:8d:a4:f2:f2:ae:7e:8d:39:64:
         b3:6f:dc:f8:b1:7f:a0:45:6d:8b:a0:1c:14:c6:59:2d:a4:84:
         3e:93:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:45:26 2026 by rpki-client