Error: rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
File:                     BoarqsOL5_GqLSv8WD8tN9iLpEI.mft (raw, json)
Hash identifier:          CMM9y7PAzdR+/Qr43MqqnKlJtjiJj19q+hDJMMQcMAY=
Subject key identifier:   E5:DC:28:8F:1D:FE:5A:F2:AF:DD:B7:4E:B3:C6:C5:91:22:04:5F:D1
Authority key identifier: 06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42
Certificate issuer:       /CN=F3660C14AR/serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
Certificate serial:       0AB4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
Manifest number:          0AB3
Signing time:             Wed 28 Oct 2026 01:31:04 +0000
Manifest this update:     Wed 28 Oct 2026 01:31:03 +0000
Manifest next update:     Fri 30 Oct 2026 01:31:03 +0000
Files and hashes:         1: BoarqsOL5_GqLSv8WD8tN9iLpEI.crl (hash: cmJ8UhmbMBSM7azZj/6qP/LFQx7cPmTajTtoqRO1wg4=)
                          2: E353A304C70211F1B154D6F4CE1D38B0.roa (hash: GrFKRwVT6pDX4fF3BmOTg5dXE3blFQpECnvCE6CToPs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
                          rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2740 (0xab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AR, serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
        Validity
            Not Before: Oct 28 01:31:03 2026 GMT
            Not After : Oct 30 01:31:03 2026 GMT
        Subject: CN=6ae15058-767b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:b9:6a:13:87:74:bb:0e:b9:78:c8:72:36:
                    e3:0c:47:c5:f7:c7:46:ba:91:c7:70:0c:7f:ca:4d:
                    16:eb:16:54:77:e6:6e:4a:95:90:7e:e0:3e:7b:4a:
                    af:aa:8a:b8:b4:10:0c:82:f9:a7:fb:ec:a5:6d:b5:
                    46:b9:f6:50:c1:bf:65:9e:1c:20:81:f2:4e:c6:1e:
                    c2:a9:66:1e:fb:a1:ed:21:e0:c0:08:09:39:fe:72:
                    2a:1a:89:e6:59:e5:51:d7:3b:fb:11:63:e1:4c:59:
                    2f:a1:01:a6:66:4e:da:fa:8c:76:4b:ea:67:0e:16:
                    be:c6:3c:66:b2:36:33:28:aa:3b:63:6a:a2:15:1f:
                    d2:7f:92:56:20:ab:41:ee:f6:73:d3:c1:54:e0:5e:
                    08:f5:cf:44:56:6a:cc:af:3d:7a:71:c2:07:77:02:
                    9a:6f:1d:16:5c:09:a3:01:01:1c:09:96:6d:6f:94:
                    40:ba:2c:f0:e5:cd:48:f0:ad:de:dc:cb:52:53:01:
                    02:b0:48:ec:58:11:3c:c8:8c:ff:bd:44:8c:27:68:
                    08:71:25:01:dd:e3:e3:d6:84:a0:e5:4d:84:0b:9a:
                    ea:f7:0f:cf:17:67:76:24:4d:3b:9b:fa:f5:f0:36:
                    72:73:77:c7:a2:87:18:a7:6a:15:cf:dc:72:d7:56:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DC:28:8F:1D:FE:5A:F2:AF:DD:B7:4E:B3:C6:C5:91:22:04:5F:D1
            X509v3 Authority Key Identifier:
                keyid:06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3b:7b:15:c1:89:34:dd:f0:e0:59:c8:ab:be:1f:57:08:61:
         e5:0c:9f:86:c8:e1:48:de:26:bc:a8:04:c1:71:fe:89:ab:56:
         ae:2a:ff:a9:64:07:e0:94:37:66:49:f0:fc:68:6c:0a:73:64:
         05:c7:46:50:6f:10:08:ac:a6:e3:bd:b1:85:75:f5:68:38:29:
         ec:46:2e:9e:8d:f2:cd:30:5e:75:53:9a:1f:42:b8:84:56:76:
         aa:cd:08:d5:4e:cf:41:bc:d2:1b:a3:fd:88:e3:6b:f5:a7:57:
         fe:db:24:12:25:63:f2:87:85:44:22:eb:16:66:26:f2:d4:12:
         85:e3:06:40:03:d1:f6:ca:57:8b:d5:8c:78:c8:04:4e:24:e2:
         87:e4:63:1f:88:8b:d0:1b:a5:7f:8c:96:c0:72:1e:bb:a8:cb:
         b1:ae:27:f9:25:76:57:86:b9:68:0e:d6:8d:e1:ae:07:54:9d:
         e1:ab:f0:a2:01:7b:ab:b7:22:e0:28:41:31:47:3b:90:d3:f9:
         fb:39:fd:e5:40:c3:71:38:7e:8d:22:83:fc:72:c2:df:33:61:
         b6:21:0f:10:5c:fd:c5:a9:31:e8:e8:61:88:fa:3f:65:3d:3c:
         82:0e:17:dc:3b:62:44:2c:f0:6e:89:a4:82:ea:95:3f:d2:a7:
         9e:af:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:32:30 2026 by rpki-client