Error: rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
File:                     6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft (raw, json)
Hash identifier:          cgUGLSh3SwnFy8jUErRBxkNRnU9slvJ7EHRNaLXzhpc=
Subject key identifier:   63:4B:5C:4F:52:57:A7:DC:1F:FD:B4:39:C3:1D:A1:E1:31:A3:E9:00
Authority key identifier: E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C
Certificate issuer:       /CN=F36150C1AR/serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
Certificate serial:       0E85
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
Manifest number:          0E85
Signing time:             Thu 17 Sep 2026 01:06:24 +0000
Manifest this update:     Thu 17 Sep 2026 01:06:23 +0000
Manifest next update:     Sat 19 Sep 2026 01:06:23 +0000
Files and hashes:         1: 6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl (hash: BXpBQgx2/6I6veTqOz+m8h7tg3Ubi95dwLZmXRNqvHo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                          rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3717 (0xe85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36150C1AR, serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
        Validity
            Not Before: Sep 17 01:06:23 2026 GMT
            Not After : Sep 19 01:06:23 2026 GMT
        Subject: CN=6aab3d10-f348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:47:61:78:f0:aa:46:84:76:85:6f:db:33:4b:
                    0f:8a:8a:aa:59:9e:8b:4d:de:b4:cb:f2:63:39:55:
                    6a:79:76:c0:d2:1b:87:c2:91:7e:03:30:f5:80:8f:
                    79:7a:2a:f0:b9:f1:71:5a:e8:46:b9:72:48:e1:c9:
                    69:d2:28:19:71:7a:12:93:df:78:47:a4:ac:c8:b8:
                    ec:b7:90:73:f6:12:d4:7d:67:2e:b9:03:58:7d:ee:
                    42:94:05:7a:37:ed:11:64:66:8a:ad:d1:5e:77:7c:
                    3d:e2:ed:69:98:58:4d:91:8f:10:47:c9:76:4f:bc:
                    2a:8a:20:d9:99:ed:69:ca:05:77:fe:5b:0c:9d:3a:
                    c2:5b:90:ab:f6:ac:a0:3f:1c:ca:ab:2c:54:fe:0d:
                    db:6b:ad:d7:7e:c8:19:c1:50:60:ee:cc:8c:ee:3c:
                    07:48:f7:20:a5:45:ff:a1:22:81:5e:ae:4d:fe:d3:
                    ac:60:f5:84:50:2c:d6:16:9b:67:70:1c:35:c7:a1:
                    5b:99:2e:93:ba:6a:0d:53:07:23:bb:e3:a9:dd:25:
                    77:47:09:27:d5:2b:47:91:b0:9d:30:48:5a:9a:a9:
                    d3:0f:fc:4c:4f:63:c7:89:94:a7:c2:71:a5:42:4e:
                    c6:87:81:e3:dc:78:06:5d:1a:47:77:c1:1b:2d:21:
                    fb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4B:5C:4F:52:57:A7:DC:1F:FD:B4:39:C3:1D:A1:E1:31:A3:E9:00
            X509v3 Authority Key Identifier:
                keyid:E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8d:43:39:50:77:18:69:b2:e6:18:d2:33:a9:50:97:4f:d6:
         8c:22:b3:06:f5:56:1c:40:09:7a:97:c7:29:73:48:4c:a3:9b:
         ee:91:28:44:c8:0f:d5:2e:02:36:7b:79:d6:aa:e5:2b:f5:19:
         ea:6d:fd:dd:fd:96:4b:8d:32:5c:1e:40:6f:e4:94:de:8b:63:
         64:a2:c7:50:42:cc:c4:27:c4:f8:20:99:46:03:ce:3e:a4:b6:
         9c:cc:82:a4:ed:90:76:95:c4:df:72:8e:77:50:eb:23:2e:fd:
         a8:4e:6e:c9:bd:aa:c5:46:46:75:3b:28:10:12:21:3b:29:fd:
         d1:cd:d9:b5:3d:33:14:70:2d:0f:c6:b6:ca:b0:4e:7f:30:c4:
         cf:01:09:75:cd:04:c6:f4:d9:f5:99:1c:b3:1f:dd:59:70:9c:
         dc:7f:87:c2:b8:47:52:72:aa:70:85:30:cd:5c:61:f0:02:34:
         47:92:c3:68:64:0a:4b:23:a3:89:9f:22:2c:75:d4:68:eb:7d:
         30:d5:30:88:07:b5:7f:2b:b1:13:40:bd:b0:11:ea:f8:c8:73:
         49:73:25:ce:77:ac:a0:ca:27:5c:6e:94:d7:43:b8:8f:6b:5c:
         a4:80:cf:b9:82:87:60:b7:68:3d:5f:5d:57:0e:69:81:6b:0d:
         d7:55:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:35:37 2026 by rpki-client