Error: rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
File:                     dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft (raw, json)
Hash identifier:          cIJR1si6tH5zHfboZGeXYAECvpB4Xk7GwgdO7h7IlIM=
Subject key identifier:   E3:7A:61:D4:88:5F:9A:FF:EB:6E:25:8C:D1:A0:1F:2E:CC:68:A8:E7
Authority key identifier: 74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33
Certificate issuer:       /CN=F36BE2EDAF/serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
Certificate serial:       056E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
Manifest number:          0569
Signing time:             Sun 20 Sep 2026 03:11:00 +0000
Manifest this update:     Sun 20 Sep 2026 03:10:59 +0000
Manifest next update:     Tue 22 Sep 2026 03:10:59 +0000
Files and hashes:         1: dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl (hash: 59Cah2geKfG//Has2CxYQT8570+u2PKaAWgXIMCdWEo=)
                          2: ADB9B708995B11F1A1CA01C8CE1D38B0.roa (hash: cXwKEysGRT5pt4r3qpVk9S3HdJJILQ9myg0ojU6TlsY=)
                          3: 9176B58E930A11F197EC0BF8CE1D38B0.roa (hash: jkloJ8NZkDcRysRhP2DpgfXEGyp6bqcjV2iMQGomaxQ=)
                          4: D8B2D44EBB0311F0BB5AE3D6DAE4EC9C.roa (hash: 9nS9/qZCYlRlsFfFJabMOal4M3j3reJuxpTuSFn2jwk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAF, serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
        Validity
            Not Before: Sep 20 03:10:59 2026 GMT
            Not After : Sep 22 03:10:59 2026 GMT
        Subject: CN=6aaf4ec4-cae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:eb:31:93:27:54:93:c3:ea:00:5f:95:ac:
                    13:13:fb:4c:10:ed:68:85:ba:2f:22:07:be:08:37:
                    96:c1:97:e4:69:88:bf:aa:b1:28:6a:38:5b:07:78:
                    67:17:f4:25:a0:63:c8:68:66:e7:bc:82:85:a1:2d:
                    00:12:50:e3:8d:2a:e1:32:fb:d1:93:16:6e:6c:97:
                    0b:d7:a9:57:82:fb:14:e0:c1:30:2b:86:b0:09:d5:
                    d5:99:9b:f9:11:99:a3:b9:43:13:8d:b2:1e:72:9c:
                    d8:2b:39:fc:3b:24:cd:41:a0:f1:0b:1f:85:10:bc:
                    5e:22:ce:38:45:e9:71:ea:a1:b3:b3:df:33:ed:62:
                    ef:45:fa:f4:0e:1a:c0:34:09:5e:f8:dc:60:d6:64:
                    74:71:2d:b3:00:f1:4c:4a:25:df:d0:66:bb:83:01:
                    ef:d9:d6:00:14:f1:08:79:85:7a:09:7f:28:9f:1b:
                    06:e6:c8:ab:b0:92:76:bf:16:de:5d:5f:82:18:1e:
                    dd:11:21:58:f9:f9:37:95:fc:37:2c:b9:98:24:ff:
                    45:8c:8a:4e:2d:84:8f:72:4c:83:90:a4:dc:f1:a5:
                    34:91:b8:9a:cb:26:56:af:9f:a1:08:1a:37:78:25:
                    d3:49:51:53:7c:58:17:ec:db:17:5a:ce:c0:3a:c8:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7A:61:D4:88:5F:9A:FF:EB:6E:25:8C:D1:A0:1F:2E:CC:68:A8:E7
            X509v3 Authority Key Identifier:
                keyid:74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:06:fd:6a:d5:cb:4b:dd:7a:ec:0c:ad:81:05:2b:32:98:0c:
         ca:83:43:3f:b2:8e:b4:96:7c:f6:6c:50:88:78:fc:fd:6a:a7:
         5d:cf:19:91:3b:2a:fb:d8:53:d2:e1:8d:cf:69:fa:09:c9:98:
         48:c8:0b:e6:51:b0:a4:9f:19:49:27:36:59:e9:2a:33:5f:50:
         7a:e5:20:fe:1b:b4:ed:c1:23:da:25:74:ca:61:5d:1a:91:7a:
         d3:7c:80:22:76:c3:fd:a6:f4:01:27:f7:3f:07:a1:94:3d:37:
         25:43:4d:a1:02:03:0b:7c:74:16:77:7b:97:d1:2d:32:15:58:
         fe:38:98:cc:9f:10:e6:33:f3:f3:9e:cb:a1:96:a3:b8:fd:3a:
         7b:0c:bf:25:1e:96:96:f3:e8:d7:bd:47:bf:65:01:f7:77:ef:
         ac:18:62:67:41:57:b7:c8:23:6c:b6:f3:f2:07:68:40:f3:2a:
         86:6f:04:5a:19:7e:45:c8:23:61:98:d9:5e:54:99:9a:dd:fe:
         d9:1a:8e:55:77:f1:7a:fe:c1:1b:f7:aa:be:27:a4:e9:f6:e0:
         1e:1c:95:0a:cb:42:bf:8e:7b:82:0b:37:0f:78:60:95:94:95:
         63:8f:94:a7:70:c5:b7:2a:2c:9f:1f:34:30:6b:f3:86:e7:25:
         a1:0d:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:35 2026 by rpki-client