Error: rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
File:                     WNo74zGmEqquT2owY3cEBjrD3UI.mft (raw, json)
Hash identifier:          AVj1qXHyk+1ii2Aovh8ZDO+20zjY9DgmpXUhFIK52Kg=
Subject key identifier:   5F:60:30:DA:2B:BC:F0:AD:BF:75:43:E6:F8:69:53:C2:3A:A0:6E:DE
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Certificate issuer:       /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial:       0447
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
Manifest number:          0422
Signing time:             Sun 20 Sep 2026 03:59:51 +0000
Manifest this update:     Sun 20 Sep 2026 03:59:50 +0000
Manifest next update:     Tue 22 Sep 2026 03:59:50 +0000
Files and hashes:         1: WNo74zGmEqquT2owY3cEBjrD3UI.crl (hash: AG61TztXzDtSU9msnEZp3dt+somYE55W0mEB0aCKf1M=)
                          2: BCF64E3ECFF311F08A0CEAABDAE4EC9C.roa (hash: j7CRom0lOGZ8lIcKQpUnN53ebTJRhvCHiwerxahwuFc=)
                          3: 1475A26ECFF311F096054DA7DAE4EC9C.roa (hash: DIhkt7w9XQYMikWyfPDe9zR1unEC2k2dd5ZETrYVeCo=)
                          4: F85AF57E067211F09411CC9B762E951A.roa (hash: M7iTLJiKvNwSTd9F5Yj4i6rXdd1RJ7bKnAkeW0q5GC8=)
                          5: 6A831B68067311F0A5B3819F762E951A.roa (hash: dHewD/xYlqQhiWTpdXFrkxy+Gj1C9QIhRZsurBV3l/c=)
                          6: 2F1A0898067311F091A5799F762E951A.roa (hash: CNCaOGq5e+fSVQ4wKVSRok1jWDlNhofbmJTl2fwntNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA351AF, serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
        Validity
            Not Before: Sep 20 03:59:50 2026 GMT
            Not After : Sep 22 03:59:50 2026 GMT
        Subject: CN=6aaf5a37-370e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:c6:b6:de:5d:a6:92:12:65:17:9a:8b:bf:
                    af:e8:6b:b0:dc:6b:72:e7:33:86:63:9f:34:97:9d:
                    2e:ef:8e:fd:a1:05:88:7e:b3:cb:87:f3:93:ae:b6:
                    fb:24:1f:26:d4:e8:c0:97:62:7e:62:d0:c4:53:13:
                    1b:53:43:35:36:50:ec:11:6a:3c:37:25:14:db:f5:
                    bd:c4:09:4e:f5:f9:6a:0f:e3:79:a4:82:cd:2e:9a:
                    15:82:ad:6b:39:0c:17:d3:49:28:c7:fe:b4:f9:b3:
                    60:17:9f:75:1e:68:41:c9:c2:a1:f9:b6:76:9c:0a:
                    47:6c:7f:c5:53:c0:a6:8e:4e:98:d4:3d:b4:42:14:
                    43:54:ec:bb:c3:b7:45:57:81:28:db:69:d6:f9:a9:
                    56:49:2c:25:ed:4e:26:54:e8:a2:07:b0:e8:18:76:
                    14:b1:03:bf:d6:20:fc:54:cd:f8:a2:2a:a2:a2:4f:
                    90:7c:d3:95:4a:d9:fb:91:99:64:d4:37:5a:52:5e:
                    87:e7:b3:51:fa:d0:f2:cc:9d:f2:b2:68:f4:5b:4c:
                    a0:4c:68:11:34:df:f7:9c:5f:de:9d:2e:b7:12:ac:
                    f0:0a:b0:18:bd:4a:e1:3b:34:9a:01:b2:e8:6e:2c:
                    da:9c:40:30:22:d7:d8:e2:9b:bb:2a:60:25:83:7c:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:60:30:DA:2B:BC:F0:AD:BF:75:43:E6:F8:69:53:C2:3A:A0:6E:DE
            X509v3 Authority Key Identifier:
                keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:01:1d:f5:bf:40:fa:ce:ee:f2:77:72:ed:b9:bb:65:6c:42:
         08:7c:dc:ea:cf:21:e8:f2:c3:e1:d1:5f:b9:7c:91:26:24:29:
         d5:cf:90:b9:e5:6c:75:5c:62:be:6e:af:dd:68:43:81:72:b5:
         68:ba:58:ab:ff:29:5a:8b:31:1b:8e:3b:7e:64:0e:e1:f3:ed:
         bb:a8:80:a5:a9:e1:0c:8c:3f:a8:98:24:ba:63:a6:ac:46:bd:
         7c:47:f8:c3:b1:8f:b2:ff:db:c5:25:06:ed:b1:23:82:62:8d:
         79:54:de:ba:69:b4:73:ee:a7:e3:0c:84:80:af:3e:18:76:e6:
         7b:8e:2d:16:fb:48:bd:fb:c5:70:a5:93:bc:89:2a:02:b8:a0:
         bb:bf:9c:80:bf:40:99:df:63:fb:6b:c5:6d:5c:9d:71:ab:16:
         9e:7d:dd:71:44:c6:d1:3d:ec:0f:44:dd:ed:c0:75:97:02:87:
         68:89:06:23:40:81:4d:1d:3b:51:f1:b6:4a:eb:9e:2f:4e:b1:
         d4:20:2f:77:5c:2a:ed:2e:d9:cb:03:7f:5e:b9:bb:fb:f5:c2:
         07:1b:56:f2:f2:62:e3:48:c2:72:e3:27:ac:9e:ef:c4:44:2c:
         8f:07:0a:63:59:7b:90:cf:27:46:96:fe:ed:2e:c1:c9:43:c1:
         f5:52:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:18 2026 by rpki-client