Error: rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft
File:                     WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft (raw, json)
Hash identifier:          oqgziZ0ybbtQJz/2fClSj9QP0FAf2i1BbunzZL2gKXE=
Subject key identifier:   DA:13:A9:05:23:DC:B2:F6:C3:55:C3:C2:A1:D6:3B:CC:56:90:60:79
Authority key identifier: 5A:C6:07:C4:9C:D3:30:41:F5:8C:EE:E5:4C:76:60:E0:45:9B:F7:27
Certificate issuer:       /CN=F36FCA07AR/serialNumber=5AC607C49CD33041F58CEEE54C7660E0459BF727
Certificate serial:       0454
Authority info access:    rsync://rpki.afrinic.net/repository/arin/WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft
Manifest number:          0452
Signing time:             Fri 09 Oct 2026 03:45:33 +0000
Manifest this update:     Fri 09 Oct 2026 03:45:32 +0000
Manifest next update:     Sun 11 Oct 2026 03:45:32 +0000
Files and hashes:         1: WsYHxJzTMEH1jO7lTHZg4EWb9yc.crl (hash: D2TKqD6EfeL3UlkA1xK+XRy/HoMlCJBNsjxpbOiipmQ=)
                          2: 3386C9E8985A11EFA8A79D42762E951A.roa (hash: 4iO9GKnKP6pMOu+jZf55rHG0gquxjPkMHdHFKGAQAMs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft
                          rsync://rpki.afrinic.net/repository/arin/WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCA07AR, serialNumber=5AC607C49CD33041F58CEEE54C7660E0459BF727
        Validity
            Not Before: Oct  9 03:45:32 2026 GMT
            Not After : Oct 11 03:45:32 2026 GMT
        Subject: CN=6ac8635c-2d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:64:cc:0a:40:1c:d1:a7:20:23:72:a5:9a:
                    ff:72:fd:50:d8:15:04:2c:45:94:ae:b7:d2:27:2c:
                    a4:bf:46:7b:cf:72:f8:7d:5e:e1:dc:c2:d1:d0:12:
                    3b:29:79:a3:8d:37:f4:e5:76:37:a1:3f:a4:23:d5:
                    76:21:e6:61:5f:59:c4:78:2e:d4:56:a2:f1:2f:85:
                    71:1a:6f:f7:f7:4d:20:88:e5:c4:f1:28:05:5b:82:
                    87:e4:84:0e:66:06:22:c2:ac:c2:63:c5:56:9c:4d:
                    2f:3d:2e:d8:2c:eb:98:6c:5e:53:ce:49:2c:81:70:
                    9b:f2:cf:09:3d:31:c8:01:49:79:9c:de:0c:b9:de:
                    7c:19:18:fd:2b:1b:37:e7:ef:d8:1f:06:03:09:23:
                    75:e0:54:a4:da:e5:a2:c0:c6:7d:bb:fe:c7:95:71:
                    08:1c:a0:bc:ff:5f:06:1b:81:fb:95:8c:57:9f:b1:
                    45:ff:b8:ef:15:00:0e:c7:d2:66:8d:9b:d8:e6:71:
                    f5:42:c7:41:dd:33:9e:be:b1:23:1f:9b:e3:0d:4b:
                    2b:4a:e1:8f:ca:bc:42:bc:62:ad:18:96:94:31:f4:
                    e6:08:93:de:5b:60:d6:4f:4d:34:ca:be:89:71:ae:
                    0e:84:d0:47:f7:34:bd:9d:61:17:7f:78:3a:02:e3:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:13:A9:05:23:DC:B2:F6:C3:55:C3:C2:A1:D6:3B:CC:56:90:60:79
