Error: rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
File:                     lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft (raw, json)
Hash identifier:          f09SLEU7CcioJDHDlrko3ldJO3bxNqk58tJdpVXRpyk=
Subject key identifier:   FC:A5:60:2B:AE:2B:91:9B:12:D9:0F:7E:11:4D:D6:C5:E5:06:4A:B8
Authority key identifier: 97:23:60:D0:AC:B2:CF:97:31:99:05:BA:45:4E:D0:77:08:82:2D:FD
Certificate issuer:       /CN=F36FAE49AR/serialNumber=972360D0ACB2CF97319905BA454ED07708822DFD
Certificate serial:       0169
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
Manifest number:          0168
Signing time:             Fri 30 Oct 2026 05:13:22 +0000
Manifest this update:     Fri 30 Oct 2026 05:13:22 +0000
Manifest next update:     Sun 01 Nov 2026 05:13:22 +0000
Files and hashes:         1: lyNg0Kyyz5cxmQW6RU7QdwiCLf0.crl (hash: qVBSCtbYdaVyiD0FSWK8X/akNUrIF45FviqIIpKobHI=)
                          2: 497A6552C40011F0A4C64789DAE4EC9C.roa (hash: dAgm1qsqszfkmXft+qwZkQMhMXYqxZMoROazFTtdak4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
                          rsync://rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 01 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FAE49AR, serialNumber=972360D0ACB2CF97319905BA454ED07708822DFD
        Validity
            Not Before: Oct 30 05:13:22 2026 GMT
            Not After : Nov  1 05:13:22 2026 GMT
        Subject: CN=6ae42772-7251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b9:5d:30:a1:76:33:24:75:98:a0:c5:28:dc:
                    28:ef:40:28:1c:ce:8f:22:26:33:6f:91:f3:1f:3d:
                    16:95:4e:39:5d:7f:e0:9a:0f:1e:27:f9:4c:45:51:
                    7e:4e:53:d6:4c:73:f3:15:fb:a7:7b:b4:f2:30:cd:
                    93:50:39:6f:86:09:f2:9b:77:23:f9:7e:6c:37:8e:
                    f7:77:7c:e4:99:77:12:92:1c:1b:fb:ac:2b:3b:a1:
                    a6:32:12:6c:13:ec:fe:95:1f:3e:13:6d:5e:a9:1d:
                    2a:9f:c2:6c:60:3e:45:e9:54:d0:39:7c:ac:46:7d:
                    75:bc:07:bf:ad:ef:c1:73:65:2b:f7:c6:e3:83:a9:
                    ee:97:b5:59:c5:b6:49:e4:00:42:d0:62:c7:1e:a2:
                    05:bf:14:c3:d9:ab:c6:cc:44:67:95:e8:cd:0b:36:
                    5d:f3:9c:b7:56:9a:dc:4d:24:4e:b4:a6:9b:93:7c:
                    68:82:09:7e:94:6a:3f:1c:08:4a:ff:cf:f4:73:f7:
                    f0:4d:c2:25:d3:84:2d:b8:7d:57:d6:32:68:90:f1:
                    1b:8f:3b:ee:59:d5:3a:cc:b2:12:81:13:cf:31:ae:
                    86:4b:3b:a7:13:11:9a:4a:fe:4e:9d:44:32:a9:41:
                    08:a4:c9:b1:3b:34:4e:2b:c7:67:21:2f:05:14:7c:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A5:60:2B:AE:2B:91:9B:12:D9:0F:7E:11:4D:D6:C5:E5:06:4A:B8
            X509v3 Authority Key Identifier:
                keyid:97:23:60:D0:AC:B2:CF:97:31:99:05:BA:45:4E:D0:77:08:82:2D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:17:05:4f:4d:92:f1:40:d2:c1:8f:f1:9e:47:67:85:46:
         b9:d8:cc:6e:4d:0b:c8:e0:c4:62:e2:45:5e:d9:75:f9:60:41:
         c7:79:c7:26:de:a9:33:4b:f0:cd:ad:ee:65:25:97:67:11:67:
         2a:74:e0:4e:92:1d:a7:e2:11:a9:9e:52:63:24:e5:7d:da:67:
         06:bb:5d:be:c3:7f:be:da:32:3b:c6:d1:5d:c3:7e:4a:be:72:
         ad:86:9c:4e:9c:a7:70:45:1b:a4:71:d3:d2:10:a7:b7:ab:17:
         1f:3d:a1:88:9d:6e:0f:d8:61:de:20:ef:a0:24:7b:80:f6:f7:
         b7:b9:4c:fc:bf:f1:e7:61:1c:4b:3b:ba:81:f3:71:7f:4b:2e:
         ff:43:97:5e:e7:fb:28:40:26:b2:00:ad:23:25:91:40:b0:4e:
         f7:a8:3f:b1:ab:6d:ed:4c:db:7c:72:ed:59:14:70:40:8c:b2:
         49:46:df:51:51:51:00:a9:38:3b:54:b3:c6:bf:0c:27:ee:b6:
         b8:7d:0a:18:5b:18:94:62:5b:e0:1c:49:47:ff:a7:21:bb:fb:
         67:28:b1:ad:19:28:71:18:12:56:63:9b:9e:c4:25:a8:b5:a1:
         e6:f1:b4:18:3f:18:a1:4b:0d:cc:db:62:9e:48:79:71:e9:09:
         8d:34:97:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:23:54 2026 by rpki-client