Error: rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          1bnubw4rT/514MQ04eayUpZ4HW7xds8dzX5GeiQwIrs=
Subject key identifier:   EB:81:FE:E5:3C:9C:D3:96:AE:6A:60:88:C0:32:07:2F:59:6D:1F:21
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       033A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          0339
Signing time:             Wed 04 Nov 2026 04:24:49 +0000
Manifest this update:     Wed 04 Nov 2026 04:24:48 +0000
Manifest next update:     Fri 06 Nov 2026 04:24:48 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: 3SLli7NzZ/N2Q78scRs7eocAe/epcKNdYIByMUHtMOk=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826 (0x33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Nov  4 04:24:48 2026 GMT
            Not After : Nov  6 04:24:48 2026 GMT
        Subject: CN=6aeab391-3609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:13:82:bf:c7:e4:92:c3:9f:dd:ab:de:b7:
                    ec:cf:2c:bd:12:04:3a:fd:b2:9f:cd:a8:0f:60:d7:
                    1b:51:d5:87:28:29:fc:b4:e5:75:a8:1e:6e:ff:99:
                    a4:4f:00:fe:7e:e2:e5:0e:d1:de:90:6b:8d:db:ba:
                    9a:aa:d2:e6:82:3f:22:b6:db:c5:35:ce:25:78:e4:
                    fc:4a:ab:9b:9a:41:5a:48:e3:22:5f:b2:a1:1d:76:
                    a9:dc:dd:de:a8:d6:cc:c2:48:8b:9e:cc:4e:85:27:
                    19:66:47:b6:a1:40:67:ce:e8:86:8b:36:b6:7b:fb:
                    ab:b7:3b:e7:26:d6:f4:94:f8:b4:0d:52:cd:8f:90:
                    23:83:9c:a6:2a:98:34:68:20:07:7b:17:b2:2f:da:
                    91:62:24:71:a8:0a:f0:31:36:f1:bf:14:94:eb:bb:
                    ea:dd:1b:9c:06:75:7b:d2:fa:20:d2:82:d7:f5:64:
                    5f:c8:22:66:33:55:6a:97:85:bf:01:71:eb:b8:3c:
                    88:18:14:a5:63:bb:42:51:df:d5:75:7d:86:4a:66:
                    36:8d:db:ab:cb:f2:39:cc:e8:46:ed:ad:45:d4:25:
                    5c:d9:05:71:da:2e:79:cb:0d:22:1a:36:8d:ed:2a:
                    bb:d0:27:53:ec:86:bb:15:4d:ac:ae:9b:67:89:6f:
                    12:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:FE:E5:3C:9C:D3:96:AE:6A:60:88:C0:32:07:2F:59:6D:1F:21
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8f:c5:aa:b9:93:60:83:59:88:46:f7:e6:a7:9f:6a:16:fe:
         ca:4d:1f:1d:36:6f:50:8c:f6:ce:14:5f:0c:45:e0:50:57:1f:
         c5:2f:2b:73:ce:f6:55:f6:e9:97:8d:60:be:40:e1:62:6a:f2:
         c7:0d:e2:0a:62:a1:b6:01:99:bf:21:04:69:53:a9:a6:f8:d5:
         72:f2:86:41:0e:12:5d:81:c9:b7:ca:2b:a1:bc:6e:79:48:03:
         74:8b:22:42:05:c5:27:a9:9b:82:cb:69:4d:a4:e5:60:ee:68:
         a5:05:ae:5b:f9:c5:2e:4b:e4:40:8c:6f:79:16:98:b8:6d:9a:
         e0:4f:38:6e:a2:14:10:93:6f:27:f8:a3:55:b7:17:9f:54:b1:
         3d:2b:30:17:f2:bc:98:9b:96:4c:2d:e2:8a:20:33:4f:47:7d:
         3e:cd:81:34:0e:8d:2b:62:fd:24:87:c2:d7:66:ad:49:0b:3e:
         57:d0:18:e4:ac:45:e9:8f:f2:6f:51:24:22:04:86:8a:0d:de:
         3e:64:ba:16:cd:90:a2:c7:43:4c:59:a4:13:18:4c:7c:f2:f7:
         87:c0:62:60:64:d1:3a:3f:08:60:5f:cf:9c:85:7a:19:38:8f:
         0a:67:da:8b:94:94:d1:d7:7b:79:51:f6:a0:be:05:3f:3a:85:
         01:1e:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:19:43 2026 by rpki-client