Error: rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft
File:                     GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft (raw, json)
Hash identifier:          98ABuJkpxzJS8ym0RzC5kHoMrm/0bzGxEAUvrNTmBNk=
Subject key identifier:   24:3C:50:24:22:45:AA:46:92:31:DF:96:5E:59:11:AF:61:61:97:43
Authority key identifier: 1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
Certificate issuer:       /CN=F36FC6C8AR/serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
Certificate serial:       0334
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft
Manifest number:          0326
Signing time:             Sat 31 Oct 2026 04:28:14 +0000
Manifest this update:     Sat 31 Oct 2026 04:28:13 +0000
Manifest next update:     Mon 02 Nov 2026 04:28:13 +0000
Files and hashes:         1: GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl (hash: DQ591zQuV5fnPgnQkWRmoP3EeuOoobaUswMHnmQ2z+g=)
                          2: 8B63089E8D4611EFB2C80677762E951A.roa (hash: 7RlPZSOI9gXmBQ7Dll0fi05tXme13qPi3h8btnC/JTU=)
                          3: 45FFE7CABA2411F0B8001CD9DAE4EC9C.roa (hash: GMGMYRAIEvbevTZ+2xvOcF2rxmWtPDj6m+aw1AD8RRg=)
                          4: 56824A428D4411EFB3498568762E951A.roa (hash: V5qLUCLPd1I1Ls9ldAy5batoAH+ofIKo2Z5yPgURUDg=)
                          5: A3C4492A8D4611EF8CDB2177762E951A.roa (hash: 9g/P/H6RPVAaiv/r7kQLrsM8jI+r42OpRVBLEDJP/08=)
                          6: 6A9EBB1C8D4611EF884F3475762E951A.roa (hash: 5vOP0Ui230xbdrZQI6/7YklcE+oK9/VNTnmgzviqoBU=)
                          7: 2FBF38828D4611EFB77A0873762E951A.roa (hash: vEjrTLv4wD2q4aem1TCkPD8stGKWE+r2SuTHo54Rzvc=)
                          8: 3145EA5A8D4311EF9CF7F061762E951A.roa (hash: ThX67wYUKN+i+boktaN2Xiib8opZnnqBFpksjA7hm/0=)
                          9: F0025BDA8D4411EF84E7856C762E951A.roa (hash: n8jqqogDIhlXdheheIcW0DF5qFiOOUSxPi18xvRCYrc=)
                          10: 12C10A588D4611EFB445E072762E951A.roa (hash: eewTY8tgWHm825N9T7CjR1TH1/Q9o9EcO4kO/LJ3U4I=)
                          11: B59F619E8D4511EFBBA1BB70762E951A.roa (hash: TjjkFzneqsaChdNgM/TqI2Coeymuf9i9/KQa1JKMh4I=)
                          12: 828A0A6C9A6E11EFBA41BC68762E951A.roa (hash: gFK0fWW3Sk30lH2kvu51EkRJRO9esMeZYoNw0LAuml0=)
                          13: E4D2DF728D4511EFB150C572762E951A.roa (hash: 9HRe37qaL5GJFQcU6897A7CJHAHCWA6KD3omfqIvga4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft
                          rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 02 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC6C8AR, serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
        Validity
            Not Before: Oct 31 04:28:13 2026 GMT
            Not After : Nov  2 04:28:13 2026 GMT
        Subject: CN=6ae56e5e-aa51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:a6:6c:44:fe:95:c4:74:2b:2d:bf:1a:10:
                    04:48:d2:b7:aa:53:a8:0d:86:b7:57:87:57:47:51:
                    20:c0:cc:f7:49:80:a0:74:bf:7b:b6:34:7c:c0:33:
                    73:cd:71:63:3d:7d:07:23:7f:8a:d2:4d:a0:46:0d:
                    1b:62:dc:b3:d3:68:48:1a:75:df:2d:cb:42:8d:58:
                    29:59:70:31:23:20:43:ec:e5:4a:38:05:2b:d7:da:
                    b6:21:2e:ec:4f:92:a8:05:04:fb:8f:42:30:a6:37:
                    11:c8:4f:9e:a3:61:af:79:f9:78:96:26:8e:9a:23:
                    8d:28:e4:1f:e8:00:c8:77:f7:5a:42:ba:77:62:1c:
                    e8:00:5d:a8:b7:a7:43:9d:51:b4:58:ae:cb:61:bf:
                    42:ee:71:eb:1b:e1:bf:bc:86:62:ae:df:25:97:2f:
                    8c:eb:f8:80:b7:a2:6c:cc:25:9c:8f:d5:08:a6:4e:
                    8e:bc:d2:f5:00:08:46:4f:93:82:4b:2c:98:69:f3:
                    ff:c5:71:f0:b7:79:12:91:2f:6c:33:b0:3c:47:a7:
                    8d:2b:72:6c:30:82:fd:8c:91:ce:f6:3f:14:85:a9:
                    7c:81:46:96:d5:7c:a6:1c:a8:74:59:90:be:31:44:
                    ba:1a:de:bb:a3:c0:35:1a:d8:14:06:50:25:ca:79:
                    17:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3C:50:24:22:45:AA:46:92:31:DF:96:5E:59:11:AF:61:61:97:43
            X509v3 Authority Key Identifier:
                keyid:1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:37:13:3a:18:bb:b8:dc:67:84:04:29:f2:ff:2d:14:8a:9e:
         c2:5c:a1:4a:7c:53:11:0e:f7:2d:20:e9:51:05:8a:1e:19:f0:
         9a:a6:9c:ae:0c:cd:77:eb:51:f0:75:63:36:d7:c8:69:67:b1:
         65:cb:9d:b5:2d:5f:6a:d2:2d:16:5c:bf:44:eb:71:89:96:08:
         44:a4:7a:ca:75:f1:49:85:5d:14:25:d2:db:eb:d4:16:11:ee:
         e4:a6:01:53:e2:ce:16:74:15:a8:ec:17:cb:d3:02:e8:90:cc:
         e7:9d:54:67:76:34:78:e0:20:08:14:cc:8e:ac:0f:08:6c:3c:
         17:62:9e:c4:d1:85:41:5f:f2:28:33:8c:eb:d7:54:30:fb:d4:
         1f:9a:3c:49:41:be:77:2d:a0:90:b8:bb:90:ac:72:9d:72:54:
         45:d7:e3:33:6b:71:94:a4:6e:3e:3f:65:5c:af:68:46:29:06:
         40:c1:d0:95:a8:13:57:07:2e:44:77:8f:a4:f0:b2:69:2f:43:
         04:8f:04:13:b2:1b:a7:da:29:8d:49:e1:4e:7a:ce:6c:5f:d3:
         21:33:ec:4c:f7:95:60:94:a1:a6:7a:6b:b6:c6:01:14:ed:05:
         9a:06:ba:c4:3b:2e:22:9a:d8:4d:fc:cd:64:7c:ef:bf:31:ab:
         31:45:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:22:06 2026 by rpki-client