Error: rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/XE6HoT6mpmtZnwCgZTbvR8b7mqU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/XE6HoT6mpmtZnwCgZTbvR8b7mqU.mft
File:                     XE6HoT6mpmtZnwCgZTbvR8b7mqU.mft (raw, json)
Hash identifier:          CRJRLiaceDFbI+rNpo6S4j66XDvWnhmdKCY1fGhWdOQ=
Subject key identifier:   F8:F5:73:6D:51:BF:6B:E0:35:29:8C:B7:9A:6E:E3:A0:BE:12:64:0D
Authority key identifier: 5C:4E:87:A1:3E:A6:A6:6B:59:9F:00:A0:65:36:EF:47:C6:FB:9A:A5
Certificate issuer:       /CN=F365FABEAR/serialNumber=5C4E87A13EA6A66B599F00A06536EF47C6FB9AA5
Certificate serial:       01C5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XE6HoT6mpmtZnwCgZTbvR8b7mqU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/XE6HoT6mpmtZnwCgZTbvR8b7mqU.mft
Manifest number:          01C2
Signing time:             Thu 10 Sep 2026 04:55:58 +0000
Manifest this update:     Thu 10 Sep 2026 04:55:57 +0000
Manifest next update:     Sat 12 Sep 2026 04:55:57 +0000
Files and hashes:         1: XE6HoT6mpmtZnwCgZTbvR8b7mqU.crl (hash: DrAEsNryJfSq7AHAThhUBFXat2WuE/sAGLK4TY19lHQ=)
                          2: 308EA180A43D11F08B727AB1DAE4EC9C.roa (hash: Kda/3FDkMLioCT/6iKewSPTTZ3I9OKun7KcxgxCcRvk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/XE6HoT6mpmtZnwCgZTbvR8b7mqU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/XE6HoT6mpmtZnwCgZTbvR8b7mqU.mft
                          rsync://rpki.afrinic.net/repository/arin/XE6HoT6mpmtZnwCgZTbvR8b7mqU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FABEAR, serialNumber=5C4E87A13EA6A66B599F00A06536EF47C6FB9AA5
        Validity
            Not Before: Sep 10 04:55:57 2026 GMT
            Not After : Sep 12 04:55:57 2026 GMT
        Subject: CN=6aa2385e-d3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:9a:f4:64:8f:8b:ad:84:ac:1c:d4:c2:ae:
                    f3:69:40:8a:f1:d1:03:4b:dd:cf:b7:07:f5:75:40:
                    ac:e8:84:2e:22:bc:0e:a3:71:4f:c7:96:07:cb:89:
                    e3:6e:41:bd:d7:78:58:35:14:7a:5b:05:44:19:f7:
                    86:56:a1:6f:d9:2a:c6:64:ef:04:14:95:a7:19:95:
                    d7:03:1d:98:ce:3c:12:b5:b2:87:78:49:59:26:2b:
                    07:bf:23:7c:2e:57:35:90:98:ab:99:1b:31:48:0f:
                    a6:78:8f:9f:0f:91:ab:64:50:e8:12:28:f7:2f:f6:
                    54:06:3d:9f:f0:b1:d1:d9:85:c8:a8:6d:68:24:2d:
                    dd:bf:bc:f0:e9:62:b9:74:38:3b:5a:40:1c:16:c2:
                    a1:61:e1:77:9d:dd:ff:10:86:2a:48:d7:f0:bc:66:
                    56:cd:f3:a3:fc:b9:21:f3:2a:2d:f1:a3:a4:8f:7d:
                    ac:68:42:22:ef:70:57:bb:c0:84:a5:67:95:5d:da:
                    d5:49:6e:c2:0a:80:45:05:04:ac:3e:b0:27:bf:36:
                    26:78:96:8e:f5:4e:95:7f:95:9e:38:ac:05:57:82:
                    91:d2:cd:95:6c:c3:64:7f:a3:f2:9c:9a:d6:7e:33:
                    00:12:a2:ca:56:67:6e:52:0b:b5:70:ef:a7:c0:ef:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F5:73:6D:51:BF:6B:E0:35:29:8C:B7:9A:6E:E3:A0:BE:12:64:0D
            X509v3 Authority Key Identifier:
                keyid:5C:4E:87:A1:3E:A6:A6:6B:59:9F:00:A0:65:36:EF:47:C6:FB:9A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/XE6HoT6mpmtZnwCgZTbvR8b7mqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XE6HoT6mpmtZnwCgZTbvR8b7mqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/XE6HoT6mpmtZnwCgZTbvR8b7mqU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:22:e0:2c:59:c3:78:5b:26:16:2c:f0:5b:fe:9d:08:04:89:
         f5:3d:eb:fe:6b:96:fd:85:36:fe:df:7f:d6:fd:81:63:4a:73:
         4a:9e:68:b9:1e:a3:b0:a7:a2:b0:17:7c:d3:5f:0c:a7:a4:2e:
         97:2d:50:4c:c3:b1:8a:07:93:69:72:c8:66:e1:dc:4a:1f:8e:
         45:57:71:65:dd:b7:3a:cf:4c:2e:e4:02:30:e1:bc:f2:2f:5e:
         b9:f8:77:ba:8b:f5:fe:a8:03:2e:af:ee:df:4e:05:1e:30:4c:
         0f:27:3b:50:e2:3d:7d:29:d1:76:f3:ff:13:57:91:f4:36:cd:
         82:07:8e:1c:f7:75:14:b1:48:4d:b3:e2:8e:2d:71:79:08:36:
         01:6a:f5:6e:b1:79:c6:b5:6c:97:fc:9d:94:a9:c5:52:fc:6d:
         8c:2d:3f:0b:4f:77:8a:6c:d5:57:89:6f:05:3e:68:ef:21:e2:
         5b:90:15:d0:b8:98:9c:e5:2a:6e:b2:fa:a3:a6:dc:48:a8:cc:
         44:9f:c7:ea:9a:d9:31:fb:4c:99:f0:e1:83:32:b9:a3:fe:ef:
         69:ac:50:dc:4f:83:0c:29:c2:85:db:03:76:37:4f:9f:a3:57:
         0a:a5:6c:e4:e8:37:3e:09:f6:4a:ca:75:30:2d:a2:d1:6c:f7:
         f5:91:a0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:35:44 2026 by rpki-client