Error: rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
File:                     CodsoUE1QedntQSzPzNJ9CgxUrI.mft (raw, json)
Hash identifier:          4B+EtjASiFvxIucxWLAu+8+ZgdGxCpt37fIGmgzzplA=
Subject key identifier:   2C:4D:24:60:7C:68:77:A3:8F:B4:9B:83:1E:D3:46:64:1B:50:AB:5F
Authority key identifier: 0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2
Certificate issuer:       /CN=F36A6DD7AR/serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
Certificate serial:       0AA2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
Manifest number:          0A99
Signing time:             Fri 23 Oct 2026 01:32:02 +0000
Manifest this update:     Fri 23 Oct 2026 01:32:02 +0000
Manifest next update:     Sun 25 Oct 2026 01:32:02 +0000
Files and hashes:         1: CodsoUE1QedntQSzPzNJ9CgxUrI.crl (hash: NwoWlI5dntiXi0q2cdp7Bfuv3vWDfvpYyNqefg8C0ag=)
                          2: 30154892C3AB11F19F73DBAECE1D38B0.roa (hash: LtjIFcLWuhSy/2qVztZJLHBmhCFvxOyi4m2Vc5wFP3Y=)
                          3: EA6F82D6C35911F1BACC0E08CF1D38B0.roa (hash: IN2BUCUDCSeRq8AbJOy9PWNdz8MXcsZxnbsNx4TL1vM=)
                          4: ED0F6D76C4C211F084BF89D8DAE4EC9C.roa (hash: EC71aq4NL9tN5YVZeMJv6LmO9eXOL8Co9e+u9TIC6lY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                          rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722 (0xaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AR, serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
        Validity
            Not Before: Oct 23 01:32:02 2026 GMT
            Not After : Oct 25 01:32:02 2026 GMT
        Subject: CN=6adab912-ac9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:5d:3c:9e:09:f4:05:aa:ee:ae:fc:1e:c4:
                    a4:db:b3:94:df:00:3c:b0:28:0f:de:c7:53:d1:a5:
                    40:c2:d9:59:29:b1:98:21:80:34:eb:88:eb:bb:51:
                    8b:e2:23:6e:c7:3a:88:d8:e6:11:ed:96:25:f7:42:
                    df:5b:d4:f4:bc:21:fa:dd:4e:74:4a:a3:83:77:66:
                    44:0f:6f:21:ed:b2:3b:35:42:64:32:6b:f3:a8:10:
                    cc:2e:28:74:50:e1:b8:55:ad:26:55:a5:94:3a:6e:
                    ae:95:c3:18:f0:15:6a:27:34:f8:3a:e3:b2:1f:82:
                    5a:17:e3:ad:e6:33:cf:5f:11:2c:75:d5:e4:49:4d:
                    52:af:f8:f9:94:74:4e:83:49:8d:6f:ac:cc:6b:f8:
                    7d:77:45:8a:54:9d:ff:6d:5c:71:75:bd:71:97:39:
                    6f:b7:3a:b5:36:12:45:1c:72:70:6d:9d:ff:39:bb:
                    cc:54:2b:83:ad:d2:75:1a:36:9f:3c:3d:69:77:cc:
                    ee:1e:ad:bd:2a:f9:60:04:08:cf:03:54:4b:83:5e:
                    75:95:76:fa:e9:b3:83:b0:82:3d:91:8e:c7:4e:8d:
                    fe:1b:ad:27:58:55:09:80:26:91:d3:a8:be:62:e6:
                    84:3a:f2:53:42:2e:7a:de:ed:08:5b:7f:22:5b:17:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4D:24:60:7C:68:77:A3:8F:B4:9B:83:1E:D3:46:64:1B:50:AB:5F
            X509v3 Authority Key Identifier:
                keyid:0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:59:d2:ca:bd:37:84:a3:da:3f:bc:bb:15:1b:b4:be:07:
         ac:db:3e:cd:c0:88:2d:07:80:9f:07:05:3e:93:d4:53:42:a4:
         04:98:69:e8:1b:d9:bb:31:22:fc:f7:41:c9:5c:13:70:f8:8f:
         87:8c:8a:2c:33:28:69:6d:64:d3:71:db:50:90:d2:2c:34:a7:
         5c:19:c9:1d:b8:91:14:37:31:01:4b:eb:96:97:d9:78:a0:54:
         e8:9f:85:e5:f2:6e:8c:76:b2:41:7a:63:bd:43:50:8d:d1:82:
         37:44:54:8e:b9:85:c3:03:6f:4c:e6:6b:aa:19:38:1e:df:87:
         24:69:8b:cf:4e:0c:e7:0d:50:6f:a1:18:c5:86:df:9b:64:77:
         40:12:63:c5:c1:97:cc:69:ed:8f:de:07:27:fd:4c:b2:22:6a:
         6f:b8:c8:61:14:87:b5:ea:d3:22:1f:54:da:8d:9d:a7:83:60:
         a9:78:27:c6:18:46:d9:65:f9:32:27:90:28:9e:0b:c7:b1:d7:
         e7:11:22:58:f8:18:ad:38:1e:72:6c:81:bf:93:35:9d:b6:30:
         de:cd:29:89:7c:7b:29:81:7b:f1:ab:7e:d3:c8:db:52:d9:fb:
         f5:d8:67:5d:56:2b:12:5e:ef:eb:6a:fd:8c:8b:5f:bc:7e:10:
         cc:ba:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 05:11:04 2026 by rpki-client