Error: rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
File:                     7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft (raw, json)
Hash identifier:          f/bGbVcMSgvD/kRyli932HPvrR3XH2hFWDxp5viY5Qo=
Subject key identifier:   D1:BF:BE:77:12:78:08:65:40:8A:39:B0:04:5D:07:47:5F:88:BE:15
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       077C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
Manifest number:          0770
Signing time:             Tue 03 Nov 2026 02:30:01 +0000
Manifest this update:     Tue 03 Nov 2026 02:30:01 +0000
Manifest next update:     Thu 05 Nov 2026 02:30:01 +0000
Files and hashes:         1: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl (hash: aAxcjgM+GI2eaW2NJUrNcYdlTHcTQ9kPvmu7SSf6mCI=)
                          2: BEEEF1CAD21B11F19581B216CF1D38B0.roa (hash: eYKIXwTHUXfvLU8SLEnE0me5LRRJMnZ2uMrS513ipwc=)
                          3: F47A6EFAD1FD11F1A1F7C3D8CE1D38B0.roa (hash: nJMw0jDhfUQ9MIEZ9B8cpiQCrvIR1zCE9zeLYVXhPUk=)
                          4: AC8F656ED1FD11F18F864FD8CE1D38B0.roa (hash: yctHS4Zz1hfDDHV29RTCYyyPbaqDq/2/LwZbhhW3868=)
                          5: 1136047ACBDA11F1B347B101CF1D38B0.roa (hash: moxdxcUELpu7elLC6Ukvw99IdBHL0GM1+0nuhlj22bQ=)
                          6: C2F6D0F2D21C11F195C5611BCF1D38B0.roa (hash: DCMdobBGCX/mUl3B+OdT4HpWLhOwMbAEXxWixxY+U+s=)
                          7: 8CD7C5EED21C11F1A9F30C1BCF1D38B0.roa (hash: mF/oUeygnWUlpCjb3QbQWPwGCW/S+VGcBKt15q61vTA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Nov  3 02:30:01 2026 GMT
            Not After : Nov  5 02:30:01 2026 GMT
        Subject: CN=6ae94729-eb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:59:29:86:07:72:1a:a5:46:1c:21:67:a4:
                    5f:47:43:94:fa:13:ef:d8:4b:50:6d:4d:5c:67:eb:
                    34:a3:1b:15:42:7b:fa:77:f3:79:06:9f:44:6b:33:
                    73:85:77:9d:0f:eb:93:c6:0c:02:30:a5:d0:50:c8:
                    13:bb:c8:7d:29:18:5b:3a:04:59:e3:22:80:d2:bf:
                    0e:1c:67:7b:37:7b:dd:50:b7:08:20:aa:b8:f9:e1:
                    15:40:8a:b7:be:c4:42:8d:0d:3a:fb:2b:06:21:df:
                    68:54:d0:76:1c:15:1f:85:c9:7a:66:0d:00:55:0a:
                    87:e1:e0:3f:51:37:7d:83:1f:8c:60:99:25:2d:be:
                    58:4a:64:03:c1:b3:76:b1:af:b3:00:75:24:ad:b1:
                    23:da:01:32:4a:d6:1e:e4:15:ab:5b:9e:b9:c4:20:
                    9e:0a:5b:b8:f7:ab:df:e7:e3:1d:b2:8d:d4:66:8a:
                    a1:1b:93:00:6c:e4:83:1a:1b:15:d7:99:af:43:33:
                    14:39:87:99:1e:0e:af:f4:e3:dc:87:24:ff:5d:88:
                    a4:d0:0e:d2:61:08:e8:14:59:3b:91:20:fd:bd:48:
                    91:07:24:95:c9:bc:b8:7f:04:cb:dc:f2:86:90:fb:
                    71:d1:56:5f:76:68:cb:4f:96:d2:08:1f:f0:a8:77:
                    8d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BF:BE:77:12:78:08:65:40:8A:39:B0:04:5D:07:47:5F:88:BE:15
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:57:da:e5:a9:81:27:27:5d:8a:07:02:7b:c1:ea:de:00:6b:
         12:7f:8d:aa:b0:fd:39:fa:b5:0c:b5:b7:84:83:f0:9e:b6:30:
         7e:d9:d4:0a:05:a8:43:95:30:78:47:60:b7:e2:08:33:c4:c2:
         62:a7:81:5e:e0:ea:9e:b4:3c:e2:6a:49:cc:55:68:dd:6c:af:
         bc:32:96:46:f0:99:87:7c:3a:43:31:60:d4:b9:ab:f2:c6:a2:
         f4:b4:f7:76:93:fe:75:d0:3d:88:76:a5:5d:f7:07:b1:ac:78:
         48:c5:90:c6:2c:f8:5b:a4:c2:1d:89:b6:79:66:df:7f:53:5b:
         cb:56:5b:cd:e8:cf:5d:dd:d4:bf:45:28:f4:c4:45:e9:12:66:
         73:2a:f3:02:e8:ac:f7:c8:bc:f9:5b:90:8f:8c:fc:f0:1e:14:
         68:2b:6d:49:df:99:d2:d5:b0:bf:d5:fe:29:60:85:3e:e9:a9:
         68:e0:7f:44:1a:e8:5a:15:50:6f:c8:35:19:08:4e:32:53:e4:
         22:6d:27:c8:c7:03:04:8a:ad:3b:0b:db:f8:ef:e9:6a:14:c2:
         db:7c:af:24:1e:da:50:a5:5c:18:a8:7a:c5:ea:cb:dc:a8:25:
         33:fd:22:e3:cb:2f:c5:f1:79:11:26:c5:ac:38:b4:68:c2:09:
         fe:dc:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:44:11 2026 by rpki-client