Error: rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft
File:                     C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft (raw, json)
Hash identifier:          IYibOrdkp7ttlJYGsZ6NOK/NaPbiYMh6RpC2fErK9tU=
Subject key identifier:   D5:8A:63:F6:4A:C0:64:79:CD:99:A5:D5:CA:70:99:57:9B:0D:1D:2B
Authority key identifier: 0B:9C:86:EB:74:2B:22:5C:FA:9D:FA:EE:27:87:17:9C:E2:CB:E4:89
Certificate issuer:       /CN=F362B5C8AF/serialNumber=0B9C86EB742B225CFA9DFAEE2787179CE2CBE489
Certificate serial:       03DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C5yG63QrIlz6nfruJ4cXnOLL5Ik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft
Manifest number:          03DD
Signing time:             Thu 17 Sep 2026 03:57:06 +0000
Manifest this update:     Thu 17 Sep 2026 03:57:05 +0000
Manifest next update:     Sat 19 Sep 2026 03:57:05 +0000
Files and hashes:         1: C5yG63QrIlz6nfruJ4cXnOLL5Ik.crl (hash: D430oa9t3yLdwffjAJVK+MUJWP49hum5EX6Q7o3FVPs=)
                          2: A6EE34B4BB6C11EEA3749758775412E6.roa (hash: FP4NgoM4ThMIgSh1uZNU2HWKydeuDiSmJjwUn9UkLfQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C5yG63QrIlz6nfruJ4cXnOLL5Ik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 03:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991 (0x3df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B5C8AF, serialNumber=0B9C86EB742B225CFA9DFAEE2787179CE2CBE489
        Validity
            Not Before: Sep 17 03:57:05 2026 GMT
            Not After : Sep 19 03:57:05 2026 GMT
        Subject: CN=6aab6512-86cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:0e:02:88:b0:fb:da:28:8d:c2:f7:a3:bb:
                    99:27:4d:14:3d:4f:46:4a:03:60:56:07:2a:8e:e0:
                    bd:f7:e0:d7:c8:b1:2b:5b:54:6f:26:fd:60:c2:76:
                    58:a0:48:f4:48:5b:9e:48:57:66:63:de:f7:37:d2:
                    5d:b8:12:4c:76:d6:1e:e9:4e:8c:f9:7d:ed:c4:ae:
                    02:d8:01:5b:f7:bc:11:d0:83:d1:a7:33:3d:5d:72:
                    52:ca:32:bf:61:55:28:41:60:5f:13:e9:cb:d6:77:
                    d3:08:4e:64:bc:6e:a0:28:b9:d3:93:29:5c:1f:2b:
                    86:e1:93:79:f9:84:aa:34:fc:65:43:f7:e0:1c:50:
                    bf:93:5b:c5:1d:cc:f4:67:81:73:54:8e:44:e5:8a:
                    79:58:39:2e:dc:be:5d:33:cc:6d:58:49:8a:63:44:
                    fb:d9:c4:15:66:bb:8a:6c:81:97:8c:5e:05:4d:70:
                    99:24:7e:7e:6f:22:8c:06:bb:ca:6e:9e:cb:88:bb:
                    43:fb:fa:e6:03:51:11:72:d6:b2:b7:fb:dc:69:04:
                    16:46:46:37:03:a8:45:3f:73:43:b2:4c:07:9d:ab:
                    2c:b8:0b:c6:bd:0b:a8:e7:a1:4c:08:20:57:84:60:
                    f6:61:a5:86:ad:32:f7:39:78:f3:6f:0e:3e:62:f0:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8A:63:F6:4A:C0:64:79:CD:99:A5:D5:CA:70:99:57:9B:0D:1D:2B
            X509v3 Authority Key Identifier:
                keyid:0B:9C:86:EB:74:2B:22:5C:FA:9D:FA:EE:27:87:17:9C:E2:CB:E4:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C5yG63QrIlz6nfruJ4cXnOLL5Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b5:5b:f7:78:6b:e9:e4:98:ce:31:b3:1c:57:20:44:9c:04:
         49:83:a5:5f:b6:e5:ba:95:a9:64:59:69:c3:6d:a4:51:08:53:
         f2:6e:41:08:01:91:20:23:82:33:b2:08:8c:d5:41:ee:71:8c:
         dc:17:76:52:ce:0e:b9:f7:67:94:cf:e7:24:bd:b5:43:72:ec:
         20:bb:26:a0:6a:61:06:3a:b6:07:90:a7:a3:39:d8:09:99:e2:
         79:a5:22:62:45:75:31:d1:1e:f9:22:03:b1:c1:90:41:7b:8c:
         4b:1d:60:45:32:1d:e6:d7:66:77:a8:4f:77:0f:a3:7d:67:cc:
         0e:f4:d5:7f:30:d2:26:8b:82:d5:f4:a7:80:38:b1:9e:03:e1:
         8d:fc:ee:ad:e2:11:a6:74:21:4a:c8:4e:43:48:ce:b4:7e:79:
         1f:6c:15:6b:2c:e9:d0:57:17:07:de:a9:f0:45:1d:fa:09:15:
         36:04:ae:d1:1c:64:71:d3:8d:d0:9d:dd:a5:6d:a9:38:53:f4:
         98:bd:fa:c2:bb:77:28:ed:66:1b:e9:db:94:68:95:a2:2c:58:
         53:2f:ef:c0:f7:d6:29:00:02:06:ee:c6:16:77:db:7d:65:6d:
         12:de:5d:80:a6:bf:26:e6:ca:fe:10:74:b4:fe:7b:9b:60:c6:
         a8:3c:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 22:47:45 2026 by rpki-client