Error: rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
File:                     WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft (raw, json)
Hash identifier:          Ox7YOLzmQUoSP8cIsXP6MN3ui2faKGwnUC91dSBG4GI=
Subject key identifier:   AE:F9:F1:9B:A6:2C:9D:47:07:1F:46:0B:B1:74:B4:93:73:65:AA:B3
Authority key identifier: 59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB
Certificate issuer:       /CN=F367D68CAR/serialNumber=598DA01DE4E9CD5474AD0A6826625BE6B808F0AB
Certificate serial:       0806
Authority info access:    rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
Manifest number:          0801
Signing time:             Thu 17 Sep 2026 02:04:05 +0000
Manifest this update:     Thu 17 Sep 2026 02:04:04 +0000
Manifest next update:     Sat 19 Sep 2026 02:04:04 +0000
Files and hashes:         1: WY2gHeTpzVR0rQpoJmJb5rgI8Ks.crl (hash: U2egEtbsxFpWaL3URMKtF7AkbVqBqH6gktjAx3rMNXg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
                          rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAR, serialNumber=598DA01DE4E9CD5474AD0A6826625BE6B808F0AB
        Validity
            Not Before: Sep 17 02:04:04 2026 GMT
            Not After : Sep 19 02:04:04 2026 GMT
        Subject: CN=6aab4a95-96bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:0f:da:f1:44:11:e3:39:a1:c5:db:cc:e1:
                    55:04:eb:5e:b0:97:3e:6b:16:f3:52:e1:77:a8:38:
                    4c:07:e5:fe:f0:2b:40:34:bd:e4:65:65:79:3f:84:
                    8b:b6:03:fd:d3:8c:94:e9:45:3d:4d:cc:9b:37:a8:
                    f1:a8:64:16:90:c0:af:df:f6:b7:a5:fc:ff:b8:ed:
                    1f:df:9d:90:0e:8f:90:8f:b6:a7:e2:62:c6:01:4d:
                    bc:01:09:4a:cd:33:71:ed:2d:ef:ab:0b:5f:f7:97:
                    91:d0:38:77:db:d8:fc:c1:30:7f:62:39:b4:07:c1:
                    06:cf:c2:6f:be:13:04:02:98:2d:77:f4:68:2b:16:
                    96:67:ab:83:9d:fb:f6:64:79:6f:17:73:f0:bb:68:
                    23:94:75:46:23:a2:b1:88:dc:60:ba:f7:47:98:d4:
                    57:04:62:cc:61:cf:fc:77:d1:15:b5:90:98:f7:f3:
                    7c:4e:d9:ce:32:97:6d:cf:df:ec:7c:f2:50:dd:c9:
                    e1:27:59:f7:7a:0e:03:57:75:f1:d7:ec:f5:32:39:
                    5a:8f:3f:df:37:bd:a7:bb:9b:3d:0b:65:50:46:65:
                    4c:41:4a:86:7b:e2:01:7c:d3:5f:97:fc:35:ef:d8:
                    e5:de:13:6a:57:49:2a:a2:39:42:97:89:25:37:ae:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:F1:9B:A6:2C:9D:47:07:1F:46:0B:B1:74:B4:93:73:65:AA:B3
            X509v3 Authority Key Identifier:
                keyid:59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ff:9b:81:47:50:82:aa:0f:42:a9:35:77:98:15:d5:01:e8:
         71:c4:c6:d7:3f:fa:a3:b5:f1:25:5d:f3:37:4b:f9:8a:1f:72:
         ac:b8:49:c3:ba:17:19:c1:c6:09:60:38:13:56:95:17:00:48:
         d2:13:a2:63:72:16:51:db:3e:3b:ff:5e:a8:37:f9:09:61:3e:
         0e:5c:21:b4:97:e0:a4:0f:38:10:b1:2b:c2:7d:28:45:58:b3:
         9e:76:44:55:93:3c:2e:ae:83:c0:be:73:7b:57:35:c5:87:9f:
         39:53:bd:2a:a7:be:f2:ef:4c:33:be:d7:ab:81:f5:e5:a2:43:
         19:87:8d:d0:83:b5:56:8f:e7:4b:b0:c5:dd:52:07:49:42:22:
         db:e6:98:eb:cd:fa:e7:b6:26:cc:56:eb:03:b8:8c:6e:e4:60:
         59:80:d2:f0:58:da:13:7b:7a:d9:51:cb:bc:59:f4:c5:6c:03:
         4b:3e:34:0d:13:d1:2b:7d:a1:f3:dd:17:66:63:99:d8:0b:68:
         db:a1:4a:3d:57:fa:e3:96:0f:f4:dc:4f:06:c1:d6:a1:68:6f:
         1d:97:50:43:5e:59:51:4e:ab:71:4f:80:f1:21:e0:72:2b:f0:
         38:3e:cf:8a:7b:39:4c:fb:07:2e:25:f3:56:fd:7c:ed:7a:3f:
         c2:da:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 20:21:57 2026 by rpki-client