Error: rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
File:                     g90Sbl5YX_qT9fH_Xe72__27_6Y.mft (raw, json)
Hash identifier:          HS/Xlh1xB5jS7heUnxhmQ9csgJte3hVkMgBSXXloqhM=
Subject key identifier:   13:79:38:12:A4:A3:3E:DD:86:13:4A:85:EA:FD:17:87:63:F8:29:81
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Certificate issuer:       /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial:       05F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
Manifest number:          05EB
Signing time:             Mon 26 Oct 2026 03:04:18 +0000
Manifest this update:     Mon 26 Oct 2026 03:04:17 +0000
Manifest next update:     Wed 28 Oct 2026 03:04:17 +0000
Files and hashes:         1: g90Sbl5YX_qT9fH_Xe72__27_6Y.crl (hash: 9g2aQArTJP3EW4P1yBYZQFzxp/YvciC3JGwLRbITASA=)
                          2: 68EDAB98927111F186EB3CD4CE1D38B0.roa (hash: kTnWk3m5q5/QJ4PYY6Jp+oga71lyxSS8SvYf7padrxY=)
                          3: 3A8303D0927011F1B38B24CCCE1D38B0.roa (hash: ARSQ479hTds7f4R2wC4oFh5+D2OTaRvG5A9HR5RJPoQ=)
                          4: 5EFA3278F0CA11EEA9DC16BC775412E6.roa (hash: 3auDBpHpM3kdULnRRSm/mIzDvmza9Nwt6gL4Un18lvA=)
                          5: 44AA2642DD5211EFB4022CA6762E951A.roa (hash: YLlkpcwgvPAJRBxib2dLmg6by1FzGd47JbcV2KYgirg=)
                          6: AD052FB4927011F19BEA12D0CE1D38B0.roa (hash: e5QI8zuY7761TaGfjSjT7NI7oSIl2les1Ndd02M0R5U=)
                          7: 55658E129FF011EF840C519B762E951A.roa (hash: SQ6x/8wlXxQQhSUXwwgi7zRj4j3gnNlbtGPHAue35w4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1527 (0x5f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E7CAF, serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
        Validity
            Not Before: Oct 26 03:04:17 2026 GMT
            Not After : Oct 28 03:04:17 2026 GMT
        Subject: CN=6adec332-0b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:cf:0f:39:7e:6a:22:da:69:3a:f7:10:a0:
                    40:bd:84:ec:2e:86:ff:42:b3:01:c3:42:ed:da:ab:
                    ea:7c:42:54:b6:71:75:f8:eb:a3:18:1f:00:92:46:
                    3c:dd:e8:53:24:60:bf:8b:c2:54:75:22:98:15:79:
                    b9:f3:4f:a9:22:4d:3c:1f:05:82:9d:97:34:ed:d8:
                    8e:bc:31:6e:0a:52:cd:a3:3e:9e:36:85:ce:82:18:
                    5b:80:81:4d:24:ae:64:30:a9:0e:81:df:5c:a4:db:
                    09:fc:bb:2b:3a:13:6b:cd:62:34:d0:73:50:d8:54:
                    34:41:20:7d:f2:b8:d8:e2:a3:f3:94:0a:24:55:5a:
                    47:22:15:c4:91:36:63:c2:57:ab:1e:cc:24:91:9c:
                    d9:fd:14:2f:8c:02:89:02:83:3f:9d:78:e2:cf:44:
                    99:d3:0d:48:e6:65:d2:2a:00:f8:46:1e:10:27:13:
                    2b:a5:94:95:9b:c0:ea:4f:57:40:52:a0:0b:9c:f2:
                    36:70:ba:3e:2f:4c:2d:e2:70:f9:a2:50:77:5f:3f:
                    d0:00:48:9a:90:a6:3a:fe:5f:28:75:1c:12:fd:6e:
                    5b:5a:d8:30:79:77:93:54:0d:e9:f1:dc:82:4c:2a:
                    8a:bc:2c:48:ec:4c:88:93:f9:e8:87:69:68:99:41:
                    9f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:79:38:12:A4:A3:3E:DD:86:13:4A:85:EA:FD:17:87:63:F8:29:81
            X509v3 Authority Key Identifier:
                keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b4:fa:d6:e1:5c:e5:d3:76:08:1f:90:e3:98:62:b9:64:43:
         90:a3:88:94:42:08:d3:8f:53:3d:91:1f:49:55:7b:36:9e:24:
         ba:30:8b:0e:d1:53:21:e9:71:d1:c7:7d:2c:fd:2a:73:9b:bb:
         d6:86:42:2a:8b:08:7a:67:a8:25:96:55:af:61:01:46:a8:e5:
         48:d5:8a:61:44:1a:72:f5:82:a0:92:bd:1e:07:fb:26:d7:1d:
         33:4d:dc:eb:0c:38:73:a7:d8:1f:e5:7c:5b:e7:5b:4d:a6:17:
         1f:8c:5e:b8:3a:87:b6:1d:2a:c0:77:29:5f:6d:cc:f9:99:02:
         7b:9c:87:e1:95:b2:10:40:ea:9c:2e:88:1f:7f:69:58:6d:09:
         3d:8f:27:1c:bf:34:dc:f1:6b:1e:b7:bd:a0:91:17:66:90:f0:
         b0:fc:34:a9:e1:a0:e4:df:14:b2:c4:8d:3b:f4:05:e3:b1:46:
         64:9f:d4:42:63:09:a9:92:45:cc:2f:c9:53:a0:83:21:c7:99:
         01:e0:2c:1c:1e:07:59:8a:af:2f:8e:62:52:c8:0b:a4:35:6b:
         40:f5:56:05:39:a9:de:19:c2:46:b1:c6:80:9d:86:55:eb:24:
         65:b2:20:34:1b:6a:75:ce:37:92:e1:6b:f0:0e:25:e9:f5:f9:
         84:26:9b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:27:16 2026 by rpki-client