Error: rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft
File:                     a8q8TzeM0E56oT9j1SDUlbZiK-k.mft (raw, json)
Hash identifier:          Sc7VelOOUCE+TZUMWdkhhToiCmwrMovDvzYsuyCSy4E=
Subject key identifier:   AD:CB:A8:51:1D:5D:28:65:92:17:1B:71:5A:5B:E2:8D:21:CD:3E:8F
Authority key identifier: 6B:CA:BC:4F:37:8C:D0:4E:7A:A1:3F:63:D5:20:D4:95:B6:62:2B:E9
Certificate issuer:       /CN=F369B304AR/serialNumber=6BCABC4F378CD04E7AA13F63D520D495B6622BE9
Certificate serial:       0101
Authority info access:    rsync://rpki.afrinic.net/repository/arin/a8q8TzeM0E56oT9j1SDUlbZiK-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft
Manifest number:          0100
Signing time:             Thu 17 Sep 2026 05:21:51 +0000
Manifest this update:     Thu 17 Sep 2026 05:21:50 +0000
Manifest next update:     Sat 19 Sep 2026 05:21:50 +0000
Files and hashes:         1: a8q8TzeM0E56oT9j1SDUlbZiK-k.crl (hash: MmHRPDRNwW576JXfN9U8bZv8rWepYhz1z+Ft7SwozYw=)
                          2: 63C36E3C7FA711F1A3AB6010CF1D38B0.roa (hash: cpxY7MTwcZ4rCm+4PLpIjuOiKLrZezkOZjvhgUKx7fg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft
                          rsync://rpki.afrinic.net/repository/arin/a8q8TzeM0E56oT9j1SDUlbZiK-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B304AR, serialNumber=6BCABC4F378CD04E7AA13F63D520D495B6622BE9
        Validity
            Not Before: Sep 17 05:21:50 2026 GMT
            Not After : Sep 19 05:21:50 2026 GMT
        Subject: CN=6aab78ef-8aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:c1:df:11:29:68:1a:39:b2:7f:b2:60:58:
                    8e:db:66:d5:91:bc:88:2e:8f:c0:08:09:34:8b:e1:
                    09:60:e0:bb:43:1a:76:9d:90:e8:c0:52:45:ac:7a:
                    68:4c:2b:0b:c1:84:df:22:91:d9:8a:1b:7b:9d:48:
                    32:4a:ab:51:8a:0c:d6:9a:43:5f:a5:49:37:d6:ca:
                    07:59:35:f6:53:3e:a0:38:aa:36:13:b8:f2:50:50:
                    7e:24:c2:c0:2b:4d:e3:b1:81:31:62:a1:1a:a1:a3:
                    48:b9:48:d9:19:a4:9a:81:eb:94:1c:00:86:eb:a6:
                    57:49:6b:32:6c:e7:75:d5:76:5c:65:93:fc:ac:7f:
                    41:00:68:ef:8e:6e:bb:27:83:4d:4f:83:45:4f:db:
                    17:e5:41:70:d5:92:e6:6d:6e:f6:ca:c0:fb:99:53:
                    2f:c4:ed:14:df:e2:fb:e5:4f:98:72:87:8b:03:d1:
                    d4:fc:71:01:2a:ea:46:7a:c4:7d:d4:24:3e:38:af:
                    e6:62:f1:e3:1d:d4:63:da:66:67:70:55:dc:a1:db:
                    48:7c:98:59:ba:7c:4d:c8:90:f7:b2:8d:4c:97:aa:
                    54:76:e9:43:96:49:ef:6a:0f:7c:c2:0d:8d:35:b1:
                    56:31:12:40:9c:15:8d:5c:84:b0:24:f0:05:5a:7f:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CB:A8:51:1D:5D:28:65:92:17:1B:71:5A:5B:E2:8D:21:CD:3E:8F
            X509v3 Authority Key Identifier:
                keyid:6B:CA:BC:4F:37:8C:D0:4E:7A:A1:3F:63:D5:20:D4:95:B6:62:2B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/a8q8TzeM0E56oT9j1SDUlbZiK-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:31:ac:63:d9:31:64:e6:3c:84:d3:18:8c:80:c0:42:e4:
         8b:cd:c4:a2:56:2d:bc:20:2d:ec:89:ff:4d:a1:ef:8d:72:4a:
         c8:b1:1d:6f:9c:74:6f:3a:65:0d:5e:00:b4:e3:dd:1a:7e:84:
         fe:b2:64:2f:99:64:4f:54:85:50:af:c9:aa:c8:8f:a5:bb:aa:
         48:91:14:8d:4e:fa:73:fd:80:77:54:a9:6e:c1:be:03:2d:da:
         b3:78:03:74:0d:57:6a:06:27:49:0c:f7:51:6b:fa:24:d6:f6:
         aa:ee:7a:d8:42:c4:96:20:ab:73:e9:23:9d:c5:a2:93:80:24:
         48:5e:5c:3a:96:94:7f:ee:ab:bd:11:c0:2b:d3:11:ea:40:ec:
         c8:6b:e3:7e:49:01:11:79:f6:e0:a8:cd:3a:bc:cf:97:1a:4d:
         8f:88:9a:7d:f1:61:80:e0:47:46:c0:d9:58:f6:d5:89:f0:a0:
         1b:83:53:88:e6:80:e2:49:bb:a4:45:84:ac:5a:9f:db:c5:8e:
         ae:b3:a2:7c:b4:05:57:49:b1:a9:f0:f7:85:a3:7d:f5:5b:2e:
         aa:a3:2b:c2:6a:3f:54:a6:b0:d7:33:f4:95:70:13:f0:3e:ea:
         c2:57:f4:4d:af:f7:c4:9f:99:2b:a9:f1:ae:0d:ef:de:78:c9:
         9d:6f:e8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:51:52 2026 by rpki-client