Error: rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          /F8hidnYCSGaCxbaEJAPkFMml5QIluQLCLhpJm4FtTc=
Subject key identifier:   4D:35:1B:58:81:2C:D5:CB:C2:68:52:92:A7:99:EB:99:CC:02:75:FB
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       0376
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          0374
Signing time:             Sun 25 Oct 2026 04:14:10 +0000
Manifest this update:     Sun 25 Oct 2026 04:14:09 +0000
Manifest next update:     Tue 27 Oct 2026 04:14:09 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: xjzuKMc03feWEnLTiBP+uwJdvjyoEwwa2nTOZFkKllU=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)
                          3: D1E82CD2DCA911F0A5AE17E9DAE4EC9C.roa (hash: 1WlQj4309rmMEuDFbG4TCzXscQ6wxxa2/yO0H6jLRvo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Oct 25 04:14:09 2026 GMT
            Not After : Oct 27 04:14:09 2026 GMT
        Subject: CN=6add8212-450a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:fd:46:cd:80:47:f3:c1:3c:3b:01:4e:56:
                    18:0d:7d:8c:23:74:1c:c4:bc:de:11:91:1e:17:dd:
                    e0:14:c0:8e:b6:fc:bd:3e:c3:03:b1:b7:c6:1f:97:
                    c4:3a:18:2f:8f:3c:74:2d:94:ad:4f:f2:b2:51:78:
                    98:61:a8:5d:a6:d4:90:7f:8d:49:1f:08:1b:77:4e:
                    68:67:0b:79:c2:e7:6d:24:ef:f5:35:a6:9d:d4:5d:
                    8f:33:52:d6:06:0f:d3:8d:66:52:da:52:e1:1e:d1:
                    99:21:1c:c0:d4:7a:d0:f2:9a:cb:e0:44:c0:91:a1:
                    09:aa:05:68:7c:b9:bc:af:46:79:1e:4d:0b:41:13:
                    88:65:b6:ed:3a:00:49:e9:2e:4a:80:08:07:14:ea:
                    28:64:cb:b8:08:38:f1:1f:6b:1a:cb:bf:ae:46:e7:
                    a4:1a:fa:6d:aa:52:67:03:33:d5:97:d1:55:96:a0:
                    19:e4:e0:51:3e:d4:c4:a9:38:a0:a2:78:5e:2d:c6:
                    7c:32:ad:23:c1:a2:72:c0:e6:b0:68:27:fa:67:38:
                    4e:87:c1:12:b1:1a:b5:54:c8:9a:a2:c8:12:a4:35:
                    1d:ca:47:2c:6c:30:ab:6c:f3:b2:d6:30:22:d2:44:
                    b2:c1:85:bf:40:33:0b:05:81:06:c8:a1:2b:01:bd:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:35:1B:58:81:2C:D5:CB:C2:68:52:92:A7:99:EB:99:CC:02:75:FB
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:64:d6:9e:c4:6c:f8:39:bd:eb:3e:d9:a4:79:d3:f0:86:fd:
         da:f6:4a:0b:4a:f5:2d:fd:73:22:74:7f:4a:d1:56:9e:78:bd:
         0c:93:f0:7c:9f:3e:81:94:85:7f:42:66:ef:1c:7f:d5:71:ab:
         4f:c4:54:e7:53:11:a4:de:d4:6f:64:fc:52:31:2f:b3:7b:85:
         db:04:1d:8f:87:9b:dc:bb:76:13:e7:0a:48:f6:ef:8b:6d:32:
         0b:7e:8a:b2:2a:b8:de:2d:64:4b:fe:dc:e0:ec:22:fb:98:8c:
         bf:b6:91:b6:46:f1:d0:d0:52:e4:4d:31:5d:31:3d:ab:91:b6:
         23:97:60:07:fa:7e:00:1e:c9:3d:38:09:5f:13:94:50:6d:0a:
         95:05:fd:fc:5f:e2:9f:a9:ee:ce:14:04:58:96:fd:b0:d3:b7:
         b4:ad:dd:6b:cb:f0:30:15:7b:ba:f4:79:af:5c:7f:45:b5:dd:
         e2:45:08:d2:4d:32:66:1c:e9:61:25:fe:1a:1d:a0:4c:52:0e:
         58:bb:11:bb:1e:59:22:a6:8f:93:3b:1f:4f:ee:9d:b4:af:d8:
         25:53:ab:0c:91:52:24:2f:27:bd:c8:cc:9a:af:d1:73:b0:21:
         73:dd:f8:5f:b3:e1:24:c0:3f:e4:c6:90:e6:98:d6:42:79:9b:
         36:3b:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:28:58 2026 by rpki-client