Error: rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
File:                     5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft (raw, json)
Hash identifier:          UKdsY34uKx2Dr//eXVJT+cmpLvSOnX2OfGV+31wGHQQ=
Subject key identifier:   BE:F1:75:11:40:72:C4:15:37:AA:CB:30:70:EF:2B:6E:05:4D:3C:0E
Authority key identifier: E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Certificate issuer:       /CN=F36CC8EBRI/serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
Certificate serial:       0692
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
Manifest number:          0690
Signing time:             Wed 23 Sep 2026 02:40:45 +0000
Manifest this update:     Wed 23 Sep 2026 02:40:44 +0000
Manifest next update:     Fri 25 Sep 2026 02:40:44 +0000
Files and hashes:         1: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl (hash: JPt/Y61CNM0LRbyjZK3ndnjImIwVm0orUJgA9MHP4I8=)
                          2: A0D8F85C8EFF11F1A65138F7CE1D38B0.roa (hash: teptVHQ0uPHPGBYFMoadvyUXi00pXKRL48ZoHJLP0Cs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                          rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1682 (0x692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBRI, serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
        Validity
            Not Before: Sep 23 02:40:44 2026 GMT
            Not After : Sep 25 02:40:44 2026 GMT
        Subject: CN=6ab33c2d-6ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:68:27:32:03:df:95:8b:05:12:44:06:72:
                    9e:f4:3b:c7:c8:08:e6:5e:32:22:a4:bd:4e:51:85:
                    8c:c8:c9:a4:5d:d1:0f:d0:0d:f8:44:9b:12:39:bb:
                    27:95:6e:e4:ad:55:0e:1b:f5:ec:24:63:1b:51:fb:
                    57:ac:01:24:9b:17:e1:90:30:4b:7d:33:b8:a6:d0:
                    c6:44:d7:22:27:07:59:af:3d:79:cb:f5:61:4a:7c:
                    c5:6a:b9:99:e7:b1:ab:aa:54:73:11:a3:0a:41:b1:
                    c5:d8:96:ae:7e:b8:85:1e:65:0c:10:50:23:20:d6:
                    a4:f7:12:de:6e:be:1c:3f:18:2e:4b:13:a4:a2:f4:
                    87:97:c2:da:b3:17:e7:90:b3:a6:48:d8:b3:a3:f8:
                    81:ed:10:75:6b:fa:f9:e1:be:33:90:b4:06:b3:1c:
                    a5:07:25:48:8b:e0:15:fe:6b:ec:2b:24:27:56:2d:
                    6b:71:9a:73:16:04:b7:fc:92:91:d6:e0:a0:27:b4:
                    52:3f:13:fe:b8:36:48:28:8c:1d:fe:ff:de:2e:28:
                    f8:3e:57:ec:de:2a:cf:a9:0e:89:eb:b2:35:61:5d:
                    5e:41:65:70:f7:d9:3c:ad:b0:05:c2:48:df:64:de:
                    96:98:1d:90:74:f5:cf:53:da:40:67:83:ba:b8:69:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F1:75:11:40:72:C4:15:37:AA:CB:30:70:EF:2B:6E:05:4D:3C:0E
            X509v3 Authority Key Identifier:
                keyid:E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:09:46:bb:fa:28:88:8f:2a:12:5f:23:d4:40:8a:69:4d:86:
         8c:38:13:1c:ce:1f:e0:f6:62:68:3d:3f:45:1a:51:ba:08:7a:
         8b:74:e1:96:b9:1f:b8:0d:e0:5d:64:62:87:8a:e0:e6:8a:b7:
         e0:c4:d5:f4:84:b3:0f:7b:53:c4:e7:b3:4c:35:b7:f1:55:43:
         ad:64:4f:76:4b:8c:0b:ac:19:1e:ac:ae:2a:4d:e1:bf:33:3e:
         5c:37:6a:81:1e:a4:d9:31:c1:5b:ae:cc:21:01:cd:2a:6c:85:
         ea:02:1e:3c:59:f1:f0:9f:ff:ee:f4:08:2a:e7:82:6c:8a:07:
         66:9a:f0:07:38:b3:aa:fb:70:8c:d6:bc:b6:f6:2b:90:a1:0d:
         37:b9:cf:cd:94:3e:59:16:a4:83:4d:31:13:72:b0:90:a7:c7:
         2e:24:5a:40:bb:22:7d:94:dd:db:3f:01:fb:e8:8a:45:db:d2:
         71:4a:b2:69:b2:2d:70:ed:3e:89:48:d7:b8:1a:3e:13:aa:7a:
         95:a4:36:4e:b3:4e:cd:24:8e:45:3a:a2:d4:66:3b:4e:8d:f4:
         71:65:a1:52:66:0e:79:73:29:65:32:41:d8:05:08:91:76:6f:
         65:9a:d1:0e:12:a9:9a:e6:cf:b1:03:f6:08:ec:c6:aa:50:05:
         19:3d:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:59:30 2026 by rpki-client