Error: rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
File:                     3Y7gOV77NMQJjlduH6lWEvCuEIw.mft (raw, json)
Hash identifier:          7PwXehw7Fix8A003duIx5qw0yvazuhZWOsUb2PPppmY=
Subject key identifier:   5C:35:AF:A0:92:A1:84:DB:AD:34:DB:81:A5:38:17:F0:4E:5A:AA:C3
Authority key identifier: DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C
Certificate issuer:       /CN=F36EE14CAF/serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
Certificate serial:       03DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
Manifest number:          03D9
Signing time:             Sat 24 Oct 2026 04:05:55 +0000
Manifest this update:     Sat 24 Oct 2026 04:05:54 +0000
Manifest next update:     Mon 26 Oct 2026 04:05:54 +0000
Files and hashes:         1: 3Y7gOV77NMQJjlduH6lWEvCuEIw.crl (hash: HtOr+Y+I+BYmVjZxI4GGKcUuYBjffGOaQARbknHUjUE=)
                          2: 41ED69D60D1511EFA8396400017001B1.roa (hash: x3aVslqCzMfioshN80Dla6JteewrsmH2GjIbIFA+j2M=)
                          3: 1A07CB8EDBEA11EEA45EFA81775412E6.roa (hash: Pkjs2jgzXCv29HKkqLFfvU1IeY4hITiyODVD/2YyWlE=)
                          4: A07BB004DBEA11EE8E03CC82775412E6.roa (hash: 5FeX+dqvUeIECgzm38Ru/fnBhkIsH4lq/tNWx1MCZM8=)
                          5: 6B9CD7800D1511EFB6A61201017001B1.roa (hash: ssvUYk5x0OzQ7Q0Xp7UErygVy3MmZIG7nazU7zgnCUM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE14CAF, serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
        Validity
            Not Before: Oct 24 04:05:54 2026 GMT
            Not After : Oct 26 04:05:54 2026 GMT
        Subject: CN=6adc2ea3-33a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:71:61:49:90:3e:6b:96:c4:1a:b0:10:a8:
                    c6:5c:3e:6a:dc:19:05:01:bc:d7:b2:15:81:09:05:
                    4a:e0:15:39:ad:44:11:ab:a4:4e:31:4f:c9:93:c8:
                    90:dd:27:aa:c8:a6:a3:1a:80:7b:64:77:27:c8:00:
                    a7:65:6e:b9:6d:3b:b4:aa:51:bd:72:27:46:6c:e1:
                    b6:63:3d:54:88:39:d2:d5:03:1c:48:80:64:85:85:
                    6f:22:9b:b1:a7:57:1b:ac:c2:d5:0d:1c:35:da:e2:
                    71:bc:61:fa:58:45:cf:5e:af:d1:aa:71:db:96:39:
                    df:68:64:ee:d6:d2:7a:f7:f0:d3:7b:f9:38:68:ea:
                    60:61:94:d7:b0:35:bf:15:1f:47:9d:88:e0:97:90:
                    d6:f1:22:42:42:e2:86:8e:fb:97:85:b2:f9:62:75:
                    90:fd:08:88:3a:73:fb:09:c4:bf:48:f7:4b:70:07:
                    f4:0d:24:a9:0d:13:67:c4:e6:68:35:99:d8:7a:90:
                    ba:00:9e:fc:db:db:05:a8:f6:da:ed:0a:6b:14:1e:
                    44:03:30:9e:c6:5c:db:40:4a:5d:d2:39:09:e6:af:
                    91:71:d8:9a:57:7c:73:6d:d5:9b:3b:e0:df:5d:49:
                    d2:b3:4f:5f:97:8f:02:4e:2d:4f:36:e0:9b:cb:69:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:35:AF:A0:92:A1:84:DB:AD:34:DB:81:A5:38:17:F0:4E:5A:AA:C3
            X509v3 Authority Key Identifier:
                keyid:DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:93:80:cd:48:b8:f8:42:31:7c:6a:72:ef:93:bc:ab:a4:22:
         da:72:cc:0c:40:0f:b4:d3:81:ab:08:69:8f:cc:b0:72:92:19:
         6d:e4:3c:72:23:55:b7:39:bb:78:27:fc:ab:a5:43:57:50:b7:
         ce:4d:98:44:33:6a:ee:11:1b:67:b6:b5:ac:cf:95:6e:be:f0:
         a4:1c:6e:b2:1c:69:4e:c7:25:b8:ca:93:b3:c1:f6:3d:38:74:
         a7:c4:d5:96:4c:f8:18:f8:e9:58:ed:e7:6c:81:8f:ec:d1:0d:
         5f:ff:54:fb:f7:f0:43:5d:26:2a:89:b5:d0:d2:e7:e7:97:0e:
         cb:28:8e:04:b8:a4:2f:40:9f:81:5f:1e:64:a8:a1:ae:ac:12:
         b8:8a:c9:be:b9:05:d5:9c:4e:4c:40:c8:6f:65:dd:90:7c:1e:
         c8:cf:95:5b:c1:4c:be:20:e9:69:29:5c:b7:d4:b2:59:7d:da:
         57:b2:f0:95:51:81:4b:b1:31:ac:89:ee:da:a7:d8:82:d8:30:
         e6:88:32:e0:20:ec:7d:cd:75:2a:cd:ca:10:49:db:84:3d:45:
         ef:a8:8c:83:c4:9c:a9:2b:e3:de:e6:d2:78:7a:f3:de:c9:16:
         ca:d9:3e:b8:1f:81:7b:dc:78:c5:f5:a1:b7:eb:a0:11:e8:36:
         e1:78:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:18:37 2026 by rpki-client