Error: rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
File:                     _JRbBmroeaYb32_LGIWcV6LnFtA.mft (raw, json)
Hash identifier:          P1TWiXhbyfpfiA2lNuzKhM2fAj+XNyF8fNRSbGfQZ5U=
Subject key identifier:   9B:4C:98:EA:4F:C8:E5:FC:C1:3A:85:F8:26:C2:52:97:5A:BA:03:79
Authority key identifier: FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
Certificate issuer:       /CN=F36D518DAF/serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Certificate serial:       07CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
Manifest number:          07C1
Signing time:             Mon 21 Sep 2026 02:13:26 +0000
Manifest this update:     Mon 21 Sep 2026 02:13:25 +0000
Manifest next update:     Wed 23 Sep 2026 02:13:25 +0000
Files and hashes:         1: _JRbBmroeaYb32_LGIWcV6LnFtA.crl (hash: 8/sooUzjg+GQwk5P5uUjvUaV3uUcUedbQfOrOpUy/gY=)
                          2: 9F6E3B5262BE11F1A7A87DD0CE1D38B0.roa (hash: XAczzR05HtEJaDK7Z4f7uYjqTSeZwYgvHnd1G3OffkY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1994 (0x7ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D518DAF, serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
        Validity
            Not Before: Sep 21 02:13:25 2026 GMT
            Not After : Sep 23 02:13:25 2026 GMT
        Subject: CN=6ab092c6-a5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:2c:7d:d3:89:33:7c:94:40:6f:3a:4c:80:
                    bc:20:2e:c0:7f:ef:85:69:da:18:13:9c:8c:c3:3a:
                    b4:37:4e:1c:04:14:00:03:b2:aa:6d:ec:6f:0d:7f:
                    39:3a:c7:91:a7:60:9e:84:ee:db:a1:6c:33:cc:99:
                    a4:17:a8:f2:2a:dc:32:4d:5d:8e:da:1c:ae:01:f7:
                    fe:c1:05:11:10:71:4c:fa:ac:ff:c1:e2:5e:bf:b4:
                    48:5c:63:d1:4b:fe:73:ae:88:af:eb:1e:42:e9:c5:
                    31:c2:04:2a:19:ea:9d:76:e4:4f:6a:d5:5a:f9:4a:
                    fd:d7:92:4b:ea:65:f0:bf:d6:fd:a1:d9:a4:95:9f:
                    22:6a:6a:a0:1b:de:38:ff:f9:00:7c:de:36:b5:22:
                    bf:1a:a2:ef:6e:9f:d2:e3:82:06:8b:4a:32:93:1e:
                    5b:70:b0:00:8f:c2:67:e3:28:02:cb:66:c5:25:7a:
                    22:4f:b8:a5:40:10:56:f3:50:00:03:d6:82:a5:e6:
                    2a:1c:14:af:25:46:1b:a0:2a:a9:61:af:94:b9:5a:
                    17:67:88:ba:c5:ce:bf:1f:20:d7:6c:03:70:01:d6:
                    b1:7d:6a:56:84:c3:b8:3c:9c:05:9a:e5:02:bc:1e:
                    b1:0a:e2:5b:fc:29:d1:0f:27:e4:53:89:4a:06:a0:
                    26:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4C:98:EA:4F:C8:E5:FC:C1:3A:85:F8:26:C2:52:97:5A:BA:03:79
            X509v3 Authority Key Identifier:
                keyid:FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:80:a9:c6:a7:f9:c2:eb:dd:17:99:40:dd:cc:89:e7:55:6c:
         d5:2c:d8:fe:e2:32:2c:c2:86:43:d4:8a:05:b7:4c:ff:b0:25:
         01:ec:4f:66:69:34:f1:95:1e:c3:0c:62:00:26:0d:e5:0a:c2:
         9f:b8:db:34:81:cd:8e:28:7d:72:f6:2e:7d:6b:31:2c:3e:e2:
         b0:df:bb:47:5e:4e:cd:ee:18:66:53:74:a4:48:39:7f:bd:7c:
         5e:26:51:c3:6d:c2:76:f8:b3:bd:d6:37:a4:28:af:85:f9:f5:
         8f:52:7b:ee:a2:be:5b:9c:6c:40:dc:18:01:a6:f5:ed:c6:ce:
         07:ce:8f:f5:62:98:5e:c5:0e:c6:83:89:16:56:57:e8:d8:50:
         0d:d4:26:72:d7:70:2f:6d:08:5a:42:27:22:9f:26:70:f1:85:
         68:af:ce:03:0d:ae:80:55:96:bd:d2:8f:46:72:82:47:7e:5e:
         3f:b4:8a:af:82:e9:f8:f9:22:9a:ff:6b:64:9f:ce:91:17:a0:
         43:0d:c1:13:43:49:2b:38:c8:b8:cc:33:a0:0f:00:ec:f4:f8:
         68:74:67:ed:da:d2:c4:26:d0:49:72:19:59:4c:e5:4b:89:c6:
         e6:e5:38:5e:3f:6a:2e:77:84:ea:1d:2c:02:5a:4b:aa:d3:4e:
         97:a6:b4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:56:22 2026 by rpki-client