Error: rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
File:                     Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft (raw, json)
Hash identifier:          lkeeopjwMVXx6hrWzlLWL7mYHLP7XOKq8Vmmm+yUqdA=
Subject key identifier:   2B:36:F0:AB:19:C7:15:1A:CA:9B:0C:CE:BA:DA:19:33:B6:64:F7:69
Authority key identifier: 67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39
Certificate issuer:       /CN=F36B5EE7AR/serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
Certificate serial:       01AD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
Manifest number:          01AC
Signing time:             Mon 21 Sep 2026 05:02:20 +0000
Manifest this update:     Mon 21 Sep 2026 05:02:19 +0000
Manifest next update:     Wed 23 Sep 2026 05:02:19 +0000
Files and hashes:         1: Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl (hash: RCqKYHcTF7Yjq1ON1IdVsaa7mRvNPiKhSuNIHPN8OTM=)
                          2: 38D8D2366B9211F095FD868ADAE4EC9C.roa (hash: QAj9ZVXFClZ+xgA1S3DzLLKJ/tdZw+gURdKUv7+f/hc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                          rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AR, serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
        Validity
            Not Before: Sep 21 05:02:19 2026 GMT
            Not After : Sep 23 05:02:19 2026 GMT
        Subject: CN=6ab0ba5c-a315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:da:68:0f:69:d2:e1:f7:2f:99:bc:cb:3b:
                    6b:4e:ea:49:0c:d7:e7:6a:41:dc:25:e2:a7:24:a2:
                    b9:9e:ce:bd:2d:b4:60:f3:47:20:18:d5:e8:3b:c7:
                    bf:39:28:6c:4d:94:a2:dc:9e:22:73:33:f6:81:f6:
                    0b:84:78:91:83:71:6e:17:71:7c:4a:da:3d:fe:14:
                    18:23:a3:54:d9:09:f9:13:0b:f9:ac:58:22:04:25:
                    40:33:14:99:a2:5c:c7:b8:ab:ae:71:ff:f3:70:45:
                    90:af:42:f4:c6:5d:32:43:64:6c:58:5f:76:99:51:
                    4a:99:88:b0:81:7d:ac:94:04:31:4b:12:27:4f:e9:
                    c6:6d:68:76:da:b1:35:0d:67:97:8a:a4:c3:2f:07:
                    09:d3:bf:c7:3d:85:87:5c:bb:03:6c:da:e7:83:bf:
                    11:b0:80:b7:2c:2e:6d:2f:ae:41:e0:8e:e2:f8:11:
                    93:22:b4:3e:be:ab:27:ee:3c:21:a8:c8:00:bb:3c:
                    a0:9a:60:0f:43:75:18:ea:70:fd:05:c1:19:19:58:
                    cd:3a:ec:4a:b6:58:bd:0d:90:12:8d:a8:f8:c9:d9:
                    80:88:a9:01:98:9c:6b:1a:fd:1d:f7:aa:e5:0e:49:
                    0b:b9:38:b8:4c:f9:4c:ad:a1:57:a8:17:09:01:07:
                    98:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:36:F0:AB:19:C7:15:1A:CA:9B:0C:CE:BA:DA:19:33:B6:64:F7:69
            X509v3 Authority Key Identifier:
                keyid:67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e1:6e:1e:74:38:85:f6:23:10:32:d4:c1:f9:22:57:cb:d8:
         b4:ba:46:3f:16:c1:d0:0c:b6:24:aa:a5:de:a5:b5:24:f8:4b:
         e0:54:95:3c:03:f6:20:a7:a6:5e:ab:06:15:02:17:50:00:b1:
         39:a1:8b:71:05:64:c8:d6:64:bc:a7:63:1c:2e:28:5c:45:14:
         34:39:5a:87:94:54:ab:22:b4:fc:a0:ed:64:56:f4:89:35:c5:
         40:e7:a1:33:0c:70:62:99:c7:22:0a:b5:62:0a:d7:6a:4d:33:
         79:0c:6e:b1:9a:8b:35:ec:36:04:e4:d4:9b:ef:b0:2c:8e:01:
         03:8e:db:f9:de:89:2d:e7:03:b1:d3:07:4e:33:4e:a7:98:70:
         14:06:0d:f3:7b:fa:ea:e4:b1:32:17:62:1b:c2:b3:8b:86:be:
         8b:ac:84:3c:f2:08:83:b4:e1:f6:4f:9c:75:82:00:eb:b6:9e:
         7b:e2:a2:3f:6b:16:1c:4f:19:67:fc:b3:b5:ca:bd:7b:a9:b0:
         58:ed:5a:64:c7:28:d1:2b:3c:4b:83:d3:2e:73:5f:d6:b0:50:
         9e:c2:c3:e7:fb:37:f8:60:0f:cc:56:54:68:4c:dc:30:d8:e0:
         7e:3f:a8:9f:6e:b3:01:75:cb:d2:d8:5d:e1:88:40:4b:c6:4c:
         36:b2:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:49:18 2026 by rpki-client