Error: rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
File:                     TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft (raw, json)
Hash identifier:          E+TC0CVXAw07PHM8FFhmpzWWQ2xJeD0ni1h+NWun1H4=
Subject key identifier:   69:8D:12:44:E7:BB:74:A9:20:40:57:60:1A:4C:C1:1E:85:6F:E9:69
Authority key identifier: 4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
Certificate issuer:       /CN=F36ED8A8AR/serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
Certificate serial:       0260
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
Manifest number:          0260
Signing time:             Mon 02 Nov 2026 04:48:56 +0000
Manifest this update:     Mon 02 Nov 2026 04:48:55 +0000
Manifest next update:     Wed 04 Nov 2026 04:48:55 +0000
Files and hashes:         1: TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl (hash: oTFp1j43bsd0mgOPNF4U8eMf5kJ+mfBEIbAX6CnmLrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                          rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED8A8AR, serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
        Validity
            Not Before: Nov  2 04:48:55 2026 GMT
            Not After : Nov  4 04:48:55 2026 GMT
        Subject: CN=6ae81638-d66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f4:eb:0b:14:b6:7c:c8:5c:bc:ca:26:f2:de:
                    26:26:b3:c4:c2:b4:52:8c:e6:95:80:8d:b8:18:6d:
                    a7:a6:ae:6a:94:1e:21:8c:24:a3:48:2a:2f:b3:a3:
                    9a:1e:b2:90:55:e6:76:41:ec:5f:1f:a5:02:e7:bd:
                    62:a4:c7:f2:c5:be:bc:79:d6:00:ac:c0:18:41:4e:
                    7f:64:d1:3f:de:89:11:6a:d5:e1:ff:20:7f:15:13:
                    c4:65:69:89:81:86:88:22:0b:9e:67:63:26:61:42:
                    cc:f4:42:10:17:c8:6b:12:7a:e5:08:8d:00:de:0f:
                    83:06:7a:b3:0c:02:89:d1:e8:4e:1f:b4:1e:6e:a1:
                    9c:cb:91:07:87:50:52:c2:39:ea:8a:5e:46:ba:56:
                    d8:d1:6f:0a:9d:07:3c:6d:6b:f0:6b:16:89:4a:d8:
                    ee:11:7c:65:f9:3e:c5:0a:b0:d1:80:8b:0e:bc:30:
                    86:25:93:e2:70:14:a3:d9:dd:34:59:1b:89:c9:87:
                    bb:71:81:d6:14:fc:5a:97:ba:c9:c2:72:03:54:92:
                    1f:d4:cb:2c:43:8d:e2:bf:17:aa:a2:af:a9:28:1d:
                    63:1c:be:b1:82:8f:26:34:48:35:01:21:6f:89:38:
                    d7:91:50:ac:d6:3d:10:4d:da:78:06:55:8c:b6:ad:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8D:12:44:E7:BB:74:A9:20:40:57:60:1A:4C:C1:1E:85:6F:E9:69
            X509v3 Authority Key Identifier:
                keyid:4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bb:16:0f:f2:ea:28:85:46:0b:0d:dc:36:f1:af:5d:0d:3a:
         b5:37:ec:2e:ee:1f:9d:37:4e:e5:c0:c8:03:b0:8d:0b:f8:10:
         75:bb:7d:e8:d2:1c:ea:ce:fa:da:f1:7b:bf:03:b2:44:23:39:
         31:43:63:a6:a2:77:f4:1f:bf:b2:c5:ec:ba:2d:e1:75:67:39:
         cd:1a:98:ff:58:fc:2a:a6:11:94:52:ac:0f:a2:c0:cd:c5:46:
         9d:35:2f:8b:20:f6:43:33:65:52:38:86:bb:be:00:f2:99:89:
         7b:7e:dd:c4:9c:67:c7:dd:eb:9f:90:99:b0:0c:1e:d1:b5:33:
         4d:a3:a1:fd:e7:46:3c:69:54:e2:65:fe:79:84:a8:65:87:8f:
         b9:1a:eb:29:ac:64:ca:b4:20:33:be:60:8b:4d:2a:73:d7:9a:
         b5:1b:9c:af:2c:94:7c:36:02:f6:c0:ff:c6:f3:eb:c8:3c:78:
         be:7a:e8:0d:eb:b7:1c:97:f9:42:42:e9:c5:4e:8b:ba:92:04:
         cf:f7:bc:45:04:25:d8:4d:28:ce:b7:87:30:23:2d:9d:ea:ad:
         49:2a:54:67:f4:1c:6a:bb:df:13:20:e5:13:56:ab:18:fb:9b:
         83:0e:cf:6c:f2:a0:31:e3:c4:01:27:c3:92:57:12:d4:27:f7:
         bf:07:15:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 00:22:26 2026 by rpki-client