Error: rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
File:                     sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft (raw, json)
Hash identifier:          Xh5BjonaWxlShJmuJ3AHYrZ3oX7wqozUpG88vBIPkzg=
Subject key identifier:   0E:D1:B7:D1:B1:F2:37:8D:A1:86:CE:3B:44:45:87:1C:A6:2A:84:4A
Authority key identifier: B1:02:D3:28:DA:3A:4C:5B:41:6C:27:A8:3D:54:87:90:2D:06:38:FD
Certificate issuer:       /CN=F36A7FC6AR/serialNumber=B102D328DA3A4C5B416C27A83D5487902D0638FD
Certificate serial:       04F2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/sQLTKNo6TFtBbCeoPVSHkC0GOP0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
Manifest number:          04F0
Signing time:             Tue 22 Sep 2026 03:24:25 +0000
Manifest this update:     Tue 22 Sep 2026 03:24:24 +0000
Manifest next update:     Thu 24 Sep 2026 03:24:24 +0000
Files and hashes:         1: sQLTKNo6TFtBbCeoPVSHkC0GOP0.crl (hash: S4evynyWcH1cbKAQiIChXTaGqm/j9gfj6wbYTGqXczk=)
                          2: A486AA4E42D411F0B4F8DBDEDAE4EC9C.roa (hash: 4xKKYuuFJh/zKzeLBQTXL6axi1L1p5+TaD3uqW3PPwQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
                          rsync://rpki.afrinic.net/repository/arin/sQLTKNo6TFtBbCeoPVSHkC0GOP0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7FC6AR, serialNumber=B102D328DA3A4C5B416C27A83D5487902D0638FD
        Validity
            Not Before: Sep 22 03:24:24 2026 GMT
            Not After : Sep 24 03:24:24 2026 GMT
        Subject: CN=6ab1f4e8-9a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:99:22:08:80:0d:b8:6c:9b:ea:75:dc:e8:c7:
                    0f:20:f7:4a:d8:7f:30:17:d4:ef:71:ed:66:e3:27:
                    d2:3d:c9:0a:fc:8f:fc:58:ab:56:cb:ae:1f:c7:7c:
                    d4:8a:80:db:65:a0:11:32:2f:75:d1:9b:1c:c1:f9:
                    54:43:9a:d1:05:07:7e:77:cd:66:15:5b:58:53:ac:
                    ee:62:ee:84:2e:1e:0b:fa:5a:4a:a1:ae:59:c4:d0:
                    a0:d0:4d:1b:5e:6f:82:b4:a3:1d:de:8c:26:ee:00:
                    5b:65:30:f8:78:19:16:c2:b7:8c:45:a9:7d:7c:71:
                    3a:64:ee:fe:65:41:cd:ba:88:29:37:0a:e7:97:6d:
                    a9:1a:33:1c:48:41:e5:1e:b5:27:ce:20:7e:c9:ed:
                    d6:35:e1:7e:86:d7:c5:9f:db:3f:45:0f:b1:38:76:
                    aa:b7:38:b8:76:00:36:bc:7c:c9:f4:05:a0:6e:33:
                    90:c8:1f:c6:4d:54:c0:19:57:32:e6:51:5e:53:de:
                    1a:d4:7e:14:09:45:51:61:c7:d3:f6:eb:be:e5:81:
                    e4:4c:40:08:19:39:48:ec:cb:30:28:35:73:4f:36:
                    25:ce:a6:4a:67:2b:92:a8:1a:70:b7:f5:9b:06:b8:
                    11:db:90:27:ad:97:05:cf:ef:70:4e:1a:a7:e2:1e:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D1:B7:D1:B1:F2:37:8D:A1:86:CE:3B:44:45:87:1C:A6:2A:84:4A
            X509v3 Authority Key Identifier:
                keyid:B1:02:D3:28:DA:3A:4C:5B:41:6C:27:A8:3D:54:87:90:2D:06:38:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/sQLTKNo6TFtBbCeoPVSHkC0GOP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:65:99:49:1d:f2:77:48:c5:ea:d8:1b:42:94:61:ad:8b:
         ba:28:c3:df:06:af:89:dd:2d:b4:1d:e6:30:df:f2:46:7b:27:
         40:15:47:5b:34:ea:98:d5:1e:c6:49:02:83:40:d0:c8:e5:dd:
         39:9d:30:de:ac:c2:a5:58:52:ec:9f:ae:25:3e:4e:bf:6b:66:
         28:f4:3a:0e:ec:66:d5:ff:20:60:cf:3e:2c:20:19:9f:15:b2:
         45:43:0c:8d:0a:ce:f2:47:35:b6:45:c2:00:dd:7a:4a:40:a1:
         70:88:3f:84:37:46:e1:39:db:52:74:2b:a2:0c:65:0d:79:d1:
         ee:78:6e:8e:ec:93:2c:dd:d8:2f:a7:1c:bb:96:96:d2:85:f1:
         91:b0:22:94:01:1a:d2:7e:36:19:4b:0d:20:61:65:59:d1:91:
         37:c4:b8:2b:16:d6:f2:aa:1e:a2:e8:71:54:01:f8:4e:e7:e8:
         39:c2:45:46:94:e9:fc:7e:75:99:23:c6:44:88:55:9a:b8:46:
         52:9b:ae:9b:c4:80:ca:a7:62:7b:6e:b3:b7:b2:58:46:70:5f:
         57:bd:af:80:7e:05:8f:24:0a:3c:36:83:f6:c3:9d:02:9e:d4:
         8c:10:5c:c1:43:b2:44:8e:38:b6:bf:ae:0d:ef:35:9a:17:52:
         8f:c5:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:10:17 2026 by rpki-client