Error: rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
File:                     W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft (raw, json)
Hash identifier:          YQdcoQOdPFoNVreB7zJ8MJbVLf7eYkhHejmOVsRrMUo=
Subject key identifier:   C7:6A:AB:05:7F:20:41:4A:D3:2F:B1:DC:AF:E7:7C:98:3D:F7:35:64
Authority key identifier: 5B:52:4E:4B:3F:19:E8:41:BC:61:64:E9:63:BF:D2:3D:38:CD:32:41
Certificate issuer:       /CN=F36B1FB2AR/serialNumber=5B524E4B3F19E841BC6164E963BFD23D38CD3241
Certificate serial:       0968
Authority info access:    rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
Manifest number:          0965
Signing time:             Tue 03 Nov 2026 01:50:31 +0000
Manifest this update:     Tue 03 Nov 2026 01:50:31 +0000
Manifest next update:     Thu 05 Nov 2026 01:50:31 +0000
Files and hashes:         1: W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl (hash: OvlJfT3CteQn7q6kF7OS9YRMkUuFLSeiTrrJqms0kxE=)
                          2: 8DD8A63E9F8811EA9E1CD13BF8AEA228.roa (hash: 4gla00WyKnybWEMMlGQqnQZbh5T6kkOr0Aikoc7oSJA=)
                          3: 24F52F7A9F8811EA8771673BF8AEA228.roa (hash: yndl0tOhUDwQ6Y3ExagHGGbpgAi1l8sO07zu0poxd34=)
                          4: 55A993D69F8811EA97099D3BF8AEA228.roa (hash: +ElbU+52e+mg4AC3l85DIIIn/EFrafBGdzVbGsEBQHw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
                          rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2408 (0x968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1FB2AR, serialNumber=5B524E4B3F19E841BC6164E963BFD23D38CD3241
        Validity
            Not Before: Nov  3 01:50:31 2026 GMT
            Not After : Nov  5 01:50:31 2026 GMT
        Subject: CN=6ae93de7-f7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:0d:e6:58:7e:8e:0f:8d:a8:66:ef:57:30:
                    b2:1f:fc:1a:cb:fe:2a:e5:ba:2a:a1:2d:71:50:fb:
                    20:cf:d0:3a:7e:4a:40:75:b3:c1:4b:ea:db:8e:28:
                    96:92:74:13:04:67:6f:f4:58:37:76:31:69:ca:f9:
                    a6:f8:4d:d7:57:e3:24:9a:64:19:2e:0a:8f:94:81:
                    01:e1:f8:7f:95:a7:10:f2:ba:ac:ed:7e:85:8f:e8:
                    b0:67:5b:c6:f9:a8:72:c1:e2:44:9b:c2:e2:59:f6:
                    52:ed:ca:15:93:ac:65:f4:4c:77:c1:49:01:54:11:
                    55:fd:68:ae:30:8f:c6:81:38:88:a2:63:f7:1d:03:
                    c0:67:84:9f:34:42:d3:4f:28:4a:ad:80:df:ed:fc:
                    c4:35:a7:c6:91:fb:a1:fc:f6:a9:e7:df:24:e4:4b:
                    00:92:1b:23:42:25:64:ec:0b:13:58:01:25:fd:bd:
                    81:ac:e1:13:0c:79:a0:d2:a0:09:ee:a5:d9:dc:c6:
                    a2:58:26:b1:86:35:6a:5c:72:05:27:90:c7:33:67:
                    33:f8:e8:a5:92:a1:92:10:86:cf:11:7a:f8:96:fb:
                    5f:3d:b3:a8:6c:c9:ba:6c:5c:a0:d8:81:a4:fa:ab:
                    f5:84:a4:03:0a:e9:b4:57:4d:66:88:2d:13:7a:55:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6A:AB:05:7F:20:41:4A:D3:2F:B1:DC:AF:E7:7C:98:3D:F7:35:64
            X509v3 Authority Key Identifier:
                keyid:5B:52:4E:4B:3F:19:E8:41:BC:61:64:E9:63:BF:D2:3D:38:CD:32:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e8:dd:ae:ef:43:63:c2:53:f4:c2:43:8c:89:9f:0d:7f:94:
         6a:7f:ce:30:33:45:3b:dd:d7:ba:be:0a:aa:72:6c:76:33:3f:
         d9:4c:09:04:b6:f5:64:7c:de:a5:a5:0f:0b:d0:cf:51:22:3a:
         75:dc:de:fe:ae:09:49:10:a0:84:b7:b5:78:ed:7b:3c:9c:f4:
         0f:0d:e5:d4:54:0b:9d:00:e3:28:1b:68:7d:0b:eb:71:73:6c:
         d9:e2:c9:21:8d:99:66:cd:e7:83:8d:79:60:7c:1b:ac:46:c7:
         a7:be:a6:3f:05:08:d8:04:f6:2b:a1:5e:bf:82:60:2e:18:6e:
         31:8d:39:48:58:aa:60:62:16:40:87:18:17:17:1f:21:c5:89:
         5b:13:f8:86:c7:85:c1:cf:a9:68:d2:7b:a3:cd:7b:23:23:79:
         8c:32:1f:50:87:b7:67:b3:61:fd:11:02:77:a7:df:77:6a:50:
         0d:46:65:ff:da:b2:09:6e:0a:86:c3:14:9f:18:7f:17:17:42:
         2a:31:6e:e8:09:1c:91:2a:53:b3:33:e2:e9:d7:39:c1:09:88:
         ab:00:2d:57:9f:1d:f1:5c:e8:a4:dc:df:4d:f8:90:3d:a7:24:
         7d:42:8a:3c:47:f8:38:ed:e9:5d:79:a7:52:a5:d9:f2:67:66:
         89:b9:c8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 08:41:34 2026 by rpki-client