Error: rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
File:                     1F-q3w0PsrIYxNl-HvQbwMkznC8.mft (raw, json)
Hash identifier:          dItjAhti9kBoliVBvvYSEBGL9CUQD6UWPhah5LtPcOc=
Subject key identifier:   10:F4:4C:BB:BE:66:E6:6E:15:4C:75:62:56:D0:C5:D2:A7:41:FA:8A
Authority key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
Certificate issuer:       /CN=F3651B12RI/serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
Certificate serial:       01E1
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
Manifest number:          01E1
Signing time:             Tue 27 Oct 2026 04:58:12 +0000
Manifest this update:     Tue 27 Oct 2026 04:58:12 +0000
Manifest next update:     Thu 29 Oct 2026 04:58:12 +0000
Files and hashes:         1: 1F-q3w0PsrIYxNl-HvQbwMkznC8.crl (hash: VB06sBC481KBLXbosy0SDM/iycDVeiY5LE81KQ9dO/s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                          rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
        Validity
            Not Before: Oct 27 04:58:12 2026 GMT
            Not After : Oct 29 04:58:12 2026 GMT
        Subject: CN=6ae02f64-ef42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:66:f1:72:df:0c:9f:b2:4f:4a:68:cd:d6:
                    f0:e5:39:75:2e:30:86:67:2b:48:e1:71:2f:93:42:
                    be:b0:64:40:a9:70:a4:90:3f:4a:a8:10:7f:7c:1f:
                    c5:a1:22:12:8d:85:35:7b:e9:ac:68:e8:b5:f1:13:
                    eb:5d:a5:fa:4e:b0:15:c0:60:11:cf:18:be:d9:63:
                    37:58:9a:6f:60:34:e9:19:70:ef:c7:4f:94:96:44:
                    44:b5:fe:50:20:65:65:bb:de:15:ef:43:7e:63:bc:
                    60:dc:bc:b5:37:cf:68:6c:61:75:64:83:e5:63:68:
                    47:85:f0:72:32:ff:9e:d1:98:86:e9:bc:84:8b:81:
                    50:d5:ec:2b:2b:8e:1e:b1:59:f4:3f:f5:8f:00:5f:
                    b7:e6:36:98:84:a1:df:15:9d:2e:7d:c1:63:85:47:
                    96:bd:46:2d:88:70:df:17:5c:75:d0:35:31:f1:fe:
                    9d:c8:3b:8f:69:49:c9:c4:b2:2c:0c:b7:0b:88:ae:
                    bf:c3:9a:8e:8c:52:30:09:58:af:07:21:ca:17:a0:
                    6c:83:88:18:57:c4:30:57:d5:51:d0:c7:30:33:b1:
                    30:9a:1f:7d:53:bb:b7:17:88:f1:fb:cf:8b:df:19:
                    16:9a:44:dc:1e:05:57:d3:17:a0:b3:57:20:97:64:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F4:4C:BB:BE:66:E6:6E:15:4C:75:62:56:D0:C5:D2:A7:41:FA:8A
            X509v3 Authority Key Identifier:
                keyid:D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:b4:00:07:2d:75:fc:f2:fc:09:7d:7c:5b:76:4e:87:72:
         55:cc:0d:e1:ab:e2:3f:d9:4d:43:cb:3c:32:6b:d8:ac:b6:0f:
         44:2d:50:33:22:00:ba:8c:bf:2b:7a:53:7f:1f:47:30:5a:65:
         37:0c:ab:b4:d2:9a:f0:1c:0f:38:ee:0c:f5:2b:2c:0f:30:11:
         95:ab:19:43:35:81:31:68:b6:2d:b3:c5:04:6e:0f:49:d1:f7:
         25:45:fc:03:7b:24:d8:fd:2e:42:63:f7:78:59:91:78:11:5d:
         55:4f:93:58:a5:8e:0e:ab:d6:9b:08:91:df:54:14:33:e9:a6:
         25:b6:b4:3e:e0:7d:52:ec:72:57:b5:ea:30:f5:11:5c:a7:bb:
         7c:1d:33:74:c3:b6:d7:52:7c:70:a5:35:90:f6:4d:e0:1c:15:
         4a:49:1b:d5:38:29:53:6d:85:27:b2:1e:de:21:66:86:1e:a5:
         58:e2:6c:ec:11:27:dc:54:c1:f1:db:43:bf:68:df:c3:ea:5d:
         f7:f5:3f:ac:ca:f9:e6:18:8e:62:69:bb:77:64:e9:0d:ed:33:
         bd:ed:83:32:d9:83:06:72:2b:69:36:f0:c8:14:39:7e:ed:fb:
         42:d0:99:33:1e:b4:c2:e5:17:28:65:d9:c8:30:4f:d8:64:39:
         7a:75:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:55:23 2026 by rpki-client