Error: rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
File:                     QSDDG25xyAv3mSJsbVmhC3AhOSE.mft (raw, json)
Hash identifier:          Sv/dIUOTgX5E4kE06hO7/kz4mhSJnEFgP5a201PUKS8=
Subject key identifier:   6A:C2:C5:0E:A5:C1:6A:75:F9:A4:87:54:A3:13:E3:CD:22:37:E9:E5
Authority key identifier: 41:20:C3:1B:6E:71:C8:0B:F7:99:22:6C:6D:59:A1:0B:70:21:39:21
Certificate issuer:       /CN=F36E5BE1AF/serialNumber=4120C31B6E71C80BF799226C6D59A10B70213921
Certificate serial:       0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
Manifest number:          09
Signing time:             Fri 18 Sep 2026 05:55:55 +0000
Manifest this update:     Fri 18 Sep 2026 05:55:54 +0000
Manifest next update:     Sun 20 Sep 2026 05:55:54 +0000
Files and hashes:         1: QSDDG25xyAv3mSJsbVmhC3AhOSE.crl (hash: Iv6o04Myc2E/INjCO7FgfWboTs2AQkavSwQK0T/T+ts=)
                          2: 58EBB7C4ADFD11F18CEAFDF4CE1D38B0.roa (hash: OZKOlwRZ2oUpIBOzPLN1rbG60TNAmTSPpk5qoo1YOs0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E5BE1AF, serialNumber=4120C31B6E71C80BF799226C6D59A10B70213921
        Validity
            Not Before: Sep 18 05:55:54 2026 GMT
            Not After : Sep 20 05:55:54 2026 GMT
        Subject: CN=6aacd26b-3ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:a0:16:c7:b9:66:c9:c2:7c:25:11:28:ea:
                    ff:f9:be:e0:30:73:7b:11:6b:68:3d:ea:f6:5e:55:
                    78:8a:4b:e3:6d:64:29:d0:92:bb:d0:72:32:1b:88:
                    fc:17:99:70:0a:fb:62:bb:62:0e:13:2c:39:31:3f:
                    cb:70:f6:bf:51:f4:f8:78:25:7f:6c:53:6b:6d:3b:
                    b6:ec:29:27:d4:9e:9f:2d:38:90:dd:69:4c:46:80:
                    cf:5d:b6:8c:c8:9d:e0:54:21:9f:f6:06:ab:71:12:
                    b8:28:e4:fe:02:98:8f:d7:01:56:f4:64:0a:7e:08:
                    a9:f4:0b:bc:37:a3:57:a0:b4:0c:6d:4a:92:2f:65:
                    05:52:a9:4e:49:bb:15:49:4c:bf:93:ac:a9:6f:bb:
                    f5:23:7d:f4:44:cc:5e:89:63:ce:31:ac:35:4a:db:
                    3a:71:6d:94:06:45:ee:60:fb:f1:92:12:83:e5:05:
                    2b:90:c7:5f:48:fd:ce:b9:c1:4c:22:e8:64:88:b9:
                    35:af:ff:61:33:86:54:cb:c7:9f:ba:31:f9:32:bc:
                    b3:e6:29:05:e1:fa:7b:cc:29:54:b0:c6:08:6f:b3:
                    14:28:7f:7e:59:21:d4:26:a2:38:1d:cf:f7:81:cc:
                    da:50:1f:48:61:5d:39:c1:20:7a:4c:3d:30:bf:be:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C2:C5:0E:A5:C1:6A:75:F9:A4:87:54:A3:13:E3:CD:22:37:E9:E5
            X509v3 Authority Key Identifier:
                keyid:41:20:C3:1B:6E:71:C8:0B:F7:99:22:6C:6D:59:A1:0B:70:21:39:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6c:0a:64:d8:18:25:3e:06:ef:8a:15:4e:4b:c3:f1:2f:bc:
         7c:9b:da:75:15:ab:04:bf:65:20:9c:87:0b:99:8c:03:e1:e8:
         34:2a:f3:69:b7:b4:ae:02:67:1f:69:36:83:e9:af:d6:2f:e2:
         13:cd:4a:30:14:11:1c:e8:c9:c3:5c:84:d6:9a:6c:9c:fd:9c:
         61:11:77:cf:1f:80:b1:fe:09:18:2a:b3:47:07:d5:ad:d1:5d:
         66:b0:f2:e9:73:fa:68:47:12:e6:1c:15:2c:8b:6e:86:32:03:
         a2:d3:90:bd:d2:f7:3a:40:d7:ea:c5:b4:6d:17:13:bd:04:15:
         88:19:1e:75:02:ac:42:8d:78:c5:54:e3:fc:80:07:81:48:83:
         f4:f2:09:6e:af:47:a2:c1:6c:7d:6f:85:72:a3:89:08:8e:b7:
         dd:aa:40:3c:2f:df:83:5e:0d:87:bc:9a:ab:e8:1f:29:aa:ec:
         f1:2a:b0:9d:cc:16:e0:09:ff:1c:2f:74:a9:49:75:5f:7e:f7:
         c9:1a:d7:12:5a:9e:59:8b:ce:74:97:d4:a4:7a:38:2a:29:77:
         0e:10:c6:5d:ff:39:b3:60:a3:5d:28:20:c0:b6:5b:57:69:58:
         7d:87:88:c2:8d:18:ef:ee:ef:64:6a:fa:84:95:1f:a1:5c:39:
         0b:2b:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:57 2026 by rpki-client