Error: rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
File:                     bvB88gdsxaYJayVyrgiV_Wc_RxI.mft (raw, json)
Hash identifier:          pjcxpVOsX4QXKyjkfrzFdi4GghzCz3Sg8f+5B/w4JAw=
Subject key identifier:   62:6A:58:52:70:6E:98:82:BF:6A:8D:DC:6D:C2:62:6C:C6:43:A1:73
Authority key identifier: 6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
Certificate issuer:       /CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Certificate serial:       0A80
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
Manifest number:          0A7A
Signing time:             Mon 12 Oct 2026 01:33:15 +0000
Manifest this update:     Mon 12 Oct 2026 01:33:14 +0000
Manifest next update:     Wed 14 Oct 2026 01:33:14 +0000
Files and hashes:         1: bvB88gdsxaYJayVyrgiV_Wc_RxI.crl (hash: olhImCewZLmTlh6jfN0aO0m4aHnRWD28r1MAmnKDUbg=)
                          2: FD8F3AE8BC2511EEA262C8AF775412E6.roa (hash: oLYmgki9mz5lwTsVGngG2jpWOy0zZNH+Gds3faUhjqY=)
                          3: 10BE688A8A5711F18C506009CF1D38B0.roa (hash: lC/r5XRT9wiwQaTE7675t9IEuG/3v0/7lZJEiCHl0Jw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
                          rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2688 (0xa80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037AR, serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
        Validity
            Not Before: Oct 12 01:33:14 2026 GMT
            Not After : Oct 14 01:33:14 2026 GMT
        Subject: CN=6acc38db-2de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:f6:08:76:8f:93:2a:98:b7:89:7b:9e:de:
                    dd:9d:57:a7:64:38:cd:bd:97:bd:f9:5d:28:ce:f4:
                    39:32:a1:a4:f9:75:a6:08:10:d4:eb:3b:17:7e:91:
                    57:9e:a7:fa:cc:95:53:66:9b:4a:a2:11:99:09:aa:
                    30:5e:be:8a:07:81:e7:c4:43:7e:51:41:9b:c4:f3:
                    79:c2:0b:e8:d7:97:5c:af:23:9e:34:22:27:ee:f5:
                    7b:0c:0f:46:9e:45:d1:e4:be:2a:8f:44:3f:8e:12:
                    42:52:34:ff:f1:cf:18:29:c6:7f:2e:5b:70:43:8b:
                    9b:29:fc:cf:a8:cd:e4:00:49:16:b9:21:1a:e8:c0:
                    2f:c2:ae:a7:8c:4d:20:ca:4e:07:34:ae:5e:77:b4:
                    20:64:02:2f:e6:69:f2:18:35:65:eb:a2:3d:60:1b:
                    7c:14:6e:d0:bc:de:fa:fa:f2:07:50:e7:8d:c3:64:
                    fa:2a:dc:c1:c0:2d:ee:9a:a6:2e:2d:91:25:31:6e:
                    7d:a8:8e:24:40:92:7f:44:75:60:ab:d5:04:d5:bd:
                    7c:49:82:29:0f:32:12:0f:a9:a9:c9:63:60:a0:b2:
                    b8:55:04:5c:77:61:71:0d:27:9e:9c:34:aa:4f:06:
                    6c:f2:e2:24:2a:80:42:aa:f0:fa:f5:12:a1:ad:a2:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6A:58:52:70:6E:98:82:BF:6A:8D:DC:6D:C2:62:6C:C6:43:A1:73
            X509v3 Authority Key Identifier:
                keyid:6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:36:50:41:ce:d5:2b:dc:cb:c1:f1:ab:43:83:a3:cf:8e:37:
         fa:8a:3f:ed:6c:0e:49:b0:c0:c8:81:bb:b2:70:a4:c6:7d:87:
         83:bf:0b:09:db:fb:05:a7:ce:fd:61:01:02:d7:e9:97:77:ff:
         65:e6:02:71:31:89:50:61:db:61:9d:74:b3:40:7d:c6:aa:03:
         01:4b:1d:4e:4f:bb:17:2c:cb:de:d9:7b:ee:73:d7:da:9e:58:
         43:54:2f:dc:f8:44:ef:d4:08:66:65:9c:52:c4:aa:ff:e2:3b:
         2b:23:b9:7b:7a:59:6d:2a:06:15:bb:c4:e7:b3:df:77:f5:4f:
         c5:97:1c:27:82:5e:87:41:be:a4:f0:9d:56:15:3c:fd:bb:89:
         e1:e2:45:6f:3d:62:b6:d6:99:2c:e3:3f:68:68:48:18:05:e2:
         01:0d:b2:ce:1f:4b:80:3d:61:a0:e6:a4:3d:42:88:a6:6e:48:
         72:68:fc:7c:cf:7a:c7:97:ea:42:cf:11:7d:95:59:28:30:45:
         b4:e0:ce:45:b2:da:89:46:ed:da:bf:30:ac:da:d7:d8:1a:de:
         9c:87:54:a1:dd:76:7f:f7:88:5d:f3:5f:2e:f0:9b:16:e5:07:
         46:4e:48:6e:1b:ca:12:d4:67:07:78:27:77:46:6d:bd:22:ea:
         6a:dc:7e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:40:08 2026 by rpki-client