Error: rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
File:                     vD3h6YQAgLg8ZSeM3qheopiClIE.mft (raw, json)
Hash identifier:          MMsfbw6f1d43GlfuzEA/OYpbFH1220eIXIrL+REm+jU=
Subject key identifier:   13:9B:08:F5:3F:F5:E8:BA:D0:66:A7:5D:2B:03:B8:A1:29:B4:45:E5
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Certificate issuer:       /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial:       045C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
Manifest number:          0455
Signing time:             Tue 06 Oct 2026 03:47:43 +0000
Manifest this update:     Tue 06 Oct 2026 03:47:43 +0000
Manifest next update:     Thu 08 Oct 2026 03:47:43 +0000
Files and hashes:         1: vD3h6YQAgLg8ZSeM3qheopiClIE.crl (hash: /YdisLQAgSS3MvK2urinL8z/Xjc94bgPJ/O92xaCiZk=)
                          2: B8CAC7A2985B11EFB8B2954E762E951A.roa (hash: 0SM5T8NNVkyg9HDp47V5o7gPmb06fjxNsfa8bT7ZCeg=)
                          3: 878D493881A211EE930A1D244AD9E6FC.roa (hash: zLISAvhBvxTn3b4oaLe3yfM1aFnsxwTljhKhQX5W/BU=)
                          4: BC17C6B4985911EFB44BE2BE762E951A.roa (hash: Bo/5IgYc6mUDXUlEMJ0TGF8yZL8JGbJAqfj9nRlvJTE=)
                          5: 2710C32E985C11EF9F3C7A50762E951A.roa (hash: bmsEiP38JU+Ehb3iR+wE1cNU6seqsv/LKiiqBY7usJI=)
                          6: 02E6D31E985A11EF9E664242762E951A.roa (hash: kGG1RiMSP23E2TSxLvJ3oRzrbpa7GUjmAWIe62Zi+WQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 03:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCA07AF, serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
        Validity
            Not Before: Oct  6 03:47:43 2026 GMT
            Not After : Oct  8 03:47:43 2026 GMT
        Subject: CN=6ac46f5f-00b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:98:5e:fc:a5:16:1a:e6:ef:64:58:90:7c:
                    1d:f5:99:3a:d9:b6:d0:82:e9:8a:dd:a7:48:71:a0:
                    72:8e:a9:8d:21:bf:45:06:75:3f:03:a1:2d:c4:92:
                    09:8a:b2:46:ca:f0:da:71:7e:59:c2:1e:94:96:46:
                    62:44:35:1d:fc:6f:a8:c9:54:52:ad:68:39:a2:e1:
                    61:e2:50:09:2f:b6:6d:2c:39:94:b6:93:5f:e4:a9:
                    97:1d:23:78:74:e8:08:e3:e4:9a:dc:3d:5d:07:f7:
                    bc:6f:6a:b8:31:98:c7:dd:ff:7c:ec:15:cd:1d:9a:
                    b1:9b:8b:35:e5:01:61:92:e7:5f:da:96:e3:7c:64:
                    47:8b:52:6d:28:e3:75:fe:c7:2c:2e:49:1f:72:9f:
                    cf:a3:5f:7f:93:99:7b:6c:6d:3a:17:39:1b:f6:08:
                    65:3f:92:e2:cd:3e:45:f1:3f:eb:1b:84:64:e9:f3:
                    b3:fe:18:d8:e0:ee:cd:8c:5c:21:5e:ab:41:f2:b8:
                    2b:b7:d3:7c:49:ca:b8:95:73:46:f1:5d:4f:10:2f:
                    2b:ad:17:cb:37:a7:3b:bd:26:99:88:5f:a2:8b:84:
                    de:27:35:1d:6e:08:ed:87:35:50:22:c8:b4:c6:31:
                    46:61:16:f4:49:2d:43:d1:3d:4b:a1:7e:66:85:1f:
                    4f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9B:08:F5:3F:F5:E8:BA:D0:66:A7:5D:2B:03:B8:A1:29:B4:45:E5
            X509v3 Authority Key Identifier:
                keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:24:d5:74:19:dd:c7:f5:cd:e7:ca:f0:59:40:d1:42:ce:
         87:44:f2:d5:0d:9d:2f:3e:b7:09:da:54:26:8b:b6:11:71:4b:
         5b:e0:ef:c3:56:92:f3:64:6f:0d:e8:58:33:b6:87:ca:03:dc:
         67:2b:e8:59:56:3f:53:1a:b0:5c:a4:dd:6a:69:63:be:17:59:
         6a:12:48:fc:1e:a8:d3:81:c6:72:c5:8a:22:a8:90:62:e5:0c:
         75:70:10:d2:7b:ea:f6:6d:1c:24:5a:4d:9f:fc:26:55:b7:fb:
         dd:d5:69:60:53:41:f1:48:c9:43:19:e8:76:6a:bf:83:38:3f:
         a2:56:7c:fd:b8:32:93:d2:e5:f9:36:70:ad:c3:5d:d4:78:f3:
         5f:ce:af:da:8b:a6:d9:34:f0:96:14:5d:16:2d:38:e4:d0:fe:
         f2:e3:ab:a9:a0:45:cf:67:b5:c7:8f:6b:5c:24:e7:db:51:2c:
         4e:be:aa:9f:52:53:26:e0:b3:c1:67:dc:cf:f3:c2:97:7e:2a:
         fb:9c:3b:56:78:53:03:56:b3:51:4c:0e:4e:b2:6f:d4:b7:55:
         b9:64:32:4e:8e:14:c9:d4:12:9c:0d:82:2d:bf:a3:88:a9:e6:
         95:3e:c6:cd:5d:79:67:36:a8:09:10:b9:2a:a5:d1:01:c6:f9:
         76:26:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:28:12 2026 by rpki-client