Error: rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          q3wgpRL6wprt+CpSN1W7r1Z6okNVk7LYiT4kcrJhL0E=
Subject key identifier:   BA:E1:DF:68:03:1F:8C:1A:B6:C9:17:CA:6F:40:0B:13:A7:75:CD:80
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       05C4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          05C3
Signing time:             Mon 24 Aug 2026 03:10:06 +0000
Manifest this update:     Mon 24 Aug 2026 03:10:05 +0000
Manifest next update:     Wed 26 Aug 2026 03:10:05 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: MfmBHzsD5EgG9u4YyHjjKg3u7i/VzibYdw+WSPcOHy8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 26 Aug 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Aug 24 03:10:05 2026 GMT
            Not After : Aug 26 03:10:05 2026 GMT
        Subject: CN=6a8bb60e-4ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d3:80:32:40:b2:58:8e:60:f4:6d:a5:78:13:
                    82:da:05:6a:f5:35:2e:f3:08:b6:8b:51:45:9a:2b:
                    29:60:75:72:4a:52:a0:1c:88:b7:04:db:60:e6:d9:
                    b5:23:dc:6d:a5:55:bb:2e:28:b7:41:05:1e:5f:bd:
                    6a:67:2e:f8:11:38:b9:71:4c:14:03:13:ed:2a:a8:
                    b4:3c:93:79:e3:80:56:fe:ce:73:72:e9:0e:d0:c2:
                    99:cb:cc:f2:9b:cb:80:ba:21:52:c9:43:32:a6:6e:
                    e8:02:7d:61:35:6a:8a:28:36:d1:af:84:50:58:46:
                    f0:89:5b:9d:b6:8a:e6:b6:7f:1d:33:48:4f:e8:67:
                    1b:60:28:1a:78:6c:14:ef:1f:78:ed:8c:c4:c2:e3:
                    8e:23:dc:09:9f:40:76:3a:a8:61:b3:c6:0f:67:50:
                    08:66:5a:b9:86:97:9d:8c:85:7e:7f:94:6c:94:a7:
                    26:b0:3e:14:e9:56:63:9e:7f:7a:fa:dc:03:37:ae:
                    3f:88:e5:40:e0:85:dd:d9:bf:5e:38:f6:17:6d:10:
                    6a:91:64:a0:41:a2:63:15:a5:f4:5b:9e:ff:99:a2:
                    3e:94:8d:a4:a6:45:21:af:89:4c:cc:ce:21:47:04:
                    11:32:7e:e7:16:bc:66:e1:76:a4:bf:c5:fa:fd:62:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E1:DF:68:03:1F:8C:1A:B6:C9:17:CA:6F:40:0B:13:A7:75:CD:80
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:b8:4e:c6:e0:0e:15:39:5d:47:82:27:a5:87:de:25:14:
         6f:7b:a2:ad:e7:ab:c9:6e:2a:89:b0:2b:25:70:09:a7:b8:25:
         a1:7d:82:55:51:de:49:79:6e:2c:61:14:1b:f6:ad:58:78:a1:
         73:fa:e7:7b:bb:cc:4d:12:f8:68:05:05:f2:8d:e7:ed:7b:15:
         8d:98:db:4f:6b:a7:b4:bc:94:e6:79:b6:e3:b5:12:c8:72:d6:
         98:6b:22:0a:bd:14:d3:18:6c:3f:1d:c1:b2:b9:d8:e7:c4:eb:
         2f:29:59:fe:44:20:b5:f8:ec:e8:c9:cc:60:2e:c7:45:bd:c8:
         b1:0e:d6:ed:dc:bd:bf:ee:b8:d3:9f:a1:aa:f7:e0:d5:dc:c3:
         d7:13:11:92:20:28:2c:85:31:f0:18:bf:95:14:f4:ab:08:e4:
         86:94:36:16:ab:cb:1f:06:1f:ab:2b:56:24:6a:23:e1:5c:89:
         5d:83:1c:53:3a:22:0d:84:5d:4f:6a:d4:a7:21:ec:34:1d:59:
         7a:bf:3b:25:15:45:a8:fc:4a:59:41:7b:f3:74:93:48:00:f3:
         11:ff:8d:d5:5e:9d:8a:54:b4:a5:09:03:af:38:48:06:19:81:
         c7:3e:92:45:44:3f:61:be:6a:fe:7e:e9:4d:ca:1e:15:10:0d:
         ac:eb:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:23:49 2026 by rpki-client