            X509v3 Authority Key Identifier:
                keyid:5A:C6:07:C4:9C:D3:30:41:F5:8C:EE:E5:4C:76:60:E0:45:9B:F7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:95:66:7d:88:da:71:65:c5:3e:b3:cf:16:f5:9b:e2:4a:4d:
         bf:5b:c8:bb:95:de:92:3e:69:65:0e:99:6d:a6:fc:81:d9:41:
         61:42:0b:bd:e2:34:c2:d7:82:e8:f9:65:1e:5d:e5:e9:2d:7d:
         6f:70:44:21:06:7a:46:21:13:3c:96:64:d8:9f:00:6a:84:4f:
         9d:46:63:e4:4a:2f:b6:36:c3:2c:13:3e:34:dc:9e:65:a9:9a:
         a1:5c:fa:42:5d:b4:89:97:b5:cf:2e:64:01:1f:df:4a:3b:a6:
         d6:64:d2:7c:0a:9e:1c:10:e2:32:ea:6f:d7:e6:6f:d4:6d:78:
         3f:b1:31:48:94:f2:13:6f:d2:0d:8e:4d:b7:a5:1f:6a:b3:4d:
         f4:ee:9a:32:03:0d:a7:31:4c:c3:25:b2:1b:cb:51:e9:d9:f8:
         91:8e:aa:bb:dc:a3:66:d7:78:a8:0d:ab:5f:36:45:ad:2a:1d:
         22:24:a2:d8:14:6b:80:55:f8:81:ac:aa:3c:b0:50:38:47:0e:
         ff:53:0c:a1:99:33:c3:28:6a:d5:a0:ed:55:13:3b:27:2f:49:
         0b:20:4c:49:e8:a1:83:c9:65:c5:97:5a:b7:cc:ce:2a:36:5f:
         e3:0a:c2:64:58:28:98:de:80:9e:93:31:eb:bd:8d:9d:68:e9:
         9f:74:7a:ca
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkNBMDdBUjExMC8GA1UEBRMoNUFDNjA3QzQ5Q0QzMzA0MUY1OENFRUU1NEM3NjYw
RTA0NTlCRjcyNzAeFw0yNjEwMDkwMzQ1MzJaFw0yNjEwMTEwMzQ1MzJaMBgxFjAU
BgNVBAMTDTZhYzg2MzVjLTJkNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrZmTMCkAc0acgI3Klmv9y/VDYFQQsRZSut9InLKS/RnvPcvh9XuHcwtHQ
EjspeaONN/TldjehP6Qj1XYh5mFfWcR4LtRWovEvhXEab/f3TSCI5cTxKAVbgofk
hA5mBiLCrMJjxVacTS89Ltgs65hsXlPOSSyBcJvyzwk9McgBSXmc3gy53nwZGP0r
Gzfn79gfBgMJI3XgVKTa5aLAxn27/seVcQgcoLz/XwYbgfuVjFefsUX/uO8VAA7H
0maNm9jmcfVCx0HdM56+sSMfm+MNSytK4Y/KvEK8Yq0YlpQx9OYIk95bYNZPTTTK
volxrg6E0Ef3NL2dYRd/eDoC4xQvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU2hOp
BSPcsvbDVcPCodY7zFaQYHkwHwYDVR0jBBgwFoAUWsYHxJzTMEH1jO7lTHZg4EWb
9ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDQTA3Lzc4OEM5QzcyNzJCMTExRUU4OUMxQjU2RDRBRDlFNkZDL1dzWUh4
SnpUTUVIMWpPN2xUSFpnNEVXYjl5Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1dzWUh4SnpUTUVIMWpPN2xUSFpnNEVXYjl5Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RkNBMDcvNzg4QzlDNzI3MkIxMTFFRTg5QzFCNTZENEFEOUU2
RkMvV3NZSHhKelRNRUgxak83bFRIWmc0RVdiOXljLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYlWZ9iNpxZcU+s88W9ZviSk2/W8i7ld6S
PmllDpltpvyB2UFhQgu94jTC14Lo+WUeXeXpLX1vcEQhBnpGIRM8lmTYnwBqhE+d
RmPkSi+2NsMsEz403J5lqZqhXPpCXbSJl7XPLmQBH99KO6bWZNJ8Cp4cEOIy6m/X
5m/UbXg/sTFIlPITb9INjk23pR9qs0307poyAw2nMUzDJbIby1Hp2fiRjqq73KNm
13ioDatfNkWtKh0iJKLYFGuAVfiBrKo8sFA4Rw7/UwyhmTPDKGrVoO1VEzsnL0kL
IExJ6KGDyWXFl1q3zM4qNl/jCsJkWCiY3oCekzHrvY2daOmfdHrK
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:07:36 2026 by rpki-client