Error: rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
File:                     Sbrmff7enZUJuwOnxzLcVmFmt1o.mft (raw, json)
Hash identifier:          gy8i9RF00/ksohE3Okzzhy//egXG6bLbAF+sc01/x7M=
Subject key identifier:   B2:6E:33:C4:97:B9:4A:E2:D7:C8:2F:FA:00:E0:44:0E:04:A4:00:59
Authority key identifier: 49:BA:E6:7D:FE:DE:9D:95:09:BB:03:A7:C7:32:DC:56:61:66:B7:5A
Certificate issuer:       /CN=F36B0C44AF/serialNumber=49BAE67DFEDE9D9509BB03A7C732DC566166B75A
Certificate serial:       03DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
Manifest number:          03D6
Signing time:             Thu 10 Sep 2026 03:58:10 +0000
Manifest this update:     Thu 10 Sep 2026 03:58:09 +0000
Manifest next update:     Sat 12 Sep 2026 03:58:09 +0000
Files and hashes:         1: Sbrmff7enZUJuwOnxzLcVmFmt1o.crl (hash: pWQZwdaC4tv/FxJtqZcvx0/XGkwEJ7VMCN66p/+mvMg=)
                          2: 96446AE6C04111EE9477E2A2775412E6.roa (hash: qXGiyWvqf9jjyOwcPQcuVS3D910J4Jz6Wlu+WbOF/zM=)
                          3: CE4C1BD8BF7D11EE97BCA7BF775412E6.roa (hash: yJpP30xuvTe5uFFB4LtOLOWEiDS7piREXKk0KFAJ23A=)
                          4: F1CA4556BF7F11EEBB4826C3775412E6.roa (hash: l40ZqirIPBTx/x+bNutVHtKD07PTBU26d+cCsLpIIBk=)
                          5: 070A0F76BF7D11EEB89736BE775412E6.roa (hash: grOTvQ1t6UyvliV5knhBI1h+ljufMPN9n26TEDv5AK8=)
                          6: FA0A71ACBF7D11EEAF08CABF775412E6.roa (hash: PfO9Y+c33Exyp9yfR1CWVhKzDN+Qro1W+mHbGnhyeOg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B0C44AF, serialNumber=49BAE67DFEDE9D9509BB03A7C732DC566166B75A
        Validity
            Not Before: Sep 10 03:58:09 2026 GMT
            Not After : Sep 12 03:58:09 2026 GMT
        Subject: CN=6aa22ad1-9e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:43:cb:a8:4c:35:07:59:32:a5:93:84:ff:
                    c0:17:f3:59:6d:31:2e:a7:f2:4b:74:2b:43:93:fa:
                    01:53:f6:1f:7c:53:55:b7:4e:f7:59:f3:a6:5d:12:
                    32:a3:24:53:d5:55:58:73:dd:2c:a1:6e:0c:18:5e:
                    88:8e:68:ed:d0:27:37:a9:30:c8:6f:28:d0:52:5d:
                    10:ff:7e:c9:2a:d4:12:22:77:0c:e4:2d:a4:68:33:
                    50:8b:3f:c2:0c:1c:b1:c9:a1:42:8a:01:5e:28:ff:
                    19:cb:03:59:4f:1e:57:c5:22:ed:41:72:9a:c7:b6:
                    bf:df:c4:12:9a:31:dd:c5:cf:ec:24:e1:a3:99:ce:
                    aa:a7:c6:22:e8:93:7f:28:79:1e:aa:01:80:49:86:
                    50:8b:60:a8:85:ec:d1:39:38:fd:16:75:c0:19:bc:
                    ad:2c:34:57:68:ce:22:ea:ac:9f:bb:a7:b7:9d:32:
                    57:f0:ab:26:9d:ce:8e:c6:04:62:fe:9a:bf:56:4c:
                    46:3a:01:ef:58:20:50:83:dd:c0:dc:ec:89:1a:42:
                    4e:00:c2:ea:e6:22:e6:fb:f0:3a:26:06:aa:a5:95:
                    1a:de:e5:5a:e1:b6:57:bc:0b:68:65:7c:77:6a:48:
                    67:82:20:9a:10:b1:38:01:22:09:10:fc:9c:38:fe:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6E:33:C4:97:B9:4A:E2:D7:C8:2F:FA:00:E0:44:0E:04:A4:00:59
            X509v3 Authority Key Identifier:
                keyid:49:BA:E6:7D:FE:DE:9D:95:09:BB:03:A7:C7:32:DC:56:61:66:B7:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:00:d0:28:67:b4:d2:d0:2f:42:b6:b7:0f:0d:b7:c0:ac:1e:
         cb:ad:28:6a:d0:cd:3e:aa:49:ef:df:18:ef:3c:11:73:41:e3:
         91:70:15:7e:ac:cf:46:c0:a8:3b:74:53:1f:0e:25:f6:11:31:
         e4:62:06:88:b1:eb:14:e2:61:d0:6a:fd:47:e9:f2:45:26:ea:
         25:77:aa:b4:ad:fb:e7:8a:c7:a9:0e:56:ee:10:8f:bf:b8:50:
         db:0f:4e:dd:ac:3d:bf:42:62:db:07:fc:69:21:05:24:be:4e:
         4f:8c:8c:89:71:aa:67:0f:38:19:21:b0:5e:2a:11:0b:b9:d9:
         3b:67:de:ec:4c:8e:f7:9e:14:5b:e9:ac:3d:1e:7d:b8:d3:a8:
         de:98:76:e8:7c:1c:fa:95:9c:28:9b:92:5e:61:5c:52:9e:b5:
         2a:81:ae:d1:18:98:67:7b:44:93:cb:d2:61:fd:89:4c:cb:e0:
         6c:be:b8:a1:0a:55:0c:92:e6:d3:fc:07:49:ce:a7:37:36:39:
         7a:f5:1c:5b:55:50:4d:4a:1b:0d:e2:d9:2c:14:b7:4e:f8:8a:
         00:fd:ad:aa:72:4a:cd:18:f5:33:b2:d6:a8:da:cc:7c:fc:66:
         42:f7:6e:2a:e3:72:44:27:ec:fe:0d:33:8f:f4:be:63:83:3d:
         f7:ed:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:56:05 2026 by rpki-client