Error: rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File:                     LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier:          HA5zVZ9NHEi9OpKnfF/eXmci6k/beHFh/wLa0PPYVrQ=
Subject key identifier:   4E:12:CC:AA:12:B4:AF:5C:DE:98:3B:A2:EE:14:C7:21:D7:9D:5D:3E
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer:       /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial:       03CB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number:          03C1
Signing time:             Tue 22 Sep 2026 04:03:31 +0000
Manifest this update:     Tue 22 Sep 2026 04:03:30 +0000
Manifest next update:     Thu 24 Sep 2026 04:03:30 +0000
Files and hashes:         1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: 8gr0M78LSvlXu1wbh1C4y7v/MZWQW906SnT5gx3l2ig=)
                          2: D7D2E2A452A611F19BD02DF2CE1D38B0.roa (hash: b+2jKegvzCwZfq+fb5FZqDtq1CY8HBge8hnfwp6Km68=)
                          3: 38B7F27252A611F193771CEECE1D38B0.roa (hash: VujmE/3tHBn8mLb5BtmFjZUZZTvVtkiSObpapiNv1LQ=)
                          4: 1D81231A52A711F1A84AD4F5CE1D38B0.roa (hash: ZcEp6winc684xewT0hJzkqUYVlWOfnDVdOhpHbygoic=)
                          5: 48F8F5D652A711F1B352EDF5CE1D38B0.roa (hash: ce02ImdLwo/7RXTluhZpqtmk35loPw9NQKUYoqpIyRA=)
                          6: 9938B42452A611F1A083D6F1CE1D38B0.roa (hash: a0lXwM6/HyZeCuqShxjjgi5zdBu0nuAUd14gda8F38w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                          rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
        Validity
            Not Before: Sep 22 04:03:30 2026 GMT
            Not After : Sep 24 04:03:30 2026 GMT
        Subject: CN=6ab1fe13-1132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:36:28:5a:34:13:67:3e:d8:0e:50:c8:5e:
                    7f:ff:56:a5:bf:77:93:05:f7:c3:23:76:26:92:46:
                    f6:8a:72:f9:38:e4:c5:16:7b:a9:85:0d:21:a8:89:
                    2c:0b:4a:49:d0:48:7a:19:19:d7:0a:23:d4:54:c7:
                    9e:cf:5a:81:76:76:5a:86:54:9e:ca:d2:67:b1:49:
                    37:a3:94:96:6f:73:0d:c4:ba:d2:76:9c:bc:86:d2:
                    39:4e:ad:c3:d9:9a:7d:6d:72:89:14:a5:86:cd:f1:
                    56:e6:69:53:9a:ec:63:ef:ba:ea:88:bc:6b:e8:0b:
                    84:f7:53:2a:82:c4:56:d6:cf:dc:ea:eb:3f:d1:79:
                    6b:a7:af:a3:8f:b1:e0:82:f1:cd:df:cc:20:67:d9:
                    c8:e7:a5:a9:bb:ce:46:7c:9b:ac:0b:00:95:bd:de:
                    69:81:69:94:c1:38:c3:47:0e:91:a5:f9:84:2f:c1:
                    74:6d:b4:3a:21:71:ac:06:ef:bf:19:69:68:d5:ef:
                    91:29:07:4a:f3:fc:ab:28:37:15:1d:f4:45:1b:28:
                    4e:e7:61:68:9e:34:bc:26:e6:3f:be:bf:db:f1:be:
                    1d:7e:0b:43:82:6b:d1:7f:d5:ae:dd:8a:33:67:d0:
                    0c:cb:97:7a:e7:c2:b4:1c:a4:50:e2:78:4f:bc:39:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:12:CC:AA:12:B4:AF:5C:DE:98:3B:A2:EE:14:C7:21:D7:9D:5D:3E
            X509v3 Authority Key Identifier:
                keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:60:10:7d:2c:10:ef:c9:6e:4e:3e:5a:3b:fa:46:35:cb:
         43:a5:1c:1a:10:1b:be:46:01:2c:28:d8:66:f4:12:c5:9a:93:
         3e:a5:7f:cf:79:39:d9:ca:53:1d:f8:c3:f1:36:c1:d6:be:29:
         19:0b:35:0d:19:ae:8d:02:53:e5:66:bf:75:af:f3:89:08:c3:
         d7:8e:99:1f:df:84:e2:65:ee:64:e7:03:44:75:25:a0:10:d5:
         b3:40:fc:e8:5b:66:41:61:16:f0:c6:f5:cb:12:25:5f:20:28:
         51:47:55:aa:b1:25:97:35:5a:d1:37:a6:74:df:e4:c4:d3:7d:
         cb:45:3a:19:84:67:31:89:a4:e2:75:69:63:97:5a:35:2c:8e:
         bd:98:3c:e4:73:fd:00:ff:12:23:66:5d:78:0a:56:87:54:ed:
         c3:b9:e8:07:56:e9:31:b3:99:c1:ea:57:80:54:cc:9f:b1:d9:
         c1:d8:44:50:38:11:44:d9:d1:72:d9:26:dd:7d:84:de:ce:b5:
         4a:15:4f:32:95:28:95:a3:d5:c0:81:c0:9d:bd:0c:10:a1:a7:
         53:9e:a7:79:27:0c:1c:0b:87:55:ad:6d:c2:45:94:19:ad:b1:
         3f:91:03:fa:56:7a:55:db:8f:1b:a4:12:96:de:48:fd:63:ea:
         d3:8a:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:32:26 2026 by rpki-client