Error: rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
File:                     RfLi_fMRPvxjNXV8r49bXsSszbM.mft (raw, json)
Hash identifier:          AVyHa93iOIaqW19c6iyuwGmM+z/Ys/itJCdB9D1NkR8=
Subject key identifier:   DB:DC:FB:D8:44:D8:94:96:E3:28:4D:5F:5B:70:8D:CB:81:37:AE:94
Authority key identifier: 45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3
Certificate issuer:       /CN=F36A6D8BAF/serialNumber=45F2E2FDF3113EFC6335757CAF8F5B5EC4ACCDB3
Certificate serial:       0159
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
Manifest number:          0154
Signing time:             Sun 20 Sep 2026 05:11:59 +0000
Manifest this update:     Sun 20 Sep 2026 05:11:58 +0000
Manifest next update:     Tue 22 Sep 2026 05:11:58 +0000
Files and hashes:         1: RfLi_fMRPvxjNXV8r49bXsSszbM.crl (hash: fc9CZcLenR9ghT+XcR9VyxEpRGmB//afbQ+Gp294XGU=)
                          2: 380C0580278511F1B43266B7DAE4EC9C.roa (hash: bfdf+j4kevo+Pizg6P6e/82+1I3zu33b51tah9+KFWc=)
                          3: B23FF6B4278411F1A38689B3DAE4EC9C.roa (hash: LO47Ya7O99gQwMPITew91xxQM1GvNNiTnvhJCLpvLr0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6D8BAF, serialNumber=45F2E2FDF3113EFC6335757CAF8F5B5EC4ACCDB3
        Validity
            Not Before: Sep 20 05:11:58 2026 GMT
            Not After : Sep 22 05:11:58 2026 GMT
        Subject: CN=6aaf6b1f-3b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:f3:d5:44:fe:77:11:95:aa:f8:6c:98:32:
                    44:3e:d3:8f:a9:84:e2:8e:dd:8f:cb:e8:d3:43:7f:
                    5d:33:cf:7f:63:e1:8a:87:b2:3e:9c:b9:f4:97:4e:
                    13:2b:e4:42:3b:b4:97:33:41:7b:a1:94:ac:b6:53:
                    a9:04:eb:e3:f9:fb:b8:18:81:98:05:f7:d1:de:f1:
                    6e:25:7e:65:64:0c:76:10:01:25:10:d4:12:b4:a6:
                    8a:f9:55:15:0a:16:08:ad:e3:f5:ce:d5:7b:ac:21:
                    9b:66:9d:90:e3:66:9c:57:33:f5:a8:47:32:cb:4e:
                    6e:87:a5:2c:f7:95:93:49:95:49:bb:62:5f:e9:bc:
                    5a:ed:2b:3a:db:73:06:34:22:7f:ce:3c:50:e5:43:
                    1c:2b:3e:6c:42:08:9a:31:1c:4e:26:22:31:b6:46:
                    ae:63:f1:97:8c:16:96:10:c5:6e:18:5c:be:7d:8b:
                    15:40:fc:a8:4a:29:3c:53:3c:14:5f:4d:c3:6d:61:
                    1c:77:19:07:b3:c3:89:f7:57:6b:d4:fe:21:0c:d1:
                    cd:21:9e:3a:37:5f:ff:2a:11:89:ea:26:c3:f8:2b:
                    b3:35:95:b3:c7:6a:b1:45:1e:ff:66:7e:dc:38:ba:
                    c3:da:34:31:22:58:0e:7e:56:0d:a3:5b:a9:9f:3b:
                    ff:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DC:FB:D8:44:D8:94:96:E3:28:4D:5F:5B:70:8D:CB:81:37:AE:94
            X509v3 Authority Key Identifier:
                keyid:45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e8:f0:f5:4c:5a:48:0f:0d:6d:61:57:34:ec:e8:fc:b4:af:
         6f:db:d5:13:6a:de:7e:6f:70:c5:ae:c9:46:21:f9:66:f4:55:
         e7:3f:96:aa:ce:08:42:5c:33:20:0d:d3:93:1a:0d:da:71:ad:
         91:46:68:61:c4:64:26:89:4e:74:82:ee:db:6f:de:48:2f:36:
         0c:ca:1c:28:e4:53:48:f0:21:e2:9f:81:2a:35:93:c5:90:80:
         69:6a:6e:ca:b1:1f:88:ae:f4:dd:6f:db:13:fa:90:b9:1b:9d:
         38:bf:d1:b7:a1:64:5d:27:f2:5e:34:96:a0:46:ab:d9:f0:bc:
         97:33:87:58:59:8b:43:d7:28:83:61:5a:2d:44:d2:58:a0:15:
         7a:b5:f7:3c:88:57:ae:c8:56:dc:04:5f:92:e1:11:2d:9c:ba:
         fd:cb:9c:a3:ce:74:58:89:cd:75:5c:89:c3:0c:c4:4c:da:e8:
         08:93:e1:50:32:85:9f:e3:95:09:3f:92:bb:cd:b9:c9:61:45:
         54:b7:45:db:31:ac:ff:26:02:4e:e8:c1:13:cd:c2:07:62:1f:
         b3:92:8e:2f:c7:53:f6:ef:5f:aa:71:a8:a2:fa:b6:42:07:3e:
         42:55:4f:ca:4b:15:62:d8:16:a2:70:e9:ee:57:c9:b9:44:3a:
         59:6a:b3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:34 2026 by rpki-client