Error: rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          d1WcTaN3wG8B4ydBGwtMAPPw8cWqTy9oReKgFeCQAm8=
Subject key identifier:   15:85:82:41:98:20:00:AA:A9:E8:25:6B:5D:03:FF:75:4D:D7:A5:89
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       07BD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          07BB
Signing time:             Thu 17 Sep 2026 02:12:17 +0000
Manifest this update:     Thu 17 Sep 2026 02:12:16 +0000
Manifest next update:     Sat 19 Sep 2026 02:12:16 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: /A0+jumksU5WawC/migcH77IzkEbld85mfXX3NNIAqo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1981 (0x7bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: Sep 17 02:12:16 2026 GMT
            Not After : Sep 19 02:12:16 2026 GMT
        Subject: CN=6aab4c81-d52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:79:0f:e0:34:ee:81:05:9f:0e:a3:d0:46:
                    0d:a1:26:83:c9:31:f8:68:8c:93:eb:62:3a:f4:14:
                    c7:85:5f:97:d3:93:df:88:85:64:3e:ef:b6:2a:4e:
                    88:d3:ba:e8:db:1e:c9:d3:45:53:1b:28:e5:8c:4d:
                    a3:1d:b1:07:ee:58:d0:53:a6:d6:d8:f1:b2:2b:c5:
                    62:2e:bb:60:8d:67:d9:ec:ef:a2:63:69:bb:47:bf:
                    ba:90:1b:e8:2e:00:e0:38:a3:b9:b4:03:57:dc:de:
                    5f:42:e8:e3:c4:32:0f:a6:3f:57:99:86:c6:7d:97:
                    c4:c3:e2:04:25:d7:90:eb:a9:65:11:4d:63:83:db:
                    4d:62:39:98:36:5d:36:cf:20:e4:b3:f1:c8:29:45:
                    21:8d:49:9f:93:3a:51:41:aa:36:d3:3f:09:b6:c0:
                    00:fa:40:4e:f9:ca:fb:c1:0d:fc:9f:25:7c:1c:fd:
                    f4:cb:85:b7:26:bb:5c:79:16:70:74:7c:cf:03:67:
                    7c:54:bd:76:04:58:a4:f0:24:e3:2b:73:3b:1f:df:
                    f6:dd:3b:79:93:1c:cb:11:ea:c2:45:f4:96:3e:f6:
                    84:50:18:e1:28:03:21:ec:d5:4c:96:36:df:b1:49:
                    4e:bb:d5:13:ec:8b:18:c9:8f:2b:a1:65:33:68:75:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:85:82:41:98:20:00:AA:A9:E8:25:6B:5D:03:FF:75:4D:D7:A5:89
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2e:cb:17:81:16:43:cd:83:f0:ec:ba:56:84:80:fd:85:58:
         90:0f:64:6a:29:98:3d:6b:db:88:e6:d2:2f:a7:f6:f3:53:ad:
         da:1e:e6:71:f4:4e:88:e1:41:f4:39:53:f4:93:55:66:9b:b2:
         bb:de:94:2c:ed:e9:3b:fa:f6:70:d0:21:38:72:9f:90:be:c1:
         66:fe:72:eb:46:f9:ef:51:96:d9:9c:02:ac:9f:5c:86:1d:ce:
         84:c3:0f:d1:6f:76:83:64:e5:d7:8a:b5:42:24:ec:e8:2d:b0:
         3e:6c:3f:d5:a6:b0:d1:a9:3e:15:f0:4d:8f:a7:33:fe:ae:89:
         6c:66:3d:2b:65:4e:c8:ab:3b:10:8d:7e:4a:13:02:99:c4:5f:
         fa:30:2f:3e:56:8d:31:98:9b:68:5d:bf:9f:b6:3a:f9:06:64:
         d1:97:e5:79:1c:c1:27:85:1d:d4:74:50:43:23:bc:dd:4e:f0:
         1a:3b:60:18:c1:1c:ba:67:a6:52:84:ee:7a:9f:8c:74:d0:1e:
         b3:b7:82:96:81:c4:45:9e:72:0d:82:18:45:66:1a:0a:29:de:
         fd:cb:9b:87:32:63:94:d5:88:59:cb:2b:64:cd:9e:ac:1c:94:
         6c:46:6b:80:cd:66:fd:43:2f:b4:bf:03:ee:e1:39:f7:69:84:
         c0:d3:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:51:20 2026 by rpki-client