Error: rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
File:                     QVvN73HfdO_cZVY4QJM9lPIraRM.mft (raw, json)
Hash identifier:          Ice2rwrgyNn6aig8DyYyGGkAYBBuIk5bsyjXYtJ/3kM=
Subject key identifier:   D7:FE:18:DC:2A:B2:62:16:BE:AF:F7:B1:EF:C8:F4:12:93:37:4B:35
Authority key identifier: 41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Certificate issuer:       /CN=F36374C9AR/serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
Certificate serial:       0EF1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
Manifest number:          0EEE
Signing time:             Tue 27 Oct 2026 01:02:20 +0000
Manifest this update:     Tue 27 Oct 2026 01:02:19 +0000
Manifest next update:     Thu 29 Oct 2026 01:02:19 +0000
Files and hashes:         1: QVvN73HfdO_cZVY4QJM9lPIraRM.crl (hash: YdpenFkBjJIGqvttYKgUKlnTWDYOBUqDsceCV/oV/Xs=)
                          2: EDABBC36FD1A11F097529AC4DAE4EC9C.roa (hash: GFx2ygGJ/nDrq7dilcUfzvmT0jcrZotNdwu67yJFyXE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                          rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3825 (0xef1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AR, serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
        Validity
            Not Before: Oct 27 01:02:19 2026 GMT
            Not After : Oct 29 01:02:19 2026 GMT
        Subject: CN=6adff81c-04ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:88:15:6e:c6:10:14:43:0c:40:f4:7f:ee:
                    dd:9b:b9:e2:2b:6e:2b:15:94:2d:07:14:54:63:7d:
                    84:0c:7e:64:92:3c:36:08:57:ac:a8:97:4e:4b:8d:
                    83:1e:fe:e3:1d:c2:2b:23:0e:06:4e:6a:8c:e0:90:
                    66:6a:45:64:8a:48:cb:ac:b9:36:b8:90:a9:89:0a:
                    80:97:6e:f1:0a:b9:42:fa:11:45:3d:3a:7e:6e:02:
                    f4:4e:04:43:cb:17:9d:35:a5:69:86:97:7b:58:b7:
                    03:83:bb:6d:ce:e6:76:eb:03:d5:bf:5e:47:b4:ed:
                    a8:a9:2b:83:6b:f0:8a:4e:c6:f3:dd:cd:0d:bc:40:
                    31:39:47:be:1b:e5:e3:0b:c0:ed:93:61:a2:bc:c6:
                    cc:da:df:3e:dd:1d:c2:92:94:53:b6:c9:bd:9b:0d:
                    2e:93:95:ba:38:10:a4:30:ce:a7:0a:46:5e:92:64:
                    e5:b8:2c:03:47:5c:39:4d:87:df:db:b3:b0:bb:c3:
                    b1:23:27:54:94:b7:76:ba:ee:b3:4b:4f:58:32:c3:
                    07:2d:5e:ad:d7:20:0b:99:99:f4:ce:85:00:bd:46:
                    8a:73:02:18:d0:21:d4:ac:7d:d7:dd:6e:78:72:aa:
                    7c:19:a2:a8:fa:0e:22:de:92:b9:ec:a8:f5:5e:d8:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FE:18:DC:2A:B2:62:16:BE:AF:F7:B1:EF:C8:F4:12:93:37:4B:35
            X509v3 Authority Key Identifier:
                keyid:41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:10:0a:73:85:51:24:d6:a9:f0:41:db:36:7f:e5:7e:99:de:
         f2:a3:05:8c:cd:50:67:fb:8f:2a:4b:df:c8:0c:17:11:82:3f:
         84:55:14:d8:71:b6:ce:36:5d:9f:df:d1:99:a6:cf:b6:35:2b:
         5d:31:e5:2b:e8:84:b7:fd:a4:b2:14:ef:56:5b:65:2b:55:fb:
         18:6e:e4:9c:44:3b:7b:a3:ec:1f:c0:e0:4e:f8:93:49:18:17:
         0e:45:ce:78:06:16:c6:48:29:6b:1a:26:9b:c9:08:48:d0:69:
         56:c6:c7:98:34:36:b7:c9:b5:80:12:00:03:8b:16:f0:f1:fd:
         7d:fa:44:37:b1:6a:bc:86:78:31:d2:6e:98:84:cb:07:5b:6c:
         07:89:af:e2:2c:86:4a:3d:82:33:b9:02:fd:de:db:cf:f1:fb:
         4f:cb:e6:3d:4d:c3:f9:e0:30:5b:d3:65:ea:65:12:2e:a0:ca:
         19:d2:9f:60:6f:f7:1a:b8:f3:8a:fe:6d:15:03:32:14:76:36:
         22:0b:09:d3:16:2d:46:87:8a:81:46:cb:c0:14:b5:a7:2e:e4:
         45:06:e3:38:82:3c:00:31:c5:d8:88:9d:be:c3:b6:47:2e:01:
         ed:c9:a9:b6:46:f5:eb:18:c2:86:73:ff:d4:0d:6d:e4:ea:5c:
         7c:64:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:57:25 2026 by rpki-client