Error: rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
File:                     W6zoN39KxIJPmq_HsThFyWtgsko.mft (raw, json)
Hash identifier:          hmFrsPX9eL8aMbaO5qCsCU16XvVpFUE74TBBWuWIGiU=
Subject key identifier:   90:E6:E8:EE:32:1F:01:83:7D:D7:10:1A:EC:B2:BF:B8:8A:27:7B:D4
Authority key identifier: 5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A
Certificate issuer:       /CN=F363E214AR/serialNumber=5BACE8377F4AC4824F9AAFC7B13845C96B60B24A
Certificate serial:       0ADC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
Manifest number:          0ADB
Signing time:             Wed 28 Oct 2026 01:22:07 +0000
Manifest this update:     Wed 28 Oct 2026 01:22:06 +0000
Manifest next update:     Fri 30 Oct 2026 01:22:06 +0000
Files and hashes:         1: W6zoN39KxIJPmq_HsThFyWtgsko.crl (hash: t//nPqQnUkDOOKS5QMwkLgTYVR76LvRxf85j5i9RBgo=)
                          2: AD8D26F27D4D11E9A43C5972F8AEA228.roa (hash: J0NYDzKOggR45pKs8ueiUloNUhy6/sW6bdalJakcT1Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
                          rsync://rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2780 (0xadc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363E214AR, serialNumber=5BACE8377F4AC4824F9AAFC7B13845C96B60B24A
        Validity
            Not Before: Oct 28 01:22:06 2026 GMT
            Not After : Oct 30 01:22:06 2026 GMT
        Subject: CN=6ae14e3f-a632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:d1:56:d4:d7:fc:3d:81:69:d5:08:b7:1b:
                    1e:72:f1:0c:9f:17:61:7d:b8:3b:ff:33:96:31:c0:
                    54:97:43:bb:6c:6b:51:7e:e7:1b:8d:e0:28:b3:e4:
                    cb:4e:fb:04:cd:f0:3c:89:19:17:dc:a4:09:0e:dc:
                    8b:6c:eb:15:06:82:23:37:3f:70:74:bc:bc:04:5c:
                    8a:36:75:36:bd:37:0e:76:6b:d4:fc:5b:d1:10:6a:
                    63:f1:9b:b7:d6:c0:f4:13:a7:6a:8b:83:4c:bf:43:
                    4b:e5:71:70:a2:e9:43:68:35:10:33:84:2c:5a:e7:
                    5e:d5:52:c7:76:5a:93:d0:a5:13:85:d4:eb:c0:f3:
                    c0:55:11:b4:ba:f3:41:3f:89:82:a5:73:b5:e0:34:
                    28:06:67:12:01:08:b6:c3:2b:f7:9a:ca:ef:e3:a3:
                    ae:84:95:92:75:dd:3c:7e:ad:74:a2:d7:87:5e:f9:
                    72:b4:dc:10:bd:d0:f1:46:0e:a8:7b:6f:3e:a9:aa:
                    16:00:f6:24:f7:b4:1a:f1:bf:6b:ea:ad:f3:32:fd:
                    89:78:d0:d3:47:09:92:25:47:92:a0:61:40:de:76:
                    f5:e5:73:5d:ee:04:c9:b4:98:00:bd:36:5a:22:f2:
                    02:c4:d9:c1:db:ec:57:42:40:f1:3c:af:e7:54:7d:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E6:E8:EE:32:1F:01:83:7D:D7:10:1A:EC:B2:BF:B8:8A:27:7B:D4
            X509v3 Authority Key Identifier:
                keyid:5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:34:31:25:53:2b:25:ee:d0:22:26:28:c9:71:7e:12:55:
         ec:c8:11:0a:8d:77:ad:00:af:81:79:9e:78:88:15:32:04:e2:
         a9:b0:f0:3f:f9:74:78:d6:e4:4f:e5:84:39:7a:11:b9:a2:21:
         4a:3a:e0:db:1d:4d:09:e9:40:70:c9:eb:05:fd:1f:42:41:0b:
         30:de:16:39:7e:8c:60:74:7b:9a:97:4f:36:ca:e3:e9:f7:f5:
         2e:04:ea:17:9b:5f:13:09:72:f4:93:7d:de:b3:14:fc:d2:9d:
         27:c5:73:7d:5f:b2:23:9f:bd:54:5a:31:10:ea:ff:62:09:c1:
         f8:ea:d7:70:cf:04:22:ee:a8:00:26:ef:2d:51:b6:b3:2d:fe:
         ef:6d:da:83:76:39:43:c4:3f:74:96:6a:3f:a1:ad:09:65:f8:
         56:fd:a9:3c:53:fd:58:f7:2c:15:13:a2:b2:72:43:ab:6a:1c:
         33:41:56:5a:cd:07:74:99:cc:e5:60:73:ea:15:fc:8b:7c:44:
         e7:84:0b:6c:d4:15:d4:e2:18:a5:4f:54:9e:35:13:f2:1a:06:
         0e:a4:d3:9e:9e:3c:97:93:82:f4:1c:fa:94:15:cb:6c:97:84:
         95:a6:98:6a:88:ec:92:ef:99:db:a7:93:3b:ee:6d:88:64:f9:
         75:1b:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:56:25 2026 by rpki-client