Error: rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
File:                     Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft (raw, json)
Hash identifier:          M7F9P4dt0Xfzt/v985tvS6QqUgfAeDhKitKyM/at+Nw=
Subject key identifier:   D6:92:56:05:21:92:AA:91:E6:E5:49:21:60:87:00:CD:28:B9:BB:8C
Authority key identifier: 0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE
Certificate issuer:       /CN=F36F8434AF/serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
Certificate serial:       03BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
Manifest number:          03B7
Signing time:             Sun 20 Sep 2026 04:05:26 +0000
Manifest this update:     Sun 20 Sep 2026 04:05:25 +0000
Manifest next update:     Tue 22 Sep 2026 04:05:25 +0000
Files and hashes:         1: Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl (hash: S7mGlIZMa7ITFdXrtfA+wKAAkPjrGWXiWBPDAvYvQwQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8434AF, serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
        Validity
            Not Before: Sep 20 04:05:25 2026 GMT
            Not After : Sep 22 04:05:25 2026 GMT
        Subject: CN=6aaf5b85-3e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:2b:ad:25:f8:ef:da:95:f4:22:48:d1:8c:
                    e5:47:bb:80:98:67:a3:8b:5d:52:ce:e1:36:db:c7:
                    c3:a7:e0:58:a9:d9:7b:7a:55:07:83:56:c1:be:de:
                    e0:f7:60:92:f6:62:50:1f:e7:53:e4:3e:c4:70:45:
                    bb:fc:30:79:3d:05:25:70:b2:0f:d0:6b:ad:59:84:
                    d6:35:f3:56:a9:44:9d:14:be:99:1b:a6:ef:4e:76:
                    51:91:d1:e4:5d:e0:1f:ed:dd:9b:39:c0:e6:29:aa:
                    27:2a:57:ba:31:74:f3:5a:61:de:b7:61:59:fc:12:
                    56:34:35:d5:29:5d:61:f6:98:3f:09:9a:63:b4:53:
                    15:41:aa:82:56:9f:78:4c:b0:e1:38:80:78:5e:c0:
                    59:a2:b7:f2:18:ff:ec:d2:02:d5:f1:2b:67:75:76:
                    99:10:2a:fe:f8:f4:82:dc:c7:2c:e0:8f:2d:11:57:
                    f2:f8:2c:29:c0:cd:81:c0:3b:04:a0:aa:c7:d9:c6:
                    42:30:0c:0c:d5:f3:f3:14:60:4e:19:e9:bb:cd:d1:
                    57:48:93:66:2a:59:0c:f2:13:ea:04:25:18:60:57:
                    e9:0b:f7:24:b9:47:69:36:ff:c0:96:42:c0:71:2f:
                    72:2f:53:38:04:8f:17:fa:0c:dc:c1:0a:5b:f0:8b:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:92:56:05:21:92:AA:91:E6:E5:49:21:60:87:00:CD:28:B9:BB:8C
            X509v3 Authority Key Identifier:
                keyid:0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:07:57:49:c1:9a:ac:2c:bd:91:b7:d3:91:e1:5d:8a:e4:85:
         92:32:15:bd:a7:76:04:4d:29:09:87:c9:e6:c3:a0:21:bc:18:
         6f:16:b4:ef:e1:bb:42:8c:18:17:22:f8:df:c4:64:d9:4d:08:
         33:74:c1:2e:01:ed:f2:63:6d:db:09:25:3d:af:27:ef:e6:13:
         73:5b:89:43:e8:fe:ca:4b:23:ae:92:6b:ce:05:cd:c9:6e:bb:
         9f:88:02:0f:c2:4a:2e:50:33:c1:01:08:58:26:1d:c1:d7:2b:
         3c:82:7f:bd:c7:9b:47:28:ac:20:72:bc:56:e3:b4:53:a5:4b:
         78:3a:04:0a:f9:27:b0:d5:e6:a5:78:f6:3b:48:5a:ea:33:22:
         f2:5e:75:79:05:0d:a4:15:42:23:d2:18:bd:62:2f:3e:7e:c4:
         ce:59:2c:22:1c:1b:26:c5:6c:c8:81:6f:15:78:31:19:97:c6:
         93:50:e2:40:bc:bc:89:69:a4:f5:1f:66:22:f1:ae:b8:c0:9a:
         e2:94:1a:96:6e:cf:50:d1:66:6f:2b:88:6d:28:af:a8:ee:91:
         fc:d1:45:a9:58:24:c2:bc:f9:e3:52:9c:10:b1:06:3c:5f:27:
         60:72:fd:fa:87:47:7c:cf:26:7d:c6:87:3d:b0:6a:07:2e:91:
         a4:aa:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:49:37 2026 by rpki-client