Error: rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
File:                     Wob5iKEjH4bJcjMShVh-z4ZL25A.mft (raw, json)
Hash identifier:          vsbpo8I7r+6uYn0DTR/5G5/+DPKwLlp2AdoP0xvXWl0=
Subject key identifier:   14:49:40:43:64:16:68:56:B2:79:DB:CB:84:37:4A:A8:F3:26:38:98
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Certificate issuer:       /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial:       0A84
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
Manifest number:          0A7B
Signing time:             Tue 13 Oct 2026 01:33:15 +0000
Manifest this update:     Tue 13 Oct 2026 01:33:14 +0000
Manifest next update:     Thu 15 Oct 2026 01:33:14 +0000
Files and hashes:         1: Wob5iKEjH4bJcjMShVh-z4ZL25A.crl (hash: ZBhrP6Br7PYanBdikNHYnO9BR4oAVXX31vubiClKIMo=)
                          2: 22D54F2A873211F1A1DD25DBCE1D38B0.roa (hash: 6YJKt+6KEiWJEqvrJ2OOcpZGMxLBjGJJceHlPGGeI9A=)
                          3: CA99C59C873211F1921B7CDDCE1D38B0.roa (hash: J8mkXybFE9u2dG4g/6rMiX/R0vnwSK7ht7HLC5KmFUo=)
                          4: F7E20784873311F1B7E9E2E3CE1D38B0.roa (hash: z+CNLO3NbOZrGtfxZOkyGy0Et3xGLuxNkIJsF5sFrbs=)
                          5: 5F85225A873311F19C71D2DFCE1D38B0.roa (hash: FLClJViDm2ygpv43e3sB4wxskOHtddicfBdPxrJHMUo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2692 (0xa84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA13FAF, serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
        Validity
            Not Before: Oct 13 01:33:14 2026 GMT
            Not After : Oct 15 01:33:14 2026 GMT
        Subject: CN=6acd8a5b-c66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:d8:6e:d4:89:77:47:d7:1f:87:14:1f:f4:
                    a4:da:78:07:90:01:a6:ab:00:6c:97:85:98:bd:aa:
                    a0:70:23:d1:ab:e4:c2:e3:81:10:d0:7f:27:3b:04:
                    72:8a:ed:3a:be:a8:7a:ba:bd:6b:f1:df:20:65:da:
                    30:f6:9e:b6:b0:f3:7e:0b:ca:f7:66:b9:c3:f2:71:
                    1e:a8:69:59:83:75:9d:ef:74:0f:bf:1a:e3:e4:3d:
                    3f:9d:60:5a:4d:cb:23:e0:8c:8c:a4:b2:7d:58:fa:
                    3a:3c:10:6a:76:bc:fa:23:03:14:73:d3:10:56:1a:
                    ea:39:b7:33:f2:50:28:96:11:e2:54:b0:7d:37:66:
                    6d:4a:02:56:07:85:b7:58:92:9f:a9:97:fe:2d:7e:
                    44:18:42:03:64:b4:74:e2:97:55:8b:23:c2:67:2a:
                    16:f5:b0:0b:b2:8f:2d:a1:98:d2:cb:17:38:8c:17:
                    12:36:e4:b2:e9:27:3a:7f:8e:56:25:f3:02:06:af:
                    d4:6b:79:52:0d:32:be:84:57:ce:49:7d:a4:8a:21:
                    ea:63:3d:3f:5e:e5:82:bc:60:44:64:3b:3b:6b:4f:
                    51:df:97:19:da:7b:2b:4e:2f:b7:d1:ab:23:f2:a4:
                    c8:27:a9:61:3b:a6:cb:4f:85:89:e2:15:b7:ef:97:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:49:40:43:64:16:68:56:B2:79:DB:CB:84:37:4A:A8:F3:26:38:98
            X509v3 Authority Key Identifier:
                keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:cd:3d:6e:13:f1:30:e3:0d:c8:ed:38:14:51:82:68:89:db:
         2e:30:0c:12:6f:db:1b:1f:f0:7f:ca:2b:93:6d:eb:48:b1:a6:
         06:a8:14:e0:11:a0:a2:9b:02:1d:ce:8c:8a:f1:fd:67:f1:99:
         b3:50:91:10:a2:07:23:76:2d:1d:ee:ad:2a:67:bc:9d:21:ae:
         b4:ed:95:70:ac:fa:57:2c:a2:db:57:eb:8e:76:40:38:99:9c:
         89:ef:74:16:7a:24:56:e2:a2:52:3b:0e:eb:e1:a3:3c:9d:8d:
         40:67:bd:7d:07:17:b1:ac:41:83:b9:f9:c8:6d:7d:0a:30:df:
         8e:9a:1e:72:a2:c2:e0:b1:cb:80:1b:c9:e7:82:52:a8:46:36:
         2e:fc:0a:96:9f:58:75:ec:fc:dc:c3:71:81:2d:02:65:39:59:
         78:75:f0:54:22:f4:50:ce:79:02:75:9d:df:e5:57:5f:1d:b3:
         44:89:b9:20:33:c6:13:bb:95:57:a0:93:f2:8b:25:1b:f8:10:
         b8:5c:34:da:95:3f:69:71:12:12:0c:06:39:86:94:a2:02:ae:
         a5:b3:d6:ee:84:2a:37:94:af:63:99:7c:bb:58:06:7f:7b:ab:
         be:00:87:24:44:4b:2e:2c:46:71:bf:0b:dd:af:38:da:4d:ad:
         c1:30:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:23:49 2026 by rpki-client