Error: rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft
File:                     nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft (raw, json)
Hash identifier:          YQKM/HuXqCZAEpMFsUybQsjwNd22jnXykm+H4o9Mu6s=
Subject key identifier:   53:95:91:48:6E:B8:90:F0:96:97:B5:75:CA:80:EA:C8:3B:3B:DD:9A
Authority key identifier: 9D:6F:81:7C:FE:DF:6B:D0:9D:9A:4A:96:5E:14:8E:60:50:6F:3A:6E
Certificate issuer:       /CN=F36D9927AF/serialNumber=9D6F817CFEDF6BD09D9A4A965E148E60506F3A6E
Certificate serial:       B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nW-BfP7fa9CdmkqWXhSOYFBvOm4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft
Manifest number:          AE
Signing time:             Sun 20 Sep 2026 05:32:13 +0000
Manifest this update:     Sun 20 Sep 2026 05:32:12 +0000
Manifest next update:     Tue 22 Sep 2026 05:32:12 +0000
Files and hashes:         1: nW-BfP7fa9CdmkqWXhSOYFBvOm4.crl (hash: 1418MHsZUndaw7QkaxBLdyb9AuH/a/0f/86dDPZP8ws=)
                          2: B60F2378335A11F18E8191B1CE1D38B0.roa (hash: PSeiG4gCj8s4yIE58jv3DbNRgxuPJSXI1vD2+d6k2Yc=)
                          3: F278A9C4335A11F19639E4B1CE1D38B0.roa (hash: UU0V0NfzzH+dIdfJ5GgUO+sS3Xy/jBQNuHs7Gk+oVuE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nW-BfP7fa9CdmkqWXhSOYFBvOm4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9927AF, serialNumber=9D6F817CFEDF6BD09D9A4A965E148E60506F3A6E
        Validity
            Not Before: Sep 20 05:32:12 2026 GMT
            Not After : Sep 22 05:32:12 2026 GMT
        Subject: CN=6aaf6fdd-6ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:a9:df:57:dd:15:83:75:72:c6:69:e4:8f:
                    94:56:e1:47:61:c3:52:71:ca:2d:d1:07:21:e8:a2:
                    83:46:31:b0:51:e8:c8:34:69:ea:d6:35:13:2a:10:
                    ed:89:fd:e0:e0:e0:16:e1:73:0a:e7:46:6f:59:66:
                    d3:ce:4d:e1:a1:dd:16:87:d5:42:ae:3b:bc:8e:3b:
                    e1:c4:52:77:39:12:91:e0:ad:bf:28:76:64:19:9a:
                    69:23:2d:04:ef:b4:14:88:c0:c2:3c:4b:9c:5b:47:
                    6b:1b:2a:e0:fc:83:ff:0d:f3:18:4b:bb:0e:0d:6a:
                    ab:3a:59:25:7e:44:65:fe:3b:c7:99:46:f0:2b:61:
                    f7:20:36:6f:f7:07:87:8c:d0:d9:29:f0:61:3d:be:
                    1f:c4:7b:4b:c0:85:48:9a:e3:71:21:f3:ac:7f:21:
                    57:76:97:fa:3f:4e:40:b7:7d:8d:03:2c:0e:04:ca:
                    da:23:fa:5c:1e:67:04:44:a0:b3:91:a8:fb:d2:06:
                    7c:6f:59:bc:bb:1a:2d:d4:ba:1d:7e:7b:10:d7:d5:
                    f5:f2:bc:8d:e0:82:fb:8e:bb:7b:81:69:27:71:36:
                    d3:16:bd:3f:72:dc:08:4e:3b:4f:99:52:03:66:ee:
                    11:d5:48:7a:c5:39:e5:2c:de:55:70:84:3f:be:32:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:95:91:48:6E:B8:90:F0:96:97:B5:75:CA:80:EA:C8:3B:3B:DD:9A
            X509v3 Authority Key Identifier:
                keyid:9D:6F:81:7C:FE:DF:6B:D0:9D:9A:4A:96:5E:14:8E:60:50:6F:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nW-BfP7fa9CdmkqWXhSOYFBvOm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:39:78:6d:11:79:d1:50:fc:6a:9e:61:05:06:18:86:83:91:
         24:18:af:48:ba:dd:3f:23:ae:de:e4:e0:9c:a6:f0:f6:87:b8:
         ec:32:44:10:f9:0e:bc:ae:98:bd:39:4a:d4:b0:f2:23:cf:dc:
         81:5b:2c:00:35:1a:d4:70:da:e8:4a:06:3d:4a:38:85:e3:89:
         8c:14:b9:89:93:8f:5d:1c:53:8a:5c:e6:5c:1b:c9:90:a6:8d:
         06:24:cf:4c:96:27:71:d6:f8:74:6c:c3:61:2b:a8:07:33:3f:
         32:4f:b5:bb:44:8f:ab:e9:53:5e:10:af:9d:8a:3e:07:55:f1:
         82:ac:df:ae:2f:e1:5f:61:bc:49:61:e6:60:f2:2a:7d:fd:e9:
         cd:1e:54:96:9f:b9:21:4d:2b:88:2e:71:51:74:43:11:e7:52:
         a9:cb:49:55:9a:46:02:59:ae:5a:d1:45:ee:d9:1a:d0:69:f9:
         60:cb:3a:4a:6c:cf:1e:1b:18:db:b5:2c:ed:a5:60:4f:de:98:
         e7:86:af:d5:02:51:ab:94:38:52:77:81:93:03:c2:23:1d:27:
         40:04:f7:eb:4e:51:d7:d7:39:ed:5a:7c:0d:08:5f:3d:cd:e4:
         f9:4a:17:8d:44:35:5d:fd:bd:9d:7a:80:e2:98:5f:06:17:9e:
         0a:bd:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:06 2026 by rpki-client