Error: rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft (raw, json)
Hash identifier:          +SkZW6OK5xjZIDWDT2q/ZKXYSozz7inAkAP+kYwLYLA=
Subject key identifier:   C0:83:13:2C:F2:67:16:99:D5:0A:C8:58:F8:11:1E:B6:60:76:5C:0C
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Certificate issuer:       /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial:       06BA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
Manifest number:          06B8
Signing time:             Mon 02 Nov 2026 02:39:52 +0000
Manifest this update:     Mon 02 Nov 2026 02:39:51 +0000
Manifest next update:     Wed 04 Nov 2026 02:39:51 +0000
Files and hashes:         1: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl (hash: Jn5TtR/W0JGkOmO1dV6xzK6MYcti2tjkKb9Wr4RW/RE=)
                          2: CFF7610289D511F1BB657AE8CE1D38B0.roa (hash: WV9x2VI1s6Dp52p1mAl/nv0lnXkxmuZLfjrdawVPNEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAR, serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Validity
            Not Before: Nov  2 02:39:51 2026 GMT
            Not After : Nov  4 02:39:51 2026 GMT
        Subject: CN=6ae7f7f8-e945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:a7:14:f5:86:29:6a:d5:38:c9:62:4f:db:
                    00:ab:26:5a:69:d9:19:1e:54:8f:85:82:fe:4c:a9:
                    cb:20:5b:3a:e6:31:21:36:a7:37:5b:c1:bc:63:83:
                    f7:ce:92:76:2e:fd:14:cb:03:20:61:a7:a1:ec:10:
                    e8:8e:14:73:ae:45:7a:b9:c6:b2:22:df:54:ff:c5:
                    c9:a3:2f:d0:e6:39:54:55:fb:3f:14:2c:2a:c3:ca:
                    2b:03:b6:0b:07:f9:0e:28:b7:8a:9b:55:31:15:80:
                    50:a1:f9:1b:74:ef:3c:5f:c0:d2:1e:c1:3e:b4:7b:
                    9a:10:4a:8a:99:24:bf:7e:65:a7:86:ac:4c:10:59:
                    27:1f:fd:61:65:d0:79:18:eb:ad:10:2d:08:43:75:
                    9d:64:6a:a8:db:9e:3d:4a:c5:2c:18:f1:49:3e:cb:
                    99:e1:3c:35:11:7f:ef:61:46:b6:03:e0:46:df:aa:
                    00:29:a0:ff:66:a4:05:ac:20:1c:01:56:4e:4c:72:
                    e5:35:69:04:70:85:09:f0:66:05:70:d4:7f:43:ee:
                    4c:23:59:c2:85:ad:2a:78:db:2e:96:7a:f3:88:dd:
                    be:59:72:3f:bb:26:d0:69:a4:39:90:c4:a5:2f:3a:
                    3f:d9:dc:6d:c3:4f:fe:8b:e0:47:17:fa:40:90:34:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:83:13:2C:F2:67:16:99:D5:0A:C8:58:F8:11:1E:B6:60:76:5C:0C
            X509v3 Authority Key Identifier:
                keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9e:a0:38:d5:de:a1:bf:4a:05:0b:c1:1d:83:21:e4:c2:7b:
         24:cd:fd:e0:b4:6b:f8:cf:01:da:b0:3c:1b:8c:7e:cf:db:73:
         87:dc:c4:62:86:d4:d1:31:00:c7:b6:29:77:b9:11:eb:f1:88:
         d5:e4:10:2d:1a:c9:c8:aa:1c:16:55:39:56:81:63:20:48:a7:
         e5:61:42:d5:95:1a:ee:13:bc:a3:60:51:c8:fc:4e:9b:c4:32:
         59:54:ee:c7:62:ae:43:d1:c8:c5:da:43:f0:9c:02:0e:9c:87:
         1c:21:37:52:3c:81:01:46:16:04:71:f0:6a:81:1b:86:4e:0f:
         89:41:2c:84:0a:18:e0:8a:3d:49:49:7a:1e:33:b2:5f:a4:e2:
         ad:01:02:c7:0e:08:56:23:f5:e7:e3:ff:7c:84:25:ca:60:9c:
         89:6b:b7:c6:60:a5:42:c9:13:70:24:e7:6c:b1:97:06:b0:4e:
         e3:a2:4d:76:8f:8b:e0:b3:0d:ee:a7:a0:8b:86:b4:44:5d:36:
         1e:48:92:b1:05:5c:96:03:96:22:c4:ee:57:32:13:66:4b:b8:
         75:ba:6a:0b:23:2c:0a:ef:be:09:da:41:ce:9c:4b:02:f6:3e:
         e5:5e:df:0c:3e:dd:bc:b1:8e:e5:32:bb:c9:5c:b5:75:59:50:
         a6:03:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:19:41 2026 by rpki-client