Error: rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
File:                     tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft (raw, json)
Hash identifier:          j6WN43+xNCGCNlvH/8CGVxifH7iimw9oxfH3GzGA1Es=
Subject key identifier:   94:2F:C4:4B:F0:DC:85:FF:BE:C1:F6:CF:9C:5A:08:11:41:2B:4F:9A
Authority key identifier: B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E
Certificate issuer:       /CN=F361A501AR/serialNumber=B600796DC250C874AC571D323D014B8876243C5E
Certificate serial:       04E7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
Manifest number:          04E7
Signing time:             Tue 03 Nov 2026 03:33:28 +0000
Manifest this update:     Tue 03 Nov 2026 03:33:27 +0000
Manifest next update:     Thu 05 Nov 2026 03:33:27 +0000
Files and hashes:         1: tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl (hash: nWFkNT4FoY9d8hh7cWiq13H8AMQkJMWhTgF405WzuOY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
                          rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255 (0x4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361A501AR, serialNumber=B600796DC250C874AC571D323D014B8876243C5E
        Validity
            Not Before: Nov  3 03:33:27 2026 GMT
            Not After : Nov  5 03:33:27 2026 GMT
        Subject: CN=6ae95608-0ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:a1:c3:47:34:46:7e:30:a3:88:b2:bd:e1:
                    87:46:2d:08:a0:6c:42:1a:af:3a:ec:72:5c:17:4a:
                    42:38:8c:0b:4b:d8:5c:cd:4c:38:fe:df:7e:dc:72:
                    2b:5a:5d:ea:c2:7b:c8:05:21:b4:0f:7b:ca:f1:e7:
                    94:60:ae:a2:86:7e:c7:9e:32:fc:51:9e:38:2c:2c:
                    50:51:92:09:20:f1:97:91:6f:1a:41:65:b7:57:a3:
                    e6:f8:cc:4f:82:11:ac:93:b8:b7:ca:c9:8b:00:fb:
                    47:3d:6b:c7:cf:ce:4b:87:b6:36:a0:ce:f8:8b:5d:
                    14:da:65:8b:19:d1:49:30:d0:e6:7c:05:29:a2:b5:
                    a9:77:1c:8d:b9:60:6b:0e:3b:9d:a8:73:c7:78:17:
                    f6:c5:01:1d:4b:6a:c0:e6:f0:99:df:25:df:7c:cf:
                    15:e1:df:72:1d:61:02:d9:de:8a:51:3b:c8:47:c2:
                    22:25:e0:1e:08:2e:a7:a8:93:32:4b:8d:4f:ec:e5:
                    a7:d9:c2:a6:af:29:fe:d6:a8:60:a1:23:bc:62:f2:
                    f2:00:56:86:2e:f7:3a:c6:4f:8a:1f:96:c9:82:2f:
                    eb:6c:6c:c7:24:48:47:6a:78:67:3c:96:6a:12:80:
                    bc:09:40:ba:c5:e0:19:3c:b3:57:ae:61:e0:0b:21:
                    d9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2F:C4:4B:F0:DC:85:FF:BE:C1:F6:CF:9C:5A:08:11:41:2B:4F:9A
            X509v3 Authority Key Identifier:
                keyid:B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1b:da:99:00:b1:dd:5b:c9:d2:37:5b:31:31:9a:49:41:3f:
         9d:c7:22:92:b9:b2:be:64:a1:34:13:87:b7:29:76:f8:38:0e:
         a6:70:9f:02:d7:ff:91:90:ae:39:a6:d3:04:40:04:4d:28:da:
         91:bb:a5:10:49:be:5a:60:60:64:db:48:5d:2d:52:41:ed:d3:
         51:57:82:00:de:9a:db:e5:c4:97:85:17:1d:39:b8:65:9c:15:
         5f:0c:ca:ea:13:65:92:07:81:74:4a:1a:11:41:93:ef:3e:e9:
         5e:96:09:13:04:94:41:28:f2:19:f1:4c:b1:f0:2c:95:25:6b:
         9e:af:73:34:43:de:08:ca:40:a0:91:44:18:4c:a8:53:fd:eb:
         7b:3c:fd:d8:3a:82:76:18:45:70:6c:80:c0:df:7b:35:3e:20:
         ea:c2:8f:b4:ee:2d:a8:e9:2f:8a:88:d6:a5:24:80:ef:67:7a:
         b8:56:63:6b:6a:7f:08:75:46:20:67:dc:b8:7a:82:ed:18:a0:
         e2:af:8b:0c:6f:80:98:9e:e3:58:9a:22:72:63:ad:42:4a:06:
         66:6d:95:ac:d7:cb:8d:37:72:9d:18:06:31:b0:c3:17:bd:dd:
         21:57:fc:13:e5:dd:05:30:61:6d:d8:59:59:56:38:9c:25:da:
         27:61:43:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 20:21:20 2026 by rpki-client