Error: rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
File:                     vD3h6YQAgLg8ZSeM3qheopiClIE.mft (raw, json)
Hash identifier:          jtfKXZWO/hvKtcHy2K68BewJK9awG03iBksHTWGlB3A=
Subject key identifier:   B2:2F:CE:C2:79:66:99:E4:B2:AA:55:09:33:B5:72:AB:E8:71:4E:52
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Certificate issuer:       /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial:       045F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
Manifest number:          0458
Signing time:             Fri 09 Oct 2026 03:45:45 +0000
Manifest this update:     Fri 09 Oct 2026 03:45:44 +0000
Manifest next update:     Sun 11 Oct 2026 03:45:44 +0000
Files and hashes:         1: vD3h6YQAgLg8ZSeM3qheopiClIE.crl (hash: Pai1BrNVbYr10ByRDMLEGWXV11gk4umcGRbTl1b9lvA=)
                          2: B8CAC7A2985B11EFB8B2954E762E951A.roa (hash: 0SM5T8NNVkyg9HDp47V5o7gPmb06fjxNsfa8bT7ZCeg=)
                          3: 878D493881A211EE930A1D244AD9E6FC.roa (hash: zLISAvhBvxTn3b4oaLe3yfM1aFnsxwTljhKhQX5W/BU=)
                          4: BC17C6B4985911EFB44BE2BE762E951A.roa (hash: Bo/5IgYc6mUDXUlEMJ0TGF8yZL8JGbJAqfj9nRlvJTE=)
                          5: 2710C32E985C11EF9F3C7A50762E951A.roa (hash: bmsEiP38JU+Ehb3iR+wE1cNU6seqsv/LKiiqBY7usJI=)
                          6: 02E6D31E985A11EF9E664242762E951A.roa (hash: kGG1RiMSP23E2TSxLvJ3oRzrbpa7GUjmAWIe62Zi+WQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 03:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119 (0x45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCA07AF, serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
        Validity
            Not Before: Oct  9 03:45:44 2026 GMT
            Not After : Oct 11 03:45:44 2026 GMT
        Subject: CN=6ac86369-bece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5f:4e:bb:aa:6f:b0:55:7c:ab:3e:be:6f:73:
                    04:f0:48:77:d3:47:e6:9e:b0:3b:87:5d:a0:f2:ed:
                    88:bb:1e:e2:d4:80:ce:80:d1:e0:de:d7:94:27:32:
                    d2:c7:f5:1e:b5:3a:9e:81:2a:19:dd:93:b5:ea:10:
                    bf:06:17:10:b5:12:c9:a0:f0:7e:9c:1e:3a:f1:f9:
                    42:30:95:eb:26:ed:2b:9f:e9:d4:c4:1c:cc:be:24:
                    1e:c2:97:50:83:9a:ea:7c:f0:bc:4f:ec:44:e5:fc:
                    ca:7a:80:fd:c0:5d:2a:2f:40:e0:97:b4:31:a3:08:
                    95:57:67:4b:ee:e6:fa:ae:1f:30:96:a1:2d:00:a1:
                    1c:c7:40:8d:01:b3:72:fa:ac:62:0a:cb:91:f3:64:
                    94:5e:b7:f0:a7:3c:4b:0c:4c:86:9e:01:e4:4e:88:
                    71:a1:73:0e:1e:6d:4c:84:63:a4:13:f5:45:b8:50:
                    c0:10:91:a4:cb:1e:c7:ca:69:b4:c7:5e:b5:cf:ba:
                    62:2e:1b:f3:b8:ea:16:14:9c:95:48:28:23:66:1d:
                    dc:b7:b7:fa:23:ae:43:b0:92:c4:3e:d8:ad:19:9f:
                    aa:ef:05:ca:16:9c:c3:80:64:b4:d9:03:be:7b:37:
                    b9:f3:97:3a:da:b4:0e:6d:ca:f7:cf:12:92:08:ad:
                    05:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2F:CE:C2:79:66:99:E4:B2:AA:55:09:33:B5:72:AB:E8:71:4E:52
            X509v3 Authority Key Identifier:
                keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ae:52:6e:73:2c:83:86:b5:13:28:4c:83:9d:b4:43:63:f3:
         6f:f1:70:74:e0:e3:90:50:1f:fe:0f:6d:16:2d:17:31:12:14:
         37:6f:95:36:d5:33:d8:07:52:91:02:a5:c6:37:d6:30:b0:8a:
         4b:18:02:fd:77:13:d5:55:31:bb:3a:99:4c:e0:8d:de:00:a0:
         f5:d1:db:a6:6b:1c:79:96:2a:a6:5d:06:60:7a:1d:0b:4f:bd:
         5d:9d:01:60:71:00:40:99:22:3c:6a:7a:96:26:24:ea:01:23:
         66:08:2e:4f:7e:c2:0c:4f:8b:c2:ce:7a:59:21:92:39:16:eb:
         8a:a2:40:3c:c0:c1:61:5c:98:c2:bf:2f:4d:51:60:ca:d7:28:
         7f:09:22:4b:d9:ca:a9:2a:73:7a:76:4e:c3:9d:89:16:9c:76:
         f1:d5:c0:33:dc:df:f9:72:d3:d2:82:b5:02:a6:e2:e1:2c:14:
         cb:2e:2e:d7:18:93:70:37:e4:6e:19:7e:0e:f6:a9:b7:47:0a:
         44:1e:bd:5c:3d:5e:6b:22:2a:83:86:f5:aa:71:8e:a1:cf:96:
         94:b2:48:76:cd:4d:83:10:7c:95:27:89:06:07:7a:ea:20:06:
         3b:28:a4:1c:5d:34:a5:89:16:bc:f6:b7:68:5c:f9:67:9f:42:
         b9:d4:25:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:37:48 2026 by rpki-client