Error: rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
File:                     uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft (raw, json)
Hash identifier:          glvt8116gI/6+vQ4CVtJQjPlkQZOK7GE56d6P+nlPHg=
Subject key identifier:   4D:19:34:D3:41:04:B7:D8:83:E9:2D:AA:04:1C:04:15:76:00:5F:35
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Certificate issuer:       /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial:       0978
Authority info access:    rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
Manifest number:          08FB
Signing time:             Tue 22 Sep 2026 02:03:53 +0000
Manifest this update:     Tue 22 Sep 2026 02:03:52 +0000
Manifest next update:     Thu 24 Sep 2026 02:03:52 +0000
Files and hashes:         1: uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl (hash: fi/KN3RE9+0DdaKCUT3YGfDZnlqYwZy4H7r44GIU0l8=)
                          2: B3154C7CC81F11EEAA20E967775412E6.roa (hash: 8UfO1Zdj7sHYai3qFl14GvhjEbZMOyrK3RfMcTYVc3I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
                          rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 02:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2424 (0x978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626CB6AR, serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
        Validity
            Not Before: Sep 22 02:03:52 2026 GMT
            Not After : Sep 24 02:03:52 2026 GMT
        Subject: CN=6ab1e209-432a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:15:9d:21:d5:73:00:74:60:77:df:9b:6d:
                    e3:14:b7:15:0d:07:27:a4:06:e9:fc:1d:b7:c6:05:
                    28:99:b0:44:c2:c4:3a:82:80:82:7f:30:a1:76:5e:
                    dc:9e:72:15:e4:49:d9:2a:5b:8c:40:91:52:39:6c:
                    f1:e1:35:0c:b8:49:8a:30:9d:30:d9:bf:67:19:12:
                    ea:62:e6:cc:6e:fd:2d:be:65:b0:ca:2c:e8:46:ee:
                    fa:ff:78:f9:4c:a3:f0:16:85:2a:84:cf:a5:38:f2:
                    0f:e8:57:f0:db:0d:cd:82:da:e0:10:89:e0:21:44:
                    b9:4f:31:34:73:d3:a0:86:68:17:f1:6c:63:a6:5b:
                    7f:bb:6b:b3:6c:29:32:ba:d2:56:e6:55:3a:16:51:
                    54:21:0d:c3:33:27:cb:69:9b:bf:59:f0:a7:36:d4:
                    f3:f0:23:a9:49:7d:33:0c:78:eb:17:b1:29:69:2d:
                    8a:c1:45:d0:80:6d:99:3e:df:cc:ba:dc:3d:b0:96:
                    9a:e3:58:9d:c4:c8:d3:ee:dd:5c:50:39:e0:81:5c:
                    43:09:f9:51:fb:d0:b0:11:c4:61:e8:4b:3e:d1:b1:
                    da:c7:bf:81:b9:78:25:01:a6:65:21:7b:2e:fc:8f:
                    99:d8:a7:d0:e3:84:e9:4c:0b:dd:86:35:60:64:da:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:19:34:D3:41:04:B7:D8:83:E9:2D:AA:04:1C:04:15:76:00:5F:35
            X509v3 Authority Key Identifier:
                keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:22:00:57:d1:f2:2f:75:54:83:c5:2a:48:d8:b2:49:b3:f1:
         ea:75:5b:e9:d2:90:2b:62:75:bb:22:5e:1f:bb:a3:4b:22:bc:
         cc:01:07:67:3d:f1:49:6a:34:c3:32:df:3b:e9:19:d5:c3:4c:
         64:b9:13:ee:cf:38:8a:e9:e5:7b:bc:19:53:25:cb:b1:36:33:
         22:a0:77:97:de:19:93:7e:27:c9:fc:d1:09:2e:d1:15:cd:45:
         06:61:35:44:24:d8:94:37:4c:64:11:c0:eb:22:89:ed:1c:b6:
         e6:26:e7:47:01:82:6d:fc:97:52:2f:c0:1f:c6:64:23:35:70:
         90:24:aa:92:94:a7:7a:1c:bb:26:cc:0c:55:40:0c:1b:2f:b2:
         97:eb:a6:e3:f9:90:b7:86:a8:82:56:1f:35:5f:1f:58:cb:82:
         82:34:2a:d6:6d:f6:0b:9e:a6:dc:a0:0d:56:08:21:16:e2:17:
         2b:b0:17:4f:bf:32:61:57:71:29:65:6e:52:16:36:1b:23:cc:
         e4:b6:b1:f1:dd:ce:22:4f:fa:da:14:71:9b:9b:33:43:bb:22:
         32:96:56:51:ae:87:51:a8:af:96:6e:8b:4b:8a:30:1b:2b:21:
         b7:c7:20:32:e3:5f:0c:b9:6d:c8:a4:e9:43:00:84:c2:b8:b4:
         26:63:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:44:27 2026 by rpki-client