Error: rpki.afrinic.net/repository/member_repository/F36FA5EA/0B1437CA38B211ED8B64E4DBF1222468/Pct5xzhsFKacQ1XzTDvFs09ES64.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA5EA/0B1437CA38B211ED8B64E4DBF1222468/Pct5xzhsFKacQ1XzTDvFs09ES64.mft
File:                     Pct5xzhsFKacQ1XzTDvFs09ES64.mft (raw, json)
Hash identifier:          N8ptA58Jjt8+X+Oxnh7YbV10723STugZ60zPw31aGOo=
Subject key identifier:   7E:05:71:8F:26:90:68:30:EB:A4:87:13:49:A4:30:9F:D9:D3:A5:C6
Authority key identifier: 3D:CB:79:C7:38:6C:14:A6:9C:43:55:F3:4C:3B:C5:B3:4F:44:4B:AE
Certificate issuer:       /CN=F36FA5EAAF/serialNumber=3DCB79C7386C14A69C4355F34C3BC5B34F444BAE
Certificate serial:       05E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Pct5xzhsFKacQ1XzTDvFs09ES64.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/0B1437CA38B211ED8B64E4DBF1222468/Pct5xzhsFKacQ1XzTDvFs09ES64.mft
Manifest number:          05E1
Signing time:             Tue 22 Sep 2026 03:00:00 +0000
Manifest this update:     Tue 22 Sep 2026 02:59:59 +0000
Manifest next update:     Thu 24 Sep 2026 02:59:59 +0000
Files and hashes:         1: Pct5xzhsFKacQ1XzTDvFs09ES64.crl (hash: E/u5awzNoFeUbfXwyEuvhQ26gx5Z1MwfqshTt3ge8zg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/0B1437CA38B211ED8B64E4DBF1222468/Pct5xzhsFKacQ1XzTDvFs09ES64.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/0B1437CA38B211ED8B64E4DBF1222468/Pct5xzhsFKacQ1XzTDvFs09ES64.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Pct5xzhsFKacQ1XzTDvFs09ES64.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAF, serialNumber=3DCB79C7386C14A69C4355F34C3BC5B34F444BAE
        Validity
            Not Before: Sep 22 02:59:59 2026 GMT
            Not After : Sep 24 02:59:59 2026 GMT
        Subject: CN=6ab1ef30-47d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:f8:f7:15:95:f8:f4:09:e9:d1:4f:75:e9:
                    22:21:f2:f2:ec:e9:c2:a9:5f:02:c5:29:3c:ca:95:
                    03:a5:f8:c2:da:d5:95:34:5c:35:3f:6f:70:9a:6a:
                    52:50:b7:2e:66:72:10:28:44:08:c7:7e:c2:3f:02:
                    18:ac:f6:48:85:d1:4c:65:4d:ac:56:1a:1d:99:c0:
                    4f:93:49:20:79:89:bd:72:c2:7b:d5:2f:87:7b:4c:
                    79:7e:47:25:1a:1a:46:c4:21:4d:8c:89:e6:35:04:
                    a4:42:a4:98:21:76:22:d4:67:85:a2:b8:89:38:4e:
                    69:fe:3a:49:0d:c8:ee:94:7c:e0:6e:f8:8d:4a:e4:
                    a8:d5:20:3a:7d:42:b3:58:12:13:d2:ef:77:56:ad:
                    9c:ba:61:fd:a0:9f:85:8b:d6:f4:de:a9:78:62:ab:
                    7e:67:50:d2:c5:9f:97:31:a6:17:fc:db:d4:ef:be:
                    61:d7:2b:42:d3:62:ba:ed:84:db:34:b3:7d:ae:55:
                    ef:a4:bd:34:c7:77:00:fb:06:5e:8d:40:78:b9:12:
                    00:ac:ae:ce:ae:10:7a:bf:67:2d:fb:c4:9c:d4:33:
                    d0:ee:ca:e5:3b:65:a6:12:26:b2:18:da:50:e1:ed:
                    ca:56:a0:e1:78:96:a4:47:88:c0:2f:7b:84:90:ef:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:05:71:8F:26:90:68:30:EB:A4:87:13:49:A4:30:9F:D9:D3:A5:C6
            X509v3 Authority Key Identifier:
                keyid:3D:CB:79:C7:38:6C:14:A6:9C:43:55:F3:4C:3B:C5:B3:4F:44:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/0B1437CA38B211ED8B64E4DBF1222468/Pct5xzhsFKacQ1XzTDvFs09ES64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pct5xzhsFKacQ1XzTDvFs09ES64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/0B1437CA38B211ED8B64E4DBF1222468/Pct5xzhsFKacQ1XzTDvFs09ES64.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:39:7e:5c:cd:e2:58:8b:d3:c3:c5:f5:18:69:29:cf:59:
         36:37:16:66:f1:06:80:9f:2c:7f:84:c0:96:a8:62:77:fd:42:
         c6:e3:62:0d:02:cf:6e:18:bb:75:16:ff:b9:90:46:db:aa:6f:
         9a:74:20:40:4f:1c:2e:4e:e3:83:75:c5:1f:dc:a7:00:b9:06:
         7d:f0:2f:82:e5:de:e7:57:1a:a5:0b:e7:ea:2c:71:cd:c0:74:
         db:6b:87:23:b9:a9:42:96:3d:d0:36:d1:d3:3e:1a:f8:61:e7:
         a1:68:7f:ae:ee:a0:a2:9e:3c:b3:81:1e:a5:91:42:e2:0d:e6:
         a9:86:72:49:ce:ab:82:48:b5:fc:d1:77:67:8b:a1:1f:cb:86:
         6d:c7:11:64:3c:4f:3d:94:62:31:b9:39:e3:fa:a2:f6:b9:7d:
         9e:5e:8c:0a:a4:b9:f1:77:a0:9a:2e:db:09:b4:49:8c:ca:32:
         a4:20:50:7d:6f:5a:43:6f:37:7d:dd:ab:34:26:d2:57:b1:1e:
         9b:b1:60:6f:31:e4:07:5b:8c:1b:e9:b2:45:f9:dd:c5:2f:c7:
         a3:ae:8b:e2:ab:e1:ed:11:e1:a8:26:08:83:bd:85:74:b6:0a:
         db:a6:27:d7:47:b7:b9:bf:69:f0:63:9a:88:95:22:95:05:73:
         9a:82:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:15:11 2026 by rpki-client