Error: rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
File:                     hgwk5dUBPSMjsLq0BphmwNwK7m0.mft (raw, json)
Hash identifier:          50uRKqh/Es4VCiJOrp6v67MwhYEmh58IAcuNB3pG1z8=
Subject key identifier:   C5:5F:DB:71:7C:F1:37:04:62:A3:ED:D9:D1:C2:DD:83:64:84:5C:BF
Authority key identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
Certificate issuer:       /CN=F361F1DAAR/serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
Certificate serial:       045E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
Manifest number:          045C
Signing time:             Mon 26 Oct 2026 03:47:59 +0000
Manifest this update:     Mon 26 Oct 2026 03:47:58 +0000
Manifest next update:     Wed 28 Oct 2026 03:47:58 +0000
Files and hashes:         1: hgwk5dUBPSMjsLq0BphmwNwK7m0.crl (hash: JFzPdsWB7qb8V9xJf2HL217MqnonFK38rweaLgydC/o=)
                          2: D58D35F0CFB411F08C034B9CDAE4EC9C.roa (hash: drYb/Mzs9lAY1gFSlF8WTX0aJ5jYnq/Lar8E/17vb1g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                          rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAR, serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
        Validity
            Not Before: Oct 26 03:47:58 2026 GMT
            Not After : Oct 28 03:47:58 2026 GMT
        Subject: CN=6adecd6f-0755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:9a:ed:ef:31:92:13:3f:b6:b0:0d:93:d7:
                    9f:c9:c8:26:4a:bb:14:18:88:65:38:34:5f:d1:11:
                    1d:89:b9:68:b8:fd:d7:4f:61:30:ea:32:54:9a:f3:
                    1d:e9:c5:2c:ca:45:e4:ea:c0:5c:b0:c1:78:cf:ed:
                    e9:a8:fb:db:65:e4:28:fd:3c:15:dd:00:99:81:db:
                    73:39:41:5a:c4:98:1d:12:95:c8:fa:05:f0:86:95:
                    ec:f8:cb:89:3e:f1:a6:2e:5f:5e:47:0c:fc:dc:1b:
                    97:e7:99:23:9c:3b:6f:d6:6f:87:5e:cb:da:59:dc:
                    27:de:ad:36:91:39:ca:14:6b:b2:7c:e4:46:9a:c7:
                    35:5a:69:d7:26:a3:92:11:62:28:bf:4b:5e:4f:f5:
                    4c:d6:72:91:d0:cc:28:b9:08:ac:98:8a:ca:9e:80:
                    02:f8:9c:c0:3d:ad:b1:f9:4f:79:97:bf:d5:16:4d:
                    0f:05:c1:87:22:52:7d:6f:92:05:37:c5:b7:e9:60:
                    8c:26:80:cf:10:c6:4e:7c:10:11:4c:6f:6b:81:32:
                    a6:fa:15:9f:4f:4f:ae:50:46:c5:29:f4:9b:d3:e2:
                    a8:3b:67:b0:30:14:a5:cc:6f:6e:f0:14:a7:cb:99:
                    12:b7:b4:33:52:a7:50:54:a1:e4:b8:4a:e8:21:08:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5F:DB:71:7C:F1:37:04:62:A3:ED:D9:D1:C2:DD:83:64:84:5C:BF
            X509v3 Authority Key Identifier:
                keyid:86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f2:32:70:a7:27:19:80:03:0c:5a:cc:14:e1:61:93:0b:77:
         43:0c:af:44:8b:3c:d2:24:8e:f3:47:22:cc:49:da:6e:f7:ad:
         66:ac:42:8f:0a:53:3c:49:14:cd:b3:59:51:11:92:32:23:d9:
         d7:10:8a:a5:de:c9:49:5e:74:48:e6:35:d1:2b:06:d8:d5:65:
         76:90:a5:69:5d:74:7d:bf:77:7d:2a:12:ca:23:34:43:e1:43:
         49:42:cb:10:33:35:d0:ba:2b:e2:b5:ca:72:34:5c:3d:8b:f0:
         50:b7:1f:4b:8c:f0:37:76:e8:81:a3:3d:94:16:ef:eb:6b:11:
         bf:b9:a0:1e:41:8b:3b:02:97:7b:1b:a9:3b:f9:38:d7:ae:20:
         52:5b:4e:d4:69:a9:1f:5f:7a:f8:96:ad:2d:69:84:98:4d:d9:
         ce:b9:d9:ee:28:3f:f9:25:92:c9:18:64:ad:f6:89:4c:e8:4b:
         5b:07:65:49:20:80:64:75:cb:45:1b:7c:ff:fe:8a:0c:d1:60:
         32:3c:49:b6:e1:b6:21:b9:23:7a:b9:80:f0:3e:1d:cd:c1:37:
         fb:7a:41:2f:ec:76:fd:46:f0:fe:f5:47:98:ae:4a:0c:89:00:
         8e:4a:23:f7:4a:8c:52:b2:d9:2a:9f:1d:22:b5:cc:c4:b0:7d:
         21:2e:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:53 2026 by rpki-client