Error: rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
File:                     YgYKORQeYf1_hIcoAdkqSoCYD2o.mft (raw, json)
Hash identifier:          GcWpMZGetAgMuYuFJAQ4sOaf0c9nbrnOCfXkxaLmxBo=
Subject key identifier:   FF:7B:EB:48:A3:23:D6:FA:58:ED:F8:E0:30:DF:DA:FD:14:35:C5:FB
Authority key identifier: 62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
Certificate issuer:       /CN=F36C4E2CAR/serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
Certificate serial:       0654
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
Manifest number:          0653
Signing time:             Mon 02 Nov 2026 02:50:35 +0000
Manifest this update:     Mon 02 Nov 2026 02:50:35 +0000
Manifest next update:     Wed 04 Nov 2026 02:50:35 +0000
Files and hashes:         1: YgYKORQeYf1_hIcoAdkqSoCYD2o.crl (hash: cNrf6SY+1jjeEyPjwXicRhmW49N6tTRGJvI/po2/6DU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                          rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAR, serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
        Validity
            Not Before: Nov  2 02:50:35 2026 GMT
            Not After : Nov  4 02:50:35 2026 GMT
        Subject: CN=6ae7fa7b-9a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a5:57:40:a8:98:e7:bf:61:05:b1:83:78:c8:
                    99:41:2f:a8:0a:1c:e7:51:66:1d:43:52:1d:6c:5e:
                    eb:ec:ad:be:e4:9e:8e:3a:9c:be:70:62:6a:0a:eb:
                    0c:ce:5c:5b:9f:2d:f7:a6:a9:51:6f:5b:bc:46:bb:
                    d0:73:09:d5:41:f2:03:a5:1a:3d:4b:bf:2a:e6:82:
                    60:2a:18:2f:d0:8e:00:83:b3:ba:4c:35:ff:d1:12:
                    df:cf:61:76:4e:4e:8c:7c:89:79:f0:21:9a:b9:24:
                    b4:d8:4a:f2:2d:6f:47:30:67:5e:62:9d:2e:8e:2f:
                    c0:a5:9e:8b:b5:5c:33:21:cb:34:8b:b8:ee:59:a3:
                    e1:7b:17:0e:bf:f1:1b:e8:43:c3:39:6e:55:4a:b1:
                    92:f7:b2:61:90:81:d2:c2:d8:b4:45:3b:f6:56:0a:
                    80:24:00:b8:46:1e:3f:4e:62:72:8a:43:0a:59:41:
                    de:b8:bc:0a:aa:fe:11:15:3c:6c:1c:17:4c:74:53:
                    64:06:72:bb:0f:d6:c1:19:5b:e2:99:62:03:88:9c:
                    a0:0a:73:a1:ca:d8:6e:a3:e0:19:17:b4:9e:2e:e4:
                    ee:8d:12:a9:2a:d4:f5:18:5f:bd:49:60:35:57:fd:
                    99:24:de:15:0f:d1:c2:87:c8:f2:23:82:47:83:84:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7B:EB:48:A3:23:D6:FA:58:ED:F8:E0:30:DF:DA:FD:14:35:C5:FB
            X509v3 Authority Key Identifier:
                keyid:62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:95:a6:ee:2a:2b:82:73:0b:63:48:73:42:c9:80:4f:4e:
         cd:2a:ac:a4:df:b8:06:6d:6f:68:07:9a:51:75:95:95:d7:f8:
         4c:fe:91:9b:7c:29:f6:5e:a0:42:63:bd:e5:d4:24:78:c9:11:
         fe:e9:99:d2:4d:f9:4d:ac:a2:03:44:5d:a4:fb:c6:12:3f:ac:
         3b:2d:20:b2:9b:eb:e1:7a:4a:3e:bf:23:80:fc:57:2f:0e:c3:
         e1:50:81:5f:4c:40:4e:80:78:08:b2:1a:11:4d:3e:22:91:26:
         be:6b:b1:2a:00:0a:52:62:f4:44:33:34:1f:91:55:0b:0d:66:
         e2:a9:18:a6:fc:c1:48:83:1b:95:03:ad:74:4b:6e:57:ec:f5:
         77:e8:b1:50:1e:d8:0a:6e:98:02:3b:a3:b2:bf:eb:ef:1c:f2:
         b4:b9:ee:d6:c2:93:93:37:51:2c:85:9b:11:2c:bb:22:ad:52:
         2c:f9:d9:5b:08:cc:4e:d4:06:c7:12:a5:96:e9:45:ed:0a:cd:
         1a:06:b0:80:04:31:18:b9:ec:06:00:1c:1a:ef:cd:92:68:5b:
         a8:39:0e:12:b3:6c:55:17:66:56:d0:f4:fa:a2:ef:c8:4a:af:
         41:79:87:52:e2:55:a6:6c:f9:c4:37:ae:5d:6a:bd:4a:dd:c2:
         1a:34:1c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:31:46 2026 by rpki-client