Error: rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
File:                     7cVihK_vMTf8afnaeD_pzHg6baw.mft (raw, json)
Hash identifier:          tAE/D5UbOA/usCPBH+BR7W80MnbYkul98++rMbWzXms=
Subject key identifier:   48:1D:32:C1:EA:51:20:F5:FB:23:BD:F9:C4:FF:41:94:C2:48:4F:98
Authority key identifier: ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC
Certificate issuer:       /CN=F36C1D14AF/serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
Certificate serial:       099F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
Manifest number:          099D
Signing time:             Mon 26 Oct 2026 01:44:09 +0000
Manifest this update:     Mon 26 Oct 2026 01:44:08 +0000
Manifest next update:     Wed 28 Oct 2026 01:44:08 +0000
Files and hashes:         1: 7cVihK_vMTf8afnaeD_pzHg6baw.crl (hash: WmVIYqpndQfH/c5NE+Kk4g9tI5bnALjw/mla47btAIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 01:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463 (0x99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1D14AF, serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
        Validity
            Not Before: Oct 26 01:44:08 2026 GMT
            Not After : Oct 28 01:44:08 2026 GMT
        Subject: CN=6adeb069-c186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:6f:32:db:65:18:19:53:6b:bd:a3:53:50:
                    b4:27:3a:ba:0e:6e:c6:52:ee:67:eb:fd:56:c7:20:
                    93:50:b6:9f:6e:89:25:88:b1:07:ea:27:f7:3b:7f:
                    57:7f:93:e9:df:9d:9d:d9:af:2d:b2:40:f7:70:b5:
                    78:00:53:2e:67:23:70:aa:5c:67:78:e2:25:08:9a:
                    9f:12:e2:45:15:d2:5d:59:c5:05:be:73:4f:88:36:
                    a8:4f:b4:92:f7:3f:56:36:79:e9:19:bd:6f:bf:5f:
                    60:54:41:4d:fd:c4:59:39:18:b5:3b:50:60:5f:97:
                    44:a0:4e:1c:a2:f7:3e:54:ab:e4:29:2f:01:43:4f:
                    a0:39:e7:ec:da:9d:b4:74:09:f8:6d:5c:22:41:7f:
                    c0:49:aa:5d:c5:32:03:3f:69:36:ce:03:d2:2c:e4:
                    5b:7f:61:5f:c9:3a:4f:63:d9:24:78:24:ea:62:21:
                    f3:fb:79:2d:20:e0:32:64:73:8b:12:38:b5:f1:99:
                    f6:1c:95:a6:9e:95:a6:7d:1e:98:d6:06:f4:e1:63:
                    59:28:05:74:5f:e1:db:ee:0e:ec:fb:7d:bf:c9:84:
                    31:79:16:52:01:39:40:b6:bc:a4:4c:16:2b:46:f6:
                    db:f8:12:61:95:4f:64:7f:9d:30:62:d7:4e:04:ab:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1D:32:C1:EA:51:20:F5:FB:23:BD:F9:C4:FF:41:94:C2:48:4F:98
            X509v3 Authority Key Identifier:
                keyid:ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b4:98:d7:81:e7:07:b5:2a:f4:10:ef:a5:ff:2f:06:35:77:
         bb:ef:ea:39:d5:cd:b8:05:39:fd:1f:0d:e3:20:90:ff:84:7c:
         47:0a:b2:52:8a:44:b7:c5:9e:11:39:bb:c8:c0:1d:63:5d:3f:
         f9:9f:b9:b4:ec:b4:24:97:56:15:a8:b5:54:dd:24:d5:28:09:
         27:37:2f:dc:19:c8:76:92:90:3b:6b:41:74:8f:61:50:fb:23:
         2d:49:88:99:77:4f:95:05:9c:7c:53:dc:ab:86:c1:36:ff:51:
         90:f3:e3:88:f2:29:4c:da:a8:11:6b:90:04:5e:00:16:45:10:
         fa:d9:ee:17:b2:27:73:7e:ae:fc:63:91:83:82:d5:a1:89:42:
         b4:5e:79:e9:57:12:90:4a:86:97:55:bf:c4:58:57:d2:de:e5:
         3a:c4:ad:6b:9d:82:f8:4a:9e:a9:30:61:4b:c7:a3:45:54:ae:
         ad:28:0d:39:91:aa:04:90:f9:5d:fb:6d:0d:c2:33:c6:3f:44:
         8a:4d:d5:3e:6a:31:65:98:ea:bc:0a:3d:63:d7:2a:23:b2:76:
         d5:9c:ca:01:e7:36:e6:3b:b3:bd:d3:51:07:12:6e:7b:b8:be:
         a2:24:f7:d0:b1:58:9c:05:2c:77:49:53:4c:06:a3:41:7c:48:
         44:ea:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:02:41 2026 by rpki-client