Error: rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File:                     4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier:          fXMSZhPVHGDtDNx9jxoP+K34WWO9krSw8OuIZ0S+Hss=
Subject key identifier:   67:B4:B8:4D:55:14:C6:CC:FC:57:22:9E:FF:78:8B:6C:A3:D0:F3:EE
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer:       /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial:       03BF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number:          03BD
Signing time:             Tue 03 Nov 2026 04:07:48 +0000
Manifest this update:     Tue 03 Nov 2026 04:07:47 +0000
Manifest next update:     Thu 05 Nov 2026 04:07:47 +0000
Files and hashes:         1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: lyjiM1MysEAuQqQgvaXyXnqY/mlxUwQ4v9LJRJK2GZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
        Validity
            Not Before: Nov  3 04:07:47 2026 GMT
            Not After : Nov  5 04:07:47 2026 GMT
        Subject: CN=6ae95e14-2b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:15:67:2a:97:f2:81:f0:44:63:61:f1:3e:
                    f8:88:0d:35:ea:18:cc:64:3c:61:8b:7e:9f:ab:38:
                    e9:fd:e9:8b:b1:03:89:89:af:4e:19:50:9a:22:bc:
                    28:01:d4:85:0d:7a:d0:11:fe:98:69:5f:f4:44:60:
                    36:24:a7:72:66:05:2b:10:5a:b8:26:97:dc:09:ac:
                    36:e2:f9:58:ea:cd:5a:8b:46:fb:15:8d:54:25:e1:
                    f2:f6:8e:58:36:88:1f:63:a5:55:4a:ca:a2:eb:7a:
                    57:df:a0:3b:91:8f:4a:94:53:2a:88:ae:6f:0b:6b:
                    28:16:8c:68:e1:24:bb:94:c4:78:19:a6:8d:5f:5e:
                    34:86:64:3f:cd:cd:11:da:32:8c:1c:4f:98:c9:22:
                    1e:e3:38:b6:15:12:a1:5d:ca:e9:fb:6c:7d:06:de:
                    df:14:7c:62:ca:b6:64:06:19:f2:f4:31:0d:2e:f2:
                    73:96:58:62:9f:e9:60:9b:d3:93:78:a6:ab:69:a6:
                    e6:dd:d1:de:0a:a9:ae:93:c0:9f:3d:e3:7f:89:23:
                    ff:98:e9:d0:31:0f:a0:25:9a:2f:b7:95:56:7f:19:
                    b2:a4:1d:67:33:53:cf:b1:bb:73:94:f4:70:49:95:
                    c9:f3:fe:67:54:b6:2f:b5:c3:40:da:4b:ad:ee:47:
                    13:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B4:B8:4D:55:14:C6:CC:FC:57:22:9E:FF:78:8B:6C:A3:D0:F3:EE
            X509v3 Authority Key Identifier:
                keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:65:9e:12:bc:b2:59:85:7c:66:e2:ed:66:c1:79:51:80:9b:
         d5:07:5e:3e:58:d5:b8:85:bf:2b:e2:4e:37:14:04:e3:03:d3:
         df:28:e6:0a:20:08:e6:04:f0:60:e7:57:44:c0:04:89:58:3e:
         d9:0d:4d:2c:1f:b7:6a:3c:13:6e:30:1f:0e:fa:4f:b7:91:48:
         fa:06:4a:a3:b2:ab:9a:a6:d3:d3:db:48:5a:3a:25:e1:24:91:
         61:b7:d4:be:27:62:5d:7e:4d:3d:9e:2d:32:b8:8b:ec:a7:e3:
         7b:de:d5:a2:81:e3:ed:f4:7b:6a:e9:29:40:b4:6b:0a:1f:8e:
         37:97:fc:47:e4:ec:4c:4e:4a:d4:92:51:d7:87:64:85:aa:fa:
         2d:c1:df:35:dd:a4:56:f8:90:82:9d:c0:d9:ea:23:f8:f8:5c:
         a1:9d:f6:26:46:ef:03:01:ef:7c:54:d4:31:dc:b8:1b:7a:16:
         e1:ee:9c:c2:20:d6:18:a5:81:e3:a2:8c:6e:1f:f6:62:19:a2:
         3b:b8:b2:c6:4d:04:d3:da:e9:b8:68:75:8e:40:c5:c1:52:79:
         e0:b0:89:5d:c1:a5:48:d6:9a:da:4c:48:81:ce:57:60:df:d0:
         d2:6b:a7:e4:fa:ae:6a:e4:1d:0c:fe:4f:2a:04:b8:3a:9d:a4:
         b1:f1:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:04:46 2026 by rpki-client