Error: rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
File:                     8ZI823Vz-wlzku4GArwdsbV78OM.mft (raw, json)
Hash identifier:          SdTkKoapEJQpMQvqwLYqJulLKbTe2t5uZPhK1aBp9tU=
Subject key identifier:   7E:3B:AB:85:3E:5E:48:CE:54:D5:2B:7F:EA:A5:09:DD:C2:AC:1A:B7
Authority key identifier: F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3
Certificate issuer:       /CN=F36F731FRI/serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
Certificate serial:       0482
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
Manifest number:          0481
Signing time:             Thu 10 Sep 2026 03:38:10 +0000
Manifest this update:     Thu 10 Sep 2026 03:38:09 +0000
Manifest next update:     Sat 12 Sep 2026 03:38:09 +0000
Files and hashes:         1: 8ZI823Vz-wlzku4GArwdsbV78OM.crl (hash: nOMvCcSw2X3n+TDyq5gEVFSbU3CNb+bhemR9jWmdNPo=)
                          2: FC67525472E011F0A5185D9CDAE4EC9C.roa (hash: fxMVUdc7VNQmTcNtjievYVXO75cad81vUMPfW3dLOxg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                          rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FRI, serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
        Validity
            Not Before: Sep 10 03:38:09 2026 GMT
            Not After : Sep 12 03:38:09 2026 GMT
        Subject: CN=6aa22622-f18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:e8:25:10:38:31:ab:28:d9:82:f4:c1:73:
                    57:94:4a:a9:9d:db:63:e3:50:44:a3:d5:ac:b0:1d:
                    1a:ec:43:46:ed:02:71:1c:9b:77:19:54:7e:9d:d9:
                    61:53:ed:d3:55:4e:c7:6d:64:82:dc:ff:44:22:1c:
                    db:4c:79:92:23:7d:e7:dc:6a:20:e8:79:9c:04:53:
                    50:bb:27:82:01:20:3d:01:64:6a:88:bd:26:f3:d8:
                    04:50:66:c0:ae:b9:ee:2a:24:70:ba:c0:fb:a1:1f:
                    eb:b9:f8:47:3c:bf:a9:be:2e:a8:c9:42:0b:25:42:
                    d2:c7:40:73:f0:81:4c:b7:d9:e3:09:4e:a5:42:e8:
                    42:be:58:d3:cb:88:c7:a1:69:60:e9:06:5b:28:b4:
                    2e:ce:49:41:a9:98:af:56:34:5f:23:8e:0f:56:d8:
                    b5:dc:82:c0:c7:59:71:9f:77:d6:0c:b1:54:ed:2e:
                    2f:2f:84:83:01:2b:3c:7c:3a:0c:e8:37:a2:23:a7:
                    1e:4d:55:3f:ad:51:79:9c:e7:e1:1c:cf:5e:1c:c2:
                    0b:e1:f9:db:0f:66:b3:a7:a0:a3:1f:56:4d:24:1e:
                    2f:33:83:26:5d:bc:77:f7:14:e6:dd:2c:f6:8f:c4:
                    b1:2d:ae:3f:be:c9:f5:28:db:5c:42:7e:91:2b:d0:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3B:AB:85:3E:5E:48:CE:54:D5:2B:7F:EA:A5:09:DD:C2:AC:1A:B7
            X509v3 Authority Key Identifier:
                keyid:F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:63:2a:67:d6:58:e6:42:77:44:b1:5d:47:a3:c2:56:c1:57:
         45:9e:a2:12:33:16:25:0e:2e:a5:26:62:8a:f1:36:24:7c:a5:
         10:cb:29:6a:c4:c8:07:90:35:7d:6e:38:3b:b9:2f:e5:c8:d3:
         c5:9b:e6:02:f3:b0:4a:1e:c4:45:3b:69:f1:3d:ce:0e:ac:46:
         18:93:86:ee:15:3c:54:c7:50:9f:b0:f0:28:b1:42:ad:02:31:
         c0:ba:68:fc:0a:ba:ba:9d:f3:c7:fa:95:e8:5f:c6:90:b9:51:
         5c:f6:db:73:6d:92:7a:ac:6d:c6:0d:40:9e:af:1b:c4:7f:de:
         dc:d9:81:84:aa:19:b2:7b:fd:53:13:42:31:43:71:fa:aa:7d:
         27:3d:ad:34:b4:9a:15:6e:30:79:79:ac:58:39:7f:15:52:82:
         b4:b1:bf:d4:60:18:bb:b7:98:87:f3:ab:c9:c7:62:d1:23:dd:
         c0:e4:6e:c8:fa:9b:d1:05:97:0b:63:d7:dc:f7:4c:64:a9:f2:
         62:7f:d3:42:cc:33:cc:c5:85:5e:7f:8b:6f:28:63:56:fa:53:
         68:13:49:93:52:ea:dd:aa:a5:cc:e6:55:0c:f3:3f:ed:8a:03:
         d4:40:af:91:ec:1e:a0:6d:e4:22:fa:7c:e5:05:3c:64:0d:88:
         8b:cb:80:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:29 2026 by rpki-client