Error: rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File:                     KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier:          Tih18P4wdHT55lCNi3xClCXzlvSwZMahnqRJzkw3ppE=
Subject key identifier:   DC:42:FB:C6:35:FD:5C:E6:72:19:6E:5A:B5:59:A7:4B:F4:CA:E6:3A
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer:       /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial:       04BA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number:          04B9
Signing time:             Sun 25 Oct 2026 03:36:39 +0000
Manifest this update:     Sun 25 Oct 2026 03:36:38 +0000
Manifest next update:     Tue 27 Oct 2026 03:36:38 +0000
Files and hashes:         1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: aX9vt18HnJf79u1uUH3nkfeDty37ph0YNf8Nx/X7e2E=)
                          2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                          rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
        Validity
            Not Before: Oct 25 03:36:38 2026 GMT
            Not After : Oct 27 03:36:38 2026 GMT
        Subject: CN=6add7946-4bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:7d:19:f7:8c:81:24:40:df:1a:e1:0d:04:
                    ae:58:1f:ea:13:21:d7:86:fb:8b:c8:84:87:b7:67:
                    3b:66:67:3d:5f:25:9d:38:d6:3c:1d:7f:07:7e:f2:
                    19:5d:b8:d9:98:db:20:8a:2e:d5:63:6c:8d:1a:3d:
                    4e:8c:c2:b6:5a:f9:bf:f4:2c:8a:c7:b9:52:31:e2:
                    39:e6:c1:b4:f9:41:3e:1a:0d:21:7b:26:32:86:89:
                    c9:38:ca:c3:2c:19:d7:b6:e1:bc:e0:e1:dc:db:ac:
                    f1:4c:7c:05:33:07:c7:27:3b:cc:f9:63:d3:a9:c3:
                    c0:ca:50:df:a2:e2:a1:81:a5:14:50:75:f3:1d:a9:
                    e0:ef:a0:8c:e2:51:3d:ca:c7:dc:c8:76:76:30:d8:
                    9b:0a:28:a1:2d:25:3b:ac:43:06:89:d7:35:ac:a6:
                    9a:b0:37:7d:f7:c0:f5:36:69:c0:5e:d9:cb:e0:2b:
                    97:a2:43:69:0e:16:fd:68:98:e0:0a:d2:50:a3:c6:
                    8e:5e:92:ac:36:d1:24:8d:f8:26:f3:5c:20:50:cd:
                    74:5d:69:de:56:0f:e4:66:f1:0c:c8:67:44:4d:3e:
                    c6:cc:81:9a:51:92:62:f5:98:5b:b8:4e:8e:c4:c4:
                    01:f7:0b:4a:66:78:7c:d3:bf:8c:55:cb:a6:40:4d:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:FB:C6:35:FD:5C:E6:72:19:6E:5A:B5:59:A7:4B:F4:CA:E6:3A
            X509v3 Authority Key Identifier:
                keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b2:8f:53:c7:14:4a:12:a0:2b:91:03:4d:28:d1:73:de:33:
         0d:b3:5b:02:94:6f:02:b3:43:54:5e:64:da:b6:d9:15:9a:95:
         b5:61:93:cd:5f:58:6f:bb:32:eb:b4:a4:5d:5f:43:09:a8:05:
         cf:65:b8:54:27:87:9d:ef:5c:65:60:cd:50:1a:97:57:0f:bb:
         e4:4f:da:fd:a1:2c:e1:b1:97:ce:b4:5f:28:0c:34:11:8d:85:
         c0:f9:9d:7d:9c:b5:ca:e1:07:45:70:d9:51:5c:24:6f:e8:f3:
         18:f8:09:a4:22:56:3b:b3:44:57:db:02:1e:a3:81:1c:dd:c8:
         f1:2c:aa:0b:6c:65:eb:59:51:01:22:e2:9e:3c:4e:6b:13:d4:
         b3:8c:f7:47:a6:a6:13:a9:78:ea:b8:89:4e:d9:db:82:e5:9d:
         a8:30:77:0f:ec:8f:5f:38:33:80:5d:0d:5a:a3:09:c1:71:03:
         b6:72:9d:86:ab:2f:c7:23:e3:e6:ec:22:7c:92:69:4a:79:d2:
         72:93:ee:ce:28:64:c7:2e:12:7c:76:85:22:25:51:9d:47:43:
         d8:de:d4:ca:51:7d:6b:12:42:38:61:e6:ff:6b:21:cb:07:e8:
         ef:d0:57:05:96:ca:ff:4d:07:17:17:82:a8:8f:09:38:ce:82:
         3f:cc:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:51 2026 by rpki-client