Error: rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File:                     bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier:          rFn0i2Iq8Bp+BMtSOM9xzWnjgi9gvab9giLT81dUNVM=
Subject key identifier:   F2:E2:69:E6:D2:53:3A:A5:B1:7F:65:63:E3:51:B9:0D:B6:65:8B:92
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer:       /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial:       0781
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number:          077F
Signing time:             Thu 17 Sep 2026 02:18:56 +0000
Manifest this update:     Thu 17 Sep 2026 02:18:55 +0000
Manifest next update:     Sat 19 Sep 2026 02:18:55 +0000
Files and hashes:         1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: ZjgBLAL+6Vca1STfWaQkY2mejrlPSLIzuNjx3X6QhJA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                          rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921 (0x781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
        Validity
            Not Before: Sep 17 02:18:55 2026 GMT
            Not After : Sep 19 02:18:55 2026 GMT
        Subject: CN=6aab4e10-d993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:1a:80:78:3e:b4:cb:42:5f:e4:c5:4b:d3:
                    e5:54:d2:5f:af:88:9d:af:00:2f:c0:e5:db:62:8c:
                    84:cc:50:50:d7:a1:3d:a6:d3:ef:55:51:d2:2a:ce:
                    ca:a6:de:dd:6b:3e:0b:bf:14:64:27:c9:c7:56:ca:
                    39:c2:66:76:57:27:22:43:93:9e:4a:57:29:2a:04:
                    68:a3:4f:0d:da:34:e9:ae:13:3c:3d:d6:0e:0b:ca:
                    54:08:b4:17:3a:84:96:fe:f3:33:a9:3a:3d:fd:c6:
                    36:6d:48:31:1c:3a:d7:21:5b:26:90:c9:a6:26:a7:
                    4a:19:46:0b:b4:eb:9c:29:16:48:4b:52:a2:d1:5c:
                    ca:f4:b2:2f:a4:39:62:09:b4:14:35:38:32:d4:59:
                    6c:3c:b8:71:92:82:d2:15:2d:02:82:73:c6:a9:67:
                    cb:81:84:ab:9a:3c:1a:c0:f7:46:ef:3d:07:51:0f:
                    2f:3d:f8:c8:ca:31:61:bf:69:7f:71:5c:4b:d5:3b:
                    6d:e4:b7:df:1a:aa:f1:18:87:c9:b4:96:48:31:0d:
                    79:17:83:a1:a5:de:23:f6:2d:fb:fe:b9:d3:51:39:
                    fc:94:da:f7:0f:7b:04:75:bf:68:bf:bd:48:eb:7a:
                    dd:6c:57:fb:f1:6b:2b:37:22:9b:28:4e:9c:9f:f8:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:69:E6:D2:53:3A:A5:B1:7F:65:63:E3:51:B9:0D:B6:65:8B:92
            X509v3 Authority Key Identifier:
                keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:92:3e:cb:5e:0d:1f:35:d7:50:bc:fd:2e:5a:94:8e:0f:
         95:d1:71:a3:aa:27:8c:da:a3:5d:80:bc:27:db:20:b0:f8:0a:
         f7:71:9d:6f:85:28:81:b9:2a:25:fe:7c:54:6b:8a:e1:5a:0c:
         64:33:25:4d:3f:dd:7c:78:80:bb:84:be:18:f2:65:8b:78:b5:
         89:e1:c1:de:4f:ee:ae:c7:e9:2b:b7:fe:26:8e:b6:d4:60:80:
         dc:0b:7e:3e:2f:1f:a8:8f:39:e4:ad:fc:6f:bc:ca:3e:06:1b:
         d0:67:59:fe:b5:91:af:68:f7:dd:22:c5:7a:74:85:23:07:53:
         21:10:dd:36:7f:b4:6a:91:1d:2b:5b:3d:96:9d:5f:6a:c0:41:
         90:6c:11:69:4c:9d:e2:d9:cb:5b:df:97:2a:6f:6e:be:2d:f4:
         96:66:ed:9a:a6:4d:8e:08:18:7a:3f:81:e6:7d:25:d8:b0:cc:
         d9:c4:a9:eb:3e:2b:f1:f9:30:f9:c2:d2:a5:8a:e5:a1:b9:35:
         2b:f0:e3:44:47:65:98:dd:a0:9a:33:af:02:ae:9b:84:9b:20:
         78:03:11:1e:ad:98:c3:7c:f3:b3:cd:07:f2:7a:ad:2c:b7:94:
         ac:72:3a:4a:d3:ca:d7:6d:9c:65:9a:78:da:a9:f7:e4:ac:08:
         f0:c6:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:58:36 2026 by rpki-client