Error: rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
File:                     9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft (raw, json)
Hash identifier:          XeBC3yA+SYGZlaq5RS6Rsmgw56w9UbwG7nLvhTePD2o=
Subject key identifier:   5F:F2:56:94:43:4A:CC:AA:2B:C6:AB:31:3D:F7:A2:D3:3E:FE:5C:D8
Authority key identifier: F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
Certificate issuer:       /CN=F36848BCAF/serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
Certificate serial:       022B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
Manifest number:          0228
Signing time:             Mon 26 Oct 2026 04:54:01 +0000
Manifest this update:     Mon 26 Oct 2026 04:54:00 +0000
Manifest next update:     Wed 28 Oct 2026 04:54:00 +0000
Files and hashes:         1: 9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl (hash: 0l3emsugE3YzNNSS4tuAWJKDzf7kPmTcoLttvJfqLug=)
                          2: 91C51C4457F911F0AC734B88DAE4EC9C.roa (hash: jLmJyUTO89F5T9pEtytMOZ40rOclSZZKyrwwRKMAe9A=)
                          3: 37918F14420411F18E38FBD0CE1D38B0.roa (hash: huC/6fmrz67aK5tVBCfKdufN8eEHqz7qMufHoZTK9SA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36848BCAF, serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
        Validity
            Not Before: Oct 26 04:54:00 2026 GMT
            Not After : Oct 28 04:54:00 2026 GMT
        Subject: CN=6adedce9-80c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2f:a8:36:98:f4:2d:30:06:5f:f5:e2:aa:d1:
                    65:d7:76:d2:1c:0b:e4:e4:7f:eb:48:4d:a2:d6:cb:
                    af:71:ae:7e:0e:96:95:88:c3:9d:23:19:c0:53:89:
                    5c:c2:d2:fe:ab:ce:81:64:90:d1:63:7f:db:36:e2:
                    5f:fb:1a:de:04:a9:71:4a:36:44:80:d5:a4:d3:23:
                    a4:35:d7:18:81:fd:32:a7:83:f0:d9:90:bc:c9:37:
                    38:7a:cc:54:d5:16:ea:4c:81:db:4d:32:ee:7d:28:
                    66:37:6a:e2:08:cc:96:79:84:49:c7:43:85:fb:14:
                    82:64:56:cd:e6:18:3a:0e:64:a4:b2:d1:1d:4e:81:
                    1f:fe:34:20:9c:2f:54:e5:fa:ef:eb:1f:55:0e:b7:
                    fd:50:13:86:5b:2c:6d:fe:b1:77:6d:73:f9:91:7c:
                    69:b0:a4:ce:d8:c4:be:bd:c3:6e:d8:f2:b8:5b:7b:
                    9f:08:a3:2e:d4:48:de:d3:f0:8c:0b:57:de:c4:d7:
                    c6:80:94:fb:1b:f1:a8:24:90:4f:8f:15:fc:24:bf:
                    f7:0a:c2:bf:45:76:34:91:e5:1d:8d:fc:ff:74:a5:
                    3e:4e:1c:e6:3c:7c:99:8e:9f:20:14:a2:18:ef:d1:
                    9d:e6:34:17:8f:7d:05:59:f9:5a:60:5d:1b:1f:6a:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F2:56:94:43:4A:CC:AA:2B:C6:AB:31:3D:F7:A2:D3:3E:FE:5C:D8
            X509v3 Authority Key Identifier:
                keyid:F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c0:67:39:2e:a1:ec:3a:2e:b7:5d:35:0d:30:38:c2:e1:53:
         c9:22:4a:62:30:00:f4:77:73:63:7d:48:f2:1f:78:0a:3f:33:
         33:f5:cd:c3:b4:40:2e:af:be:07:98:c4:9d:e4:f3:1f:4d:ff:
         54:03:46:be:25:a1:6f:cb:7d:3f:f3:9f:29:05:5f:04:c1:e9:
         bc:0d:f3:fd:dd:79:41:8e:69:92:79:3f:db:95:a3:0f:c0:6f:
         fa:5f:d5:7d:1f:a9:e7:b4:21:af:58:ff:3a:9d:a5:55:dd:2b:
         f8:6e:19:53:4a:d0:9c:f9:7f:c8:f1:50:a8:12:a8:fd:2e:02:
         0a:5a:de:6c:b8:12:12:21:e3:e5:a6:06:36:b9:b5:1a:58:59:
         1a:66:06:58:4f:f4:c0:b8:f8:5c:f1:96:4d:57:2c:13:57:d6:
         12:75:f7:ef:77:38:0e:c1:a7:60:f0:a9:8b:13:5d:62:24:2c:
         de:83:07:83:1f:09:7e:81:a6:7e:a8:79:3d:5e:18:9b:53:ca:
         bc:c2:4a:c6:78:17:8f:22:f7:33:1b:ab:cf:85:00:a5:57:fc:
         d6:3f:9e:ee:ce:ef:0a:73:95:f7:23:4b:88:87:a3:ae:8c:33:
         98:e0:7b:8b:dd:5b:f2:34:9d:04:b3:fe:a6:cd:c9:6f:9f:23:
         d0:f3:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:12 2026 by rpki-client