Error: rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
File:                     iP6Ne9O33D1UQluMc20s7Dh_c3w.mft (raw, json)
Hash identifier:          2cyF4twRuiWJpAxE2GztIzDLrf1VuqUzWtb9AAt7PP0=
Subject key identifier:   D8:ED:F8:98:99:99:0F:83:41:98:50:46:F7:D7:4F:E4:53:BB:7A:17
Authority key identifier: 88:FE:8D:7B:D3:B7:DC:3D:54:42:5B:8C:73:6D:2C:EC:38:7F:73:7C
Certificate issuer:       /CN=F3644FCCAR/serialNumber=88FE8D7BD3B7DC3D54425B8C736D2CEC387F737C
Certificate serial:       0693
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
Manifest number:          0691
Signing time:             Tue 03 Nov 2026 02:43:35 +0000
Manifest this update:     Tue 03 Nov 2026 02:43:34 +0000
Manifest next update:     Thu 05 Nov 2026 02:43:34 +0000
Files and hashes:         1: iP6Ne9O33D1UQluMc20s7Dh_c3w.crl (hash: VDzYur6zzf+i60EjfBMv+KZDVk68eCag2l1xc3YmV+o=)
                          2: 7D4E32F618A011F19FCAA5E3DAE4EC9C.roa (hash: TRWuvYSjP3zqMyAi2RpvwyDMW+PHu21x8ySiuhAGVHo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
                          rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FCCAR, serialNumber=88FE8D7BD3B7DC3D54425B8C736D2CEC387F737C
        Validity
            Not Before: Nov  3 02:43:34 2026 GMT
            Not After : Nov  5 02:43:34 2026 GMT
        Subject: CN=6ae94a57-c903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:15:60:88:5e:2e:1e:24:e8:49:fa:3e:5c:
                    d1:45:a1:78:db:82:e9:05:51:e0:ff:92:5b:97:7e:
                    db:43:d6:7c:b5:0c:07:93:e3:f0:a3:5f:30:fb:1c:
                    35:9c:ad:df:80:93:5b:cf:2d:d7:ea:ec:3f:6d:ef:
                    a0:6e:c1:a5:d8:4e:db:70:10:ef:45:36:0c:04:82:
                    27:20:33:d5:ca:70:9e:cb:95:e2:21:2b:33:aa:49:
                    80:dc:e1:8e:ac:1d:ba:12:b0:0c:51:86:13:4d:4c:
                    50:8c:c6:ef:54:c3:81:c4:00:be:5f:89:b3:af:c5:
                    da:e4:90:55:0e:73:b8:0b:52:7e:f9:f3:c7:59:c2:
                    b1:cf:71:80:72:89:be:3f:c3:2f:1f:ad:8a:6e:79:
                    50:d8:27:d1:52:70:f6:bf:1e:b6:aa:0f:b3:63:a9:
                    41:80:79:25:fa:38:f3:43:03:fb:40:e5:92:d7:fe:
                    48:15:bf:14:18:fc:0f:a6:9c:63:56:e1:7b:41:1c:
                    35:45:03:94:78:05:34:4a:8b:61:c9:30:8d:8e:10:
                    cf:51:94:f2:7a:cb:cd:69:0b:43:d3:50:ed:46:3e:
                    40:ce:8b:85:5e:b9:75:55:b0:f3:a9:09:ec:48:ee:
                    ad:15:ac:05:10:ad:da:fd:54:b1:70:72:55:13:a1:
                    89:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:ED:F8:98:99:99:0F:83:41:98:50:46:F7:D7:4F:E4:53:BB:7A:17
            X509v3 Authority Key Identifier:
                keyid:88:FE:8D:7B:D3:B7:DC:3D:54:42:5B:8C:73:6D:2C:EC:38:7F:73:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b5:3e:8a:fd:0d:34:0a:37:be:97:8b:7a:92:08:76:b5:b9:
         33:c2:a2:06:1c:a5:3e:93:d9:d1:d6:43:78:83:42:dc:7e:4b:
         eb:ab:1f:10:89:e8:40:59:d6:9b:09:45:05:9c:6c:43:c0:a1:
         c6:90:f2:d5:44:14:ea:ed:55:c6:7d:dd:7f:43:3c:ce:5c:be:
         2c:20:04:0d:92:0a:cd:35:4d:ff:25:80:db:6e:f8:42:75:94:
         b2:79:58:e2:b5:2d:16:f4:dc:2b:68:fc:80:b0:85:d7:a5:ff:
         66:9d:ab:c0:5f:3f:1c:fd:a7:4b:1c:5c:85:6a:5f:28:e7:5f:
         ae:f2:61:34:aa:8d:40:c2:44:bb:4d:df:0a:34:d2:0f:68:28:
         25:d1:50:fc:ac:42:63:aa:41:d7:3b:c7:37:be:5c:86:9e:7a:
         cb:26:68:77:37:ce:b2:88:ed:0f:41:e1:1f:86:4b:27:30:eb:
         6e:96:26:43:67:f7:9e:71:7f:01:e4:ee:73:b7:26:4a:80:35:
         61:30:60:db:1f:04:bf:68:ca:d3:c9:73:7b:26:34:a4:54:29:
         cf:f0:9e:32:3f:5c:8f:8f:42:06:74:1d:21:2e:5e:8e:e2:84:
         a9:e8:22:59:c8:22:1d:77:71:4c:eb:da:d3:1c:65:48:c0:05:
         b3:da:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 10:28:08 2026 by rpki-client