Error: rpki.afrinic.net/repository/member_repository/F36A3C65/A2CF4A6AC63811F1ABA7E8CECE1D38B0/yYfVP8lKj0anS_cUcrN-kJBaHcs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A3C65/A2CF4A6AC63811F1ABA7E8CECE1D38B0/yYfVP8lKj0anS_cUcrN-kJBaHcs.mft
File:                     yYfVP8lKj0anS_cUcrN-kJBaHcs.mft (raw, json)
Hash identifier:          OU+5lqA5MBXfvvO+90sk/8NQIDdOrTgHN88aMNNku2Y=
Subject key identifier:   E3:38:4C:06:CD:48:B0:02:B3:AB:95:72:EE:64:ED:A9:B9:62:58:9A
Authority key identifier: C9:87:D5:3F:C9:4A:8F:46:A7:4B:F7:14:72:B3:7E:90:90:5A:1D:CB
Certificate issuer:       /CN=F36A3C65AR/serialNumber=C987D53FC94A8F46A74BF71472B37E90905A1DCB
Certificate serial:       16
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yYfVP8lKj0anS_cUcrN-kJBaHcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/A2CF4A6AC63811F1ABA7E8CECE1D38B0/yYfVP8lKj0anS_cUcrN-kJBaHcs.mft
Manifest number:          16
Signing time:             Mon 02 Nov 2026 06:01:58 +0000
Manifest this update:     Mon 02 Nov 2026 06:01:58 +0000
Manifest next update:     Wed 04 Nov 2026 06:01:58 +0000
Files and hashes:         1: yYfVP8lKj0anS_cUcrN-kJBaHcs.crl (hash: Qg3wfuCIsTeSkhGy2wSZkg2GiEPorZy3fC/+R4nIIRk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/A2CF4A6AC63811F1ABA7E8CECE1D38B0/yYfVP8lKj0anS_cUcrN-kJBaHcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/A2CF4A6AC63811F1ABA7E8CECE1D38B0/yYfVP8lKj0anS_cUcrN-kJBaHcs.mft
                          rsync://rpki.afrinic.net/repository/arin/yYfVP8lKj0anS_cUcrN-kJBaHcs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3C65AR, serialNumber=C987D53FC94A8F46A74BF71472B37E90905A1DCB
        Validity
            Not Before: Nov  2 06:01:58 2026 GMT
            Not After : Nov  4 06:01:58 2026 GMT
        Subject: CN=6ae82756-c805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:7e:b4:6b:16:44:6c:5c:e0:97:28:d4:d1:
                    50:c4:bc:7d:ca:49:a2:f6:15:46:92:36:2f:69:a8:
                    97:08:bd:12:6e:25:80:c1:f1:93:f9:9b:d1:9e:eb:
                    9c:b5:50:01:0a:2d:67:4f:90:33:21:78:57:a6:87:
                    ec:8c:b5:11:00:82:d6:55:d6:38:43:b9:94:b8:5d:
                    b4:a6:c0:d5:a9:f9:4f:93:b0:db:56:61:69:0c:d3:
                    0f:34:46:f0:83:9b:fb:14:c0:3f:8b:da:51:3a:3d:
                    13:aa:a3:f1:5c:ba:0b:b1:99:a6:99:93:a3:34:0e:
                    64:23:80:f3:f5:08:6d:00:9e:a6:13:98:8d:c5:33:
                    da:06:e4:99:de:a8:4a:84:b4:12:ac:84:30:74:b8:
                    31:fa:2a:82:6c:5b:4f:8e:28:12:64:04:92:a4:67:
                    be:b9:4e:d8:81:c9:5a:ac:a7:8b:49:d4:ad:1b:a5:
                    af:bf:c1:86:76:0d:10:49:91:2d:a8:da:e1:fa:1b:
                    10:7b:cb:b6:99:d0:cb:5f:e2:fd:53:5a:0a:cb:90:
                    59:b9:9b:b4:ea:91:3e:89:c4:64:48:6c:65:88:b3:
                    ae:01:66:70:27:0c:92:27:d5:77:67:07:a9:f4:9d:
                    33:e3:cf:11:8f:76:21:a8:d0:91:59:1e:32:20:44:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:38:4C:06:CD:48:B0:02:B3:AB:95:72:EE:64:ED:A9:B9:62:58:9A
            X509v3 Authority Key Identifier:
                keyid:C9:87:D5:3F:C9:4A:8F:46:A7:4B:F7:14:72:B3:7E:90:90:5A:1D:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/A2CF4A6AC63811F1ABA7E8CECE1D38B0/yYfVP8lKj0anS_cUcrN-kJBaHcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yYfVP8lKj0anS_cUcrN-kJBaHcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/A2CF4A6AC63811F1ABA7E8CECE1D38B0/yYfVP8lKj0anS_cUcrN-kJBaHcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:3c:3c:d6:0c:75:40:e0:60:fe:bc:1a:71:78:a0:5e:d3:ec:
         ca:d7:6c:ff:aa:31:89:32:a8:08:cb:6c:96:01:08:4f:e9:aa:
         22:ac:63:5d:33:36:1e:d1:ad:e2:bf:bc:fc:a9:0e:07:ab:9c:
         b0:fa:62:0d:cf:76:7c:f0:d8:7b:24:4b:12:66:58:c5:98:61:
         ae:3d:54:9e:25:91:ef:5f:64:1d:3e:e8:71:81:86:24:63:28:
         f7:95:fe:ef:4b:cc:52:ee:88:e7:cf:cb:c1:56:0f:27:78:0a:
         f9:e5:10:55:f7:31:43:e9:0c:a1:00:ff:ec:ef:c5:e1:5d:4f:
         af:bd:c9:89:58:b2:5c:b2:9a:1f:50:d8:af:b3:7a:75:ee:65:
         b5:26:2a:a3:4d:1e:7b:10:70:8a:65:c5:b6:a8:bc:b6:74:88:
         fe:26:50:fb:b1:d8:99:7b:4f:ef:b3:22:ef:81:ed:dc:51:2b:
         3d:b3:42:fd:32:bb:e6:d3:3f:f9:62:ab:9c:04:f4:50:a1:bf:
         75:67:08:f9:2e:68:4c:cc:23:4d:68:fa:09:6b:c8:51:51:99:
         77:16:47:7c:66:a0:93:93:2f:2c:44:6e:4e:70:82:cd:8d:45:
         8f:bc:06:39:1e:08:87:7d:07:96:c1:ba:91:21:97:6e:57:fb:
         5d:32:ef:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:48:02 2026 by rpki-client