Error: rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
File:                     PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft (raw, json)
Hash identifier:          nwZTO3vYKZRSZv9Nwe+zsy5xPm0aC6AP0PMSTaT2q9A=
Subject key identifier:   0A:1A:C6:3E:01:36:CE:22:AF:24:02:63:A6:1A:76:FD:01:D2:B9:97
Authority key identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3
Certificate issuer:       /CN=F36A6DD7AF/serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
Certificate serial:       102B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
Manifest number:          101F
Signing time:             Mon 28 Sep 2026 00:57:46 +0000
Manifest this update:     Mon 28 Sep 2026 00:57:46 +0000
Manifest next update:     Wed 30 Sep 2026 00:57:46 +0000
Files and hashes:         1: PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl (hash: 66kf1JY6zu129ABOUzDDngbmlmES2nzoeEpIxPcuZ0w=)
                          2: 27245A66C4C411F09B86D9E0DAE4EC9C.roa (hash: RhP+q0hcR9r0TqI0DJg5TlVHEkwdaQaUB4Vwe66w/4w=)
                          3: A19476D4C4C211F098DC65D8DAE4EC9C.roa (hash: ChEp6ZWIlk0DrDsY4PbxeB0oWgH6YxSvcg1AG3DA7vw=)
                          4: 699D3DA6C4C211F0BAEE54D8DAE4EC9C.roa (hash: MbciLgOo/FZXT6pICHx7XJwIWDJbakWY3mBA3T6dzSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4139 (0x102b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AF, serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
        Validity
            Not Before: Sep 28 00:57:46 2026 GMT
            Not After : Sep 30 00:57:46 2026 GMT
        Subject: CN=6ab9bb8a-4d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:d1:c6:fc:d9:f7:ef:b6:c8:53:1a:67:d9:
                    82:24:e4:c1:43:d2:ca:18:7b:d6:fd:5f:76:af:c1:
                    12:c7:4f:f5:57:0f:bc:0e:15:10:9a:bb:39:2d:f5:
                    ab:a7:d1:89:a8:84:e9:77:9d:36:2b:6a:db:92:9d:
                    5e:0e:37:38:42:54:1c:b2:0a:2d:d0:51:67:17:aa:
                    d7:17:ad:52:b5:9e:02:a9:58:72:fd:9d:12:ff:b8:
                    75:3e:67:7c:9e:dd:bc:bf:b2:99:41:c5:b7:f5:98:
                    5c:7e:a5:53:36:91:e5:6d:c9:ac:b1:ff:81:f3:3a:
                    b7:bc:d2:55:8e:89:df:1a:46:72:fc:9e:4b:a8:bc:
                    a4:e7:c3:a7:60:e7:c4:f0:3e:d1:35:b2:6d:d2:67:
                    a9:e9:af:88:4d:0f:17:9a:ae:44:99:cf:66:4e:80:
                    a1:43:f2:f9:11:ba:47:4d:ea:6e:5b:2e:59:8f:4e:
                    ae:d9:c4:72:5e:3c:19:10:56:b8:28:bd:6b:e4:31:
                    51:83:eb:d6:3a:55:ad:38:51:4d:dd:d9:ad:4d:9c:
                    5a:06:06:ad:7f:f7:3e:cd:26:d5:1b:42:1d:15:a2:
                    8e:58:93:61:fb:06:5f:9c:17:a0:cf:d9:62:41:65:
                    9d:c8:b3:35:ff:52:a8:53:5a:3e:bb:fe:68:c5:16:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1A:C6:3E:01:36:CE:22:AF:24:02:63:A6:1A:76:FD:01:D2:B9:97
            X509v3 Authority Key Identifier:
                keyid:3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:40:90:47:38:9d:ea:8e:92:e2:cb:44:4b:a0:d8:64:fa:6e:
         74:26:0d:42:68:92:ae:6c:7c:be:7c:f2:bb:ac:76:ef:83:50:
         90:c3:5a:e6:8d:76:59:ec:dc:dc:1f:bf:a6:ed:ef:9f:9b:2d:
         68:67:0b:1e:8f:89:0d:45:58:96:c6:f6:30:23:e1:51:91:73:
         e0:ee:57:fb:1f:6e:b6:3f:d1:a2:ec:e6:89:2c:58:ea:08:e0:
         7c:b7:2e:97:60:29:ab:bb:95:03:b0:2e:af:58:aa:2c:c9:30:
         9f:71:a1:b5:1b:64:0d:43:b1:f4:16:77:b5:6f:76:a5:94:eb:
         80:d0:5e:6d:ed:dd:1c:a1:df:fd:c9:dd:b1:39:76:12:d0:66:
         c8:6a:3f:6f:22:73:6f:77:f6:49:41:97:e7:3f:21:cb:0e:94:
         01:91:fe:d4:eb:51:62:ed:af:55:5e:d8:10:01:83:2d:3b:41:
         26:7b:1d:52:28:a4:b5:76:6a:00:07:bc:c3:ee:f0:56:56:06:
         55:9e:97:34:6c:bf:39:9f:97:6e:30:99:3d:b0:b8:98:61:a3:
         c1:4b:1a:ad:89:50:3c:97:a7:a4:e8:53:82:9e:e4:36:4a:ac:
         b9:a1:2a:bb:67:4f:43:6f:10:5d:f4:69:cb:53:06:ed:ec:69:
         73:f1:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:47:23 2026 by rpki-client