Error: rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
File:                     CodsoUE1QedntQSzPzNJ9CgxUrI.mft (raw, json)
Hash identifier:          nc+HSN6gqDgtNkuPOSrYS4Ef+Yk2aPACZHn3z4EfuZE=
Subject key identifier:   BB:B0:1B:75:2E:E0:E5:34:DE:3E:8F:8E:E1:64:44:EB:1A:80:44:B3
Authority key identifier: 0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2
Certificate issuer:       /CN=F36A6DD7AR/serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
Certificate serial:       0A9F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
Manifest number:          0A96
Signing time:             Tue 20 Oct 2026 01:32:04 +0000
Manifest this update:     Tue 20 Oct 2026 01:32:03 +0000
Manifest next update:     Thu 22 Oct 2026 01:32:03 +0000
Files and hashes:         1: CodsoUE1QedntQSzPzNJ9CgxUrI.crl (hash: IY1XwLI9ZO0R//zKV2MxqxQ9sm6Q0AvzBD3fC4GCGXo=)
                          2: 30154892C3AB11F19F73DBAECE1D38B0.roa (hash: LtjIFcLWuhSy/2qVztZJLHBmhCFvxOyi4m2Vc5wFP3Y=)
                          3: EA6F82D6C35911F1BACC0E08CF1D38B0.roa (hash: IN2BUCUDCSeRq8AbJOy9PWNdz8MXcsZxnbsNx4TL1vM=)
                          4: ED0F6D76C4C211F084BF89D8DAE4EC9C.roa (hash: EC71aq4NL9tN5YVZeMJv6LmO9eXOL8Co9e+u9TIC6lY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                          rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2719 (0xa9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AR, serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
        Validity
            Not Before: Oct 20 01:32:03 2026 GMT
            Not After : Oct 22 01:32:03 2026 GMT
        Subject: CN=6ad6c494-cd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:2c:36:67:c7:c3:50:9e:0f:54:ae:76:7b:
                    f3:b3:fd:d2:38:d1:60:a6:8f:09:2b:a5:d8:d7:cf:
                    b0:fd:8e:7c:7c:5a:91:cb:8c:05:20:51:f9:bd:d0:
                    84:46:d2:8e:c7:f5:b0:85:c9:07:21:63:b1:db:50:
                    78:ee:4e:df:31:ca:ed:9b:ae:b8:2b:69:9b:a1:52:
                    b0:66:58:cb:8b:d8:a0:93:c6:6c:37:d1:8a:70:b1:
                    83:92:19:b4:b3:d4:3b:7e:1d:1d:f0:0d:58:d7:c6:
                    dd:a9:e6:e7:d8:11:a7:0a:a6:7e:fb:bb:58:48:90:
                    86:b1:8f:72:73:9b:f5:ab:14:71:75:89:96:59:98:
                    9d:3f:cf:f7:33:e8:34:37:4e:8d:58:7e:54:c0:53:
                    cf:91:0f:49:98:76:37:4d:64:71:0e:67:c2:db:e2:
                    0c:ac:7b:8b:35:41:de:b5:38:e1:eb:b3:24:ca:2b:
                    99:17:7c:23:34:50:f5:50:61:89:f4:77:c1:02:4c:
                    0f:99:9c:82:40:78:d7:70:dc:80:a7:d9:a3:2a:98:
                    4b:81:00:e6:4e:6a:fc:be:f7:a4:c8:75:fb:8b:a6:
                    c8:03:0f:1d:7b:1c:2e:4a:fc:c5:08:41:fc:ea:c6:
                    ae:d5:f2:51:f8:0f:fb:cc:01:65:70:47:dd:74:76:
                    5e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B0:1B:75:2E:E0:E5:34:DE:3E:8F:8E:E1:64:44:EB:1A:80:44:B3
            X509v3 Authority Key Identifier:
                keyid:0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:70:f3:63:db:67:ae:e3:4d:61:ee:9c:f5:8d:d1:fa:42:76:
         e1:92:ab:c0:fe:33:da:e1:44:80:b1:90:aa:bd:a1:17:96:16:
         2b:14:4b:f0:b2:53:a7:c2:2f:bb:4f:26:d6:e3:16:47:cf:72:
         65:7e:ed:39:b0:66:cf:f8:a1:21:4f:10:48:66:74:89:8f:64:
         46:6b:4b:b7:64:d6:a0:9f:02:08:f8:bb:1f:82:1a:d0:38:e7:
         cc:ce:e1:c4:27:7d:b4:86:e0:ed:2a:f7:0d:b2:8c:3d:05:65:
         d4:60:12:b7:68:aa:78:aa:9f:cc:14:53:09:9c:ca:e0:66:27:
         89:6a:52:7d:54:fb:ea:bf:90:1e:fa:8b:4c:67:6a:88:f6:c3:
         8a:c3:ad:78:b7:51:99:86:e4:9c:90:a8:db:db:0e:26:64:3c:
         81:f9:a0:15:a8:f1:57:a4:b8:f6:ca:d8:b2:0e:dd:e4:9d:02:
         d3:8d:86:d2:ed:e5:d6:87:7e:db:4b:31:eb:d9:97:4e:7e:f3:
         d0:66:a7:cc:1a:4d:88:46:b2:4b:f4:7f:88:c7:aa:23:5e:4b:
         25:45:92:5d:36:6d:13:f0:f3:e9:0e:74:63:03:28:71:20:c9:
         1b:e0:36:ad:c3:24:c3:63:58:0f:4b:02:a1:99:d7:87:24:e4:
         09:d3:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:40:42 2026 by rpki-client