Error: rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft
File:                     VmuZsSWb_WaDTuJmVk4KreYwXH0.mft (raw, json)
Hash identifier:          BTL5PVpT9idmUAQh8H3Fe/tj2YXYNyQ3MCdIcc4MH1M=
Subject key identifier:   40:44:08:DE:23:13:21:B1:D7:A5:E4:4F:23:23:B1:2C:B1:F3:62:AC
Authority key identifier: 56:6B:99:B1:25:9B:FD:66:83:4E:E2:66:56:4E:0A:AD:E6:30:5C:7D
Certificate issuer:       /CN=F3652B4FAR/serialNumber=566B99B1259BFD66834EE266564E0AADE6305C7D
Certificate serial:       55
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VmuZsSWb_WaDTuJmVk4KreYwXH0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft
Manifest number:          54
Signing time:             Sat 19 Sep 2026 09:58:08 +0000
Manifest this update:     Sat 19 Sep 2026 09:58:07 +0000
Manifest next update:     Mon 21 Sep 2026 09:58:07 +0000
Files and hashes:         1: VmuZsSWb_WaDTuJmVk4KreYwXH0.crl (hash: d7HeeyrOmqL66frssndh5nWXXhPFpE6yxY8HiVmfpBA=)
                          2: 086E21E4739A11F1856A661ACF1D38B0.roa (hash: Iwj4Iz6FPSO/V/ChjskNqodJ18zm4zl5mQLO7h52nOM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft
                          rsync://rpki.afrinic.net/repository/arin/VmuZsSWb_WaDTuJmVk4KreYwXH0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652B4FAR, serialNumber=566B99B1259BFD66834EE266564E0AADE6305C7D
        Validity
            Not Before: Sep 19 09:58:07 2026 GMT
            Not After : Sep 21 09:58:07 2026 GMT
        Subject: CN=6aae5cb0-3a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:ab:89:d7:4d:f7:df:52:e5:d3:8c:f1:47:
                    8b:3c:93:a6:c5:0e:94:45:80:2f:be:71:0e:bb:e9:
                    14:09:af:1e:71:14:65:31:c1:d1:1d:34:0d:94:47:
                    10:e7:7b:71:f5:68:12:44:93:fa:ec:90:fe:29:93:
                    3a:b7:cf:29:b3:31:14:62:c4:ba:36:fe:7a:46:20:
                    99:4d:5e:c9:f1:67:a3:72:ea:dc:c6:6b:5a:5d:93:
                    fe:18:3b:95:db:b4:75:10:59:7f:3c:16:11:6b:4f:
                    c9:2d:58:24:e3:a6:c9:f1:57:dd:3a:b4:ed:d5:07:
                    18:7f:fd:ba:94:4a:fd:c2:3a:f0:63:da:7e:8d:73:
                    99:c0:fa:01:04:60:31:2e:94:29:7c:86:9b:d8:e4:
                    47:1d:f0:fd:44:ac:a8:9a:b5:63:97:54:f8:10:25:
                    3a:0f:f6:79:ff:26:12:1a:7f:4c:0e:04:62:69:07:
                    24:e4:cd:49:3e:25:5b:c0:d4:5a:a3:be:4e:9a:b9:
                    a5:84:2c:cc:e7:60:2e:58:1c:e2:40:a3:71:49:11:
                    46:b8:53:eb:38:25:8b:ac:ed:81:af:99:f5:c2:b4:
                    09:53:59:3a:2d:54:24:74:3e:64:c0:7e:2c:de:4a:
                    19:e8:5e:70:40:d5:5f:92:8c:95:f7:1f:e1:21:af:
                    05:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:44:08:DE:23:13:21:B1:D7:A5:E4:4F:23:23:B1:2C:B1:F3:62:AC
            X509v3 Authority Key Identifier:
                keyid:56:6B:99:B1:25:9B:FD:66:83:4E:E2:66:56:4E:0A:AD:E6:30:5C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VmuZsSWb_WaDTuJmVk4KreYwXH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3f:da:2e:81:1b:43:03:9e:b9:76:9c:58:70:31:e1:63:f4:
         41:4c:75:d5:5f:e1:13:e1:03:8a:3e:85:74:0e:d8:b9:31:89:
         53:84:ff:13:d6:f8:36:03:ef:7f:6a:8a:d7:33:7c:01:6a:db:
         b4:eb:93:c5:97:30:fe:2d:f9:bf:05:83:4e:f9:4b:bf:3a:aa:
         86:ba:55:ef:43:5f:71:d7:bf:86:a0:f9:81:45:7d:0e:b0:fc:
         c4:0c:a5:e2:29:d3:cc:6b:6a:e5:cb:b1:b3:9a:95:cd:d4:5f:
         ed:cd:8b:3b:d0:52:9c:41:bf:2e:74:2a:d9:94:bf:42:2f:fb:
         6e:33:41:ff:d1:6a:64:f6:07:50:33:ab:63:4a:70:2b:d7:e6:
         05:0c:2f:39:ce:48:48:a1:5a:42:d2:19:8a:76:76:86:72:55:
         0e:fe:4b:10:84:e9:6f:ee:da:41:2c:f4:32:dc:83:bf:85:fc:
         e7:92:6c:69:ff:f3:c6:93:6a:b6:21:76:2d:02:d8:cf:91:cd:
         5a:3d:f8:5b:77:a9:83:18:6c:75:d7:65:39:ef:a5:50:ab:dc:
         05:6e:86:42:bd:9d:86:f0:77:ce:3a:4a:e1:e4:c2:7e:ab:ee:
         9a:65:f7:03:72:00:7a:1f:da:89:5c:40:9b:a1:6a:b9:05:cf:
         40:aa:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 15:31:05 2026 by rpki-client