Error: rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/B-2yrHL66QoAtWs6szZdJ36hjv0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/B-2yrHL66QoAtWs6szZdJ36hjv0.mft
File:                     B-2yrHL66QoAtWs6szZdJ36hjv0.mft (raw, json)
Hash identifier:          HyDTu6mjS50itMj7nyUxOJxh/Q04/FYuASs1k/hx2FQ=
Subject key identifier:   03:5D:C4:1C:FD:AF:23:A6:A5:DD:F1:C8:B1:6C:0A:BA:68:D3:50:2C
Authority key identifier: 07:ED:B2:AC:72:FA:E9:0A:00:B5:6B:3A:B3:36:5D:27:7E:A1:8E:FD
Certificate issuer:       /CN=F36CF0F7AF/serialNumber=07EDB2AC72FAE90A00B56B3AB3365D277EA18EFD
Certificate serial:       07F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B-2yrHL66QoAtWs6szZdJ36hjv0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/B-2yrHL66QoAtWs6szZdJ36hjv0.mft
Manifest number:          07F0
Signing time:             Sun 25 Oct 2026 02:08:48 +0000
Manifest this update:     Sun 25 Oct 2026 02:08:48 +0000
Manifest next update:     Tue 27 Oct 2026 02:08:48 +0000
Files and hashes:         1: B-2yrHL66QoAtWs6szZdJ36hjv0.crl (hash: a8SIY1GoPeEmW90xL3WvzNLqGtnIvyxB6kulhwEJ7fA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/B-2yrHL66QoAtWs6szZdJ36hjv0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/B-2yrHL66QoAtWs6szZdJ36hjv0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B-2yrHL66QoAtWs6szZdJ36hjv0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2036 (0x7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CF0F7AF, serialNumber=07EDB2AC72FAE90A00B56B3AB3365D277EA18EFD
        Validity
            Not Before: Oct 25 02:08:48 2026 GMT
            Not After : Oct 27 02:08:48 2026 GMT
        Subject: CN=6add64b0-ad06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:c3:01:5b:13:86:a5:3c:89:9c:73:df:1e:
                    32:8e:6b:bd:89:b9:cb:0c:23:fb:bf:ce:2f:2e:69:
                    8a:d8:f2:27:0f:bd:8d:41:c2:cc:b8:2d:13:4e:bc:
                    99:e2:98:f1:93:fd:b5:8f:68:d4:36:1d:1b:6a:a4:
                    cc:16:fb:33:c3:76:e7:b5:e1:7e:1c:35:25:5e:e7:
                    fe:d8:92:17:e9:84:7f:d4:60:7f:db:bf:f7:d5:5b:
                    44:1e:d9:fd:c0:28:60:0c:22:ba:05:0b:ab:23:87:
                    b7:73:85:b7:ab:6f:f9:a6:31:eb:9c:e9:c3:1c:84:
                    e3:bd:ee:d0:1b:64:6e:95:eb:b5:3d:81:9e:ad:bf:
                    96:82:6d:66:d7:c2:70:41:b4:dd:47:e8:52:11:c9:
                    79:46:78:2e:30:fd:52:74:c2:32:b4:a6:34:50:68:
                    6e:22:fd:1b:1f:95:f1:96:f0:29:28:8e:c1:e3:20:
                    09:87:6f:71:1c:b0:f4:b3:12:92:e7:b9:34:92:73:
                    74:b6:3c:e1:ec:56:e5:d6:f2:18:ed:46:fa:4b:99:
                    ea:8b:06:72:75:cf:35:06:f7:df:8d:89:a9:1f:b6:
                    c9:d0:e0:e7:d6:d9:bc:5a:51:2e:17:8c:aa:1b:ab:
                    76:0d:41:b8:07:66:7a:c7:55:14:46:d4:78:a3:bf:
                    fb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5D:C4:1C:FD:AF:23:A6:A5:DD:F1:C8:B1:6C:0A:BA:68:D3:50:2C
            X509v3 Authority Key Identifier:
                keyid:07:ED:B2:AC:72:FA:E9:0A:00:B5:6B:3A:B3:36:5D:27:7E:A1:8E:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/B-2yrHL66QoAtWs6szZdJ36hjv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B-2yrHL66QoAtWs6szZdJ36hjv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/B-2yrHL66QoAtWs6szZdJ36hjv0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0f:06:3a:e5:c6:88:d9:7a:e7:a5:1e:ce:30:df:c5:93:cc:
         72:c0:69:3c:44:9e:cd:5c:ac:e2:17:30:8c:08:48:bb:7a:7d:
         8f:90:1f:70:3c:d2:b9:ab:4e:fa:d2:02:8c:b0:f9:c3:96:10:
         00:2c:9e:9f:e8:dc:68:0c:07:6b:da:8f:a2:5b:97:0f:44:9a:
         6c:72:32:46:8e:61:73:d7:26:e5:15:0c:09:e5:e1:41:62:bf:
         1a:cc:20:27:bc:80:d8:43:ed:46:a8:71:3f:fc:cb:e6:4e:d3:
         04:85:12:a9:a6:95:b2:d7:c2:d8:1d:56:22:9f:33:28:84:7e:
         36:5a:74:b0:47:70:09:ed:7c:a4:54:cb:5e:31:e3:3a:b1:41:
         64:ff:46:f6:47:7e:0e:e7:f2:66:c4:94:4f:9a:fa:80:5e:3a:
         79:26:03:a6:0a:b8:57:d9:32:33:9e:4f:22:25:b7:be:f0:86:
         82:c2:ae:cc:a8:a8:2c:e7:c2:8a:19:08:47:5a:18:8a:73:54:
         dc:48:d6:7c:31:c8:cd:17:d7:8e:6a:df:7f:e3:27:e2:03:7b:
         8b:37:25:f6:40:2a:64:56:b3:a1:d2:0e:a4:fc:c9:cb:46:8f:
         1f:8d:cd:c5:c5:51:07:32:16:40:88:f8:27:d5:ca:d9:ea:3a:
         bd:9b:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 15:15:15 2026 by rpki-client