Error: rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
File:                     7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft (raw, json)
Hash identifier:          iPCfneyOKotP0u2j6E53jp3qVNFXEjOFpvZbDX6GPVw=
Subject key identifier:   B8:44:D6:6B:A1:AD:33:87:FF:0E:A8:66:B4:A4:F9:1D:20:7C:40:6C
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       0741
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
Manifest number:          073B
Signing time:             Thu 17 Sep 2026 02:29:01 +0000
Manifest this update:     Thu 17 Sep 2026 02:29:00 +0000
Manifest next update:     Sat 19 Sep 2026 02:29:00 +0000
Files and hashes:         1: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl (hash: Lycz8i3n0oNMvvtqsOAYwsxnGpHULLdeU99HIpNGZ2M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857 (0x741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Sep 17 02:29:00 2026 GMT
            Not After : Sep 19 02:29:00 2026 GMT
        Subject: CN=6aab506c-04f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:60:4d:b2:ea:e0:3e:02:f6:81:eb:d6:fc:
                    c7:20:5c:c9:e8:5c:20:03:a6:e9:24:c5:f0:44:57:
                    d2:6f:57:0e:b0:aa:98:8a:79:e2:09:b0:a1:20:81:
                    06:6a:7a:0a:c3:0c:68:ce:39:72:e2:c0:c9:30:db:
                    46:cb:f0:33:6f:b5:79:67:f7:58:b2:d2:fd:aa:ca:
                    0c:0b:dc:1b:4f:f3:5b:7f:c3:00:9a:da:d6:03:f4:
                    fd:0d:d6:b1:a2:06:39:e3:c2:78:52:90:26:4f:bc:
                    6b:00:8a:db:2d:5a:75:70:84:7c:e6:3a:a4:c8:93:
                    57:74:03:30:a9:01:a0:44:59:b3:7b:4e:7e:e3:1e:
                    75:0e:24:cc:9e:e5:11:91:76:a1:0b:90:a5:88:b1:
                    ba:fc:f0:87:6f:72:2d:d0:f2:33:d5:6d:48:66:0e:
                    78:70:90:e0:fa:8c:78:17:00:3c:74:2b:0b:85:c7:
                    62:6e:4d:2a:33:d4:b5:0b:6d:0a:d4:fc:ba:1f:6a:
                    f2:60:fd:03:93:d3:aa:45:01:71:7b:ee:97:f1:7f:
                    0f:ee:3d:6a:01:d2:b9:3f:c6:da:fd:83:b6:d0:24:
                    8a:35:e4:75:2f:e0:5c:4e:aa:3b:4d:07:56:d3:50:
                    4b:9a:2e:37:11:da:8d:ce:a6:de:ce:85:6d:67:3c:
                    65:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:44:D6:6B:A1:AD:33:87:FF:0E:A8:66:B4:A4:F9:1D:20:7C:40:6C
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:25:99:7b:82:0b:d5:b4:c2:e9:ea:ec:36:f3:6d:41:ec:e5:
         7c:2b:a6:7f:1f:33:9c:5d:0a:fe:0e:5b:7f:98:80:58:6b:43:
         84:fb:3a:18:8a:c5:e9:62:09:8b:55:66:a0:b4:3b:be:9e:da:
         10:a9:e0:5c:9e:6e:db:95:9b:97:41:f4:93:c8:d1:18:b1:53:
         ee:8f:1a:75:66:31:bd:f3:b2:8d:f1:fa:0a:ff:42:7f:a5:d9:
         7e:6e:f3:fe:79:42:2e:25:03:1d:27:92:d6:ce:27:77:93:c4:
         d0:69:73:3d:45:af:0a:19:a6:4a:bf:9d:fe:b5:e4:b9:75:77:
         b3:fe:1b:93:0a:82:88:0c:dc:e8:f1:13:53:4c:f4:93:df:1c:
         df:23:7f:6f:d8:bc:49:b0:21:ef:05:f5:d3:e6:c1:ce:e6:b6:
         0d:61:2c:d5:1c:9a:8d:6e:8c:b2:8d:84:38:f0:30:b7:17:fc:
         f8:43:73:3b:fd:3c:a7:32:f7:6d:8a:5b:6f:d6:4f:cf:cb:0c:
         7c:e7:1a:ee:4e:7d:e2:83:01:23:c2:f3:2e:72:29:ce:39:25:
         de:d8:ed:85:5a:5b:8f:cd:71:d9:22:4f:bc:2f:58:db:bf:03:
         23:b7:9c:8a:78:28:1b:75:cc:1b:72:e6:d7:9b:6f:f3:9d:31:
         5f:00:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:43:03 2026 by rpki-client