Error: rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
File:                     R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft (raw, json)
Hash identifier:          S/GABWg3H4hHMzOWumKeLSFHMDaGysFLQZQ2RE0TYhE=
Subject key identifier:   A4:9A:90:AE:3E:EE:6C:B4:1F:66:88:5C:A3:AF:B9:DF:65:B5:14:F0
Authority key identifier: 47:4B:B4:B3:D8:72:65:BE:E0:5B:2A:C8:39:E2:16:38:90:A4:48:2E
Certificate issuer:       /CN=F36592B4AR/serialNumber=474BB4B3D87265BEE05B2AC839E2163890A4482E
Certificate serial:       04F1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
Manifest number:          04F0
Signing time:             Mon 02 Nov 2026 03:31:31 +0000
Manifest this update:     Mon 02 Nov 2026 03:31:31 +0000
Manifest next update:     Wed 04 Nov 2026 03:31:31 +0000
Files and hashes:         1: R0u0s9hyZb7gWyrIOeIWOJCkSC4.crl (hash: GDvgM/uRpAWdXBCelu85v1hn2GVeFnK+b5jicb0h0V8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
                          rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36592B4AR, serialNumber=474BB4B3D87265BEE05B2AC839E2163890A4482E
        Validity
            Not Before: Nov  2 03:31:31 2026 GMT
            Not After : Nov  4 03:31:31 2026 GMT
        Subject: CN=6ae80413-7f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:72:0b:07:e7:23:6f:3a:06:f8:96:cd:b9:
                    14:07:0a:ef:84:7c:72:b2:1f:3d:86:ca:27:a5:32:
                    df:43:e8:2b:1f:bd:0a:89:40:35:39:f5:81:d2:3b:
                    aa:d2:64:9b:e4:45:e1:1f:e1:bf:9f:8d:c3:8a:e8:
                    d0:78:42:46:0c:d9:32:72:c7:78:a9:93:84:e3:1b:
                    a5:d3:89:fa:33:cd:55:43:87:49:a4:a0:8f:96:99:
                    b0:f2:f9:b5:9f:01:66:2a:c2:88:96:57:ea:08:51:
                    21:b9:2f:6f:33:f4:e9:d1:f7:b8:a1:f5:6a:3b:03:
                    10:4d:81:90:04:b5:81:29:7e:a1:28:07:2b:60:08:
                    fa:fe:80:de:b6:19:d8:17:5b:4c:f4:86:c4:7e:98:
                    c2:45:74:c2:a6:b0:79:6d:8d:11:99:c3:fb:23:eb:
                    46:e2:b4:7f:8a:25:73:95:30:f6:41:5a:48:96:ce:
                    bd:fe:63:8c:67:7f:d9:96:a8:48:9d:3f:72:ce:2e:
                    62:3f:31:b3:5a:5e:53:b5:ea:1a:ee:0a:74:7a:cf:
                    4d:0d:ee:2a:d0:0a:d4:01:58:42:67:76:ee:47:8a:
                    74:ac:e8:8f:af:64:81:77:80:b8:30:cd:95:ff:7e:
                    a9:5f:99:e5:fc:b1:80:77:3c:39:3f:7d:1e:4d:48:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9A:90:AE:3E:EE:6C:B4:1F:66:88:5C:A3:AF:B9:DF:65:B5:14:F0
            X509v3 Authority Key Identifier:
                keyid:47:4B:B4:B3:D8:72:65:BE:E0:5B:2A:C8:39:E2:16:38:90:A4:48:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:26:51:6f:fa:55:65:27:5c:8f:1a:de:58:80:f8:10:16:
         78:d1:e7:38:8f:1b:95:eb:99:4a:83:d5:0e:0b:56:28:9c:c9:
         35:86:1e:47:0d:12:93:fc:6c:d1:28:b3:fa:44:e4:c6:bf:03:
         71:87:b7:7c:d6:86:14:da:65:0a:dc:99:70:52:5c:71:be:e1:
         ca:11:c9:5e:9a:b9:d8:c2:64:d5:d0:c4:b3:cc:cc:e9:24:25:
         1f:7d:e9:e5:f2:a8:7e:f8:b5:3b:d4:c6:31:c4:12:ff:ed:32:
         db:92:d0:a6:31:c8:21:fd:54:73:3c:22:0d:c4:06:64:56:54:
         ad:df:d2:1c:12:7e:ca:7d:ff:8a:ab:5e:93:5d:82:c8:88:59:
         94:79:80:21:f9:b0:ff:f2:bc:d6:d0:82:5d:61:49:8e:43:91:
         10:9f:8c:44:c6:2c:48:11:d4:93:f9:8f:a3:96:cd:b5:fa:92:
         30:25:d7:16:f8:86:01:00:6a:42:88:59:4d:0d:ac:f1:c1:5a:
         d2:0e:48:a0:c1:0a:00:f1:dc:b2:2a:4d:bf:e0:51:5e:5b:b8:
         64:b3:f8:eb:16:9a:36:8d:04:77:42:d5:2a:54:a0:b6:94:3a:
         d2:e2:70:3e:bb:88:c3:99:a7:9e:af:70:02:c8:86:b0:19:3b:
         75:1b:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:23:26 2026 by rpki-client