Error: rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
File:                     TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft (raw, json)
Hash identifier:          jOV9QGw6k4PdKK1Ohj7LswT29HmbO3vDHrl4hSrdLrA=
Subject key identifier:   65:40:CF:60:92:47:AD:4A:46:5F:65:37:CA:F3:2B:CC:F0:20:D2:11
Authority key identifier: 4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
Certificate issuer:       /CN=F36ED8A8AR/serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
Certificate serial:       024A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
Manifest number:          024A
Signing time:             Sun 11 Oct 2026 04:49:40 +0000
Manifest this update:     Sun 11 Oct 2026 04:49:39 +0000
Manifest next update:     Tue 13 Oct 2026 04:49:39 +0000
Files and hashes:         1: TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl (hash: NcdrxTLLf1sM1gnuKIbpxebNqZMowZe2trtBETsTw5U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                          rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED8A8AR, serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
        Validity
            Not Before: Oct 11 04:49:39 2026 GMT
            Not After : Oct 13 04:49:39 2026 GMT
        Subject: CN=6acb1564-3ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:56:57:22:12:fe:c3:51:ae:d6:bc:6d:90:
                    29:e8:0a:52:90:ec:74:a5:8f:a9:6f:87:c3:cd:1b:
                    d2:11:2d:c8:97:79:70:57:c1:22:88:d3:7b:fb:50:
                    ed:ee:48:fe:a0:de:01:b1:c6:a9:5c:96:df:f5:dd:
                    f6:a0:b3:95:d3:81:a8:d2:6f:98:30:44:06:e1:6b:
                    c7:cf:96:73:05:5d:36:e1:76:09:52:2a:50:37:8f:
                    ff:be:e1:c6:f3:cf:e0:bb:11:e6:30:95:3a:b4:f0:
                    69:6e:ba:ef:74:a3:3b:1e:fb:3d:a1:42:84:ae:4f:
                    10:9a:c3:4f:67:58:d6:86:b3:db:ed:8d:6c:ab:37:
                    10:b7:d2:1d:17:30:2f:bc:ab:f7:fa:c5:93:04:d6:
                    e4:34:93:c1:2d:5e:50:2e:13:0a:3e:a7:cd:12:5d:
                    64:8e:5a:66:94:ea:23:42:d4:df:b3:80:3a:5b:cd:
                    4b:40:b0:b4:b5:cf:a6:98:d0:d2:30:14:3b:70:05:
                    a9:46:57:4a:6d:56:da:06:a5:d0:d3:23:2d:ec:4b:
                    97:e1:1b:7b:33:fc:cd:51:5f:62:87:2b:e3:96:00:
                    eb:8c:17:a3:ba:59:fd:66:f7:5f:f6:72:2b:5a:b4:
                    9d:86:a4:0c:6a:9c:48:25:94:84:df:41:8e:e5:91:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:40:CF:60:92:47:AD:4A:46:5F:65:37:CA:F3:2B:CC:F0:20:D2:11
            X509v3 Authority Key Identifier:
                keyid:4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:40:11:9d:b4:bc:10:c7:c8:48:aa:20:08:02:30:3f:50:c4:
         47:2c:65:01:69:f0:18:72:16:12:70:50:b2:d0:8c:51:1b:b7:
         8e:55:a7:9e:4a:54:36:8a:bc:a5:4c:c1:c4:d2:8a:bc:e4:13:
         49:f6:cb:3e:8e:d0:93:46:e4:0a:3a:a9:5b:c1:53:06:cc:67:
         d1:9a:3c:f0:62:ff:27:b7:6f:a3:0a:25:36:1d:b6:40:b5:89:
         f9:6d:68:56:8b:2a:a1:15:0a:ab:cc:a9:7a:6e:cb:f7:d8:c7:
         4b:42:d6:a2:9b:31:40:fd:c2:53:08:78:74:bb:d5:54:63:80:
         3d:42:db:b5:cb:f4:72:a2:98:5a:ff:44:f1:bd:77:43:96:4b:
         f6:fc:88:f1:25:ee:13:eb:d1:67:09:ea:a3:22:3e:78:ca:ab:
         0a:ed:70:28:7c:e0:c9:d2:55:fa:4b:87:1f:4a:8f:46:8e:d6:
         fa:cb:a2:26:41:81:ba:36:91:7a:9a:9c:b5:0b:8f:f1:58:08:
         f4:7c:14:5a:60:5b:39:ac:3a:f7:f4:2b:fa:e7:56:c4:4f:8d:
         a4:3c:a4:69:a9:57:cc:91:6b:2a:3f:0f:02:e0:48:e9:63:54:
         a6:c7:9c:9b:69:c4:9b:12:b2:fa:3c:a4:c4:17:d3:de:b2:07:
         9d:13:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:43:37 2026 by rpki-client