Error: rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
File:                     xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft (raw, json)
Hash identifier:          6xkGbtrvQUytY3wEIaA40pBmq+FbDMBj6j9qi+efspA=
Subject key identifier:   73:BF:A4:4A:E6:18:48:39:02:9A:4B:14:EB:26:33:C3:FF:18:08:2B
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Certificate issuer:       /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial:       03BA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
Manifest number:          03B8
Signing time:             Tue 25 Aug 2026 04:00:32 +0000
Manifest this update:     Tue 25 Aug 2026 04:00:31 +0000
Manifest next update:     Thu 27 Aug 2026 04:00:31 +0000
Files and hashes:         1: xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl (hash: Js/w2aCCmbwpdc3we/q+09uWwrh/CXCpEzpHOyQ+pnA=)
                          2: 6FFF2C08413411EFA7FB5A60762E951A.roa (hash: iN5LnQR83/zdvQSHnZNsxLnJVE/qt/FcoEST3TDCqcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                          rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 27 Aug 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAR, serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
        Validity
            Not Before: Aug 25 04:00:31 2026 GMT
            Not After : Aug 27 04:00:31 2026 GMT
        Subject: CN=6a8d1360-fafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:c3:72:8b:21:b5:3f:53:75:cc:cb:47:9f:
                    47:82:85:76:89:5e:28:a3:4a:4d:f0:f9:f5:35:94:
                    04:25:10:c8:b9:ec:2d:1a:97:fd:38:1f:58:1d:37:
                    86:59:29:84:67:f9:69:12:45:82:a8:89:95:e6:49:
                    7e:d9:0f:33:d4:ee:fb:04:13:3e:71:6e:ea:f8:f3:
                    4a:33:27:96:28:04:e5:c0:ad:3c:8e:db:5e:8b:e2:
                    c4:7e:6e:85:f3:ae:a9:e7:02:49:46:fe:93:d3:8e:
                    44:ea:18:46:9d:05:33:7d:9b:aa:b4:41:87:2c:fe:
                    f0:2d:0f:2e:9c:3d:d8:64:a1:49:87:62:1a:9e:06:
                    46:7c:9a:69:9c:78:00:35:19:ee:bc:24:f5:0f:ed:
                    74:4d:44:65:36:8e:5c:d8:ed:b5:6c:49:07:38:6d:
                    61:84:4e:73:27:ee:ac:6a:32:8a:e9:af:bf:dd:9a:
                    e0:ce:a9:61:fa:fb:42:c6:36:33:2e:63:f2:f6:22:
                    63:6d:09:f2:64:ad:36:cc:b8:74:ee:25:8d:9b:c5:
                    68:87:ea:7a:3a:b4:a1:b7:c6:c9:db:f8:38:bd:5f:
                    d2:f5:3f:07:7a:8a:39:59:3a:af:b6:e8:53:06:b4:
                    97:03:45:6b:d3:bb:80:3b:0c:0b:86:c3:74:67:d7:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BF:A4:4A:E6:18:48:39:02:9A:4B:14:EB:26:33:C3:FF:18:08:2B
            X509v3 Authority Key Identifier:
                keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:4e:5d:c6:36:71:35:7b:5a:30:ca:10:2b:ed:7b:83:fd:
         af:b5:e8:13:aa:44:b4:49:9b:f9:8f:6b:e0:c0:08:6b:e7:e4:
         3a:66:b0:b7:1e:b5:90:89:65:bb:55:53:88:d0:86:2e:6b:80:
         de:4c:89:33:90:10:27:69:57:40:29:d3:2a:3a:99:ad:12:ea:
         57:6e:f7:24:30:17:b3:c4:2c:0b:e5:d0:3a:fd:e9:61:ad:cc:
         85:ec:15:b8:25:be:77:4a:2d:b4:d2:d3:bd:4f:2a:73:0a:c6:
         eb:bf:2a:d2:01:92:88:6a:00:26:92:ac:a8:c0:bc:48:d5:aa:
         0c:ce:5a:f0:e7:0f:f5:d7:fb:97:ee:4b:1c:6f:e6:3a:14:58:
         43:72:19:80:98:eb:ea:31:99:e9:a8:5a:fe:86:2d:7d:2e:13:
         b7:db:95:ad:2d:ba:1b:15:f7:ad:e5:9f:b7:66:7a:46:f5:12:
         34:8e:28:cd:61:02:ca:4d:01:50:82:09:12:d8:b1:9e:06:0a:
         0c:19:a0:29:9c:32:09:35:ef:7c:db:51:9a:ec:34:b1:a5:3f:
         a6:9d:e0:40:1b:28:1f:7a:41:a3:65:b6:40:3d:bf:20:6f:e4:
         a4:d9:82:4d:4e:64:02:17:29:4d:47:23:40:0e:c4:cf:f2:b8:
         64:25:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 18:46:39 2026 by rpki-client