Error: rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
File:                     -0jt8CFBI-P1CPl-PyqK-V2JNXk.mft (raw, json)
Hash identifier:          +iajX2uHsQIp6rDMgrPX6eZiq34+kkOewVAbABIv3TQ=
Subject key identifier:   0C:16:4C:E5:FC:05:E9:90:5D:C5:07:44:EE:7A:63:D8:DE:1C:30:51
Authority key identifier: FB:48:ED:F0:21:41:23:E3:F5:08:F9:7E:3F:2A:8A:F9:5D:89:35:79
Certificate issuer:       /CN=F36EEB6BAR/serialNumber=FB48EDF0214123E3F508F97E3F2A8AF95D893579
Certificate serial:       026A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
Manifest number:          0269
Signing time:             Sat 26 Sep 2026 04:45:36 +0000
Manifest this update:     Sat 26 Sep 2026 04:45:35 +0000
Manifest next update:     Mon 28 Sep 2026 04:45:35 +0000
Files and hashes:         1: -0jt8CFBI-P1CPl-PyqK-V2JNXk.crl (hash: NHqBhHwyDGzFLEGU7bE1nj8iE7k46iUA0wEle2kwBT0=)
                          2: 6DA243DEDCE111EF81D2DCA3762E951A.roa (hash: WNGwoowengyDdO9xPLt8TfFNLhgBtMLoD0A1CFD7WaM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
                          rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 04:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EEB6BAR, serialNumber=FB48EDF0214123E3F508F97E3F2A8AF95D893579
        Validity
            Not Before: Sep 26 04:45:35 2026 GMT
            Not After : Sep 28 04:45:35 2026 GMT
        Subject: CN=6ab74df0-d6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:ab:95:78:c6:98:23:7a:9d:ed:f4:26:31:
                    4f:3a:d0:84:84:6b:8f:67:ca:de:14:5e:69:6c:bb:
                    1c:af:1f:cc:ef:ab:09:38:17:1f:3e:ca:1b:0a:2e:
                    2f:56:20:81:41:ee:64:24:e3:5b:82:18:77:a3:09:
                    ce:5f:ab:a9:00:1b:a0:c9:75:df:63:56:58:3e:f1:
                    6b:42:af:2d:da:00:13:7e:f9:1e:63:13:fd:6a:c7:
                    8d:e5:78:0a:8e:06:7b:40:db:bb:80:dc:6c:90:19:
                    a6:8f:a3:70:11:ff:59:68:98:4b:2c:eb:46:a2:9d:
                    13:67:51:28:e9:43:b8:bf:ee:2c:cf:41:83:a4:55:
                    8e:5b:11:19:3c:68:16:ba:12:2f:30:19:65:65:9e:
                    8f:06:b5:61:3a:3e:36:a5:74:25:f4:c5:6e:fa:b3:
                    49:b2:bd:a9:5d:61:ff:76:9c:98:b3:8c:73:c3:72:
                    ef:55:67:02:df:9b:47:1a:f0:77:21:93:be:6d:88:
                    66:8e:2f:ab:c9:31:be:8b:7b:82:58:13:d7:58:59:
                    9e:96:ac:7e:b3:16:5b:04:fe:bc:d4:48:6c:a5:ae:
                    50:04:bc:86:7d:2c:5f:28:d4:b5:fc:30:9b:88:08:
                    1d:f4:f2:e4:97:70:9b:5f:c8:a5:49:75:7f:be:5e:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:16:4C:E5:FC:05:E9:90:5D:C5:07:44:EE:7A:63:D8:DE:1C:30:51
            X509v3 Authority Key Identifier:
                keyid:FB:48:ED:F0:21:41:23:E3:F5:08:F9:7E:3F:2A:8A:F9:5D:89:35:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:51:25:b8:22:43:e7:a8:ab:8e:49:8e:17:33:17:32:7e:
         e9:4f:d0:0e:9d:8a:1e:c4:64:ad:d7:6a:b3:aa:00:9d:60:d4:
         be:2c:66:24:32:ca:85:9a:83:3e:bf:97:5e:fa:ac:ce:34:d1:
         17:e0:80:c6:06:76:e5:4a:c9:62:ed:f2:bf:17:80:8e:8e:01:
         b1:68:2c:86:10:bf:13:1c:cc:a1:74:04:1c:8a:3d:02:67:6c:
         11:e5:97:3a:ab:7d:82:cf:1f:20:33:77:2c:c6:0f:3f:ef:99:
         c2:d6:3a:1c:0b:4b:dc:69:d6:c3:e4:9c:c8:d6:4b:11:7b:99:
         21:c9:44:2f:02:25:8c:eb:ee:a1:b2:e7:43:25:8c:6f:cf:db:
         87:f7:08:8f:8b:4a:13:d1:c5:f1:e5:5e:ec:d2:3a:b0:82:32:
         43:15:81:fc:81:a1:71:b5:64:84:47:ea:7b:05:54:b6:5b:00:
         1e:a5:f0:aa:f1:be:22:3a:5f:98:ea:c2:d1:5b:4c:43:88:fe:
         05:79:87:8f:96:b2:1f:10:f0:a1:92:4d:f6:ff:d4:7c:8d:78:
         e1:d0:ff:a4:06:19:1b:6e:36:59:69:7f:88:8c:8b:17:13:4f:
         a1:da:cf:2b:07:2f:11:7c:53:4f:b4:44:12:bc:0c:d7:92:55:
         e9:67:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:25:11 2026 by rpki-client