Error: rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          WKywpenQ/t1Qhf/TXT4eYW+SkF5Dd0E6Vl5xcHAxztM=
Subject key identifier:   48:23:20:F8:BA:6D:D6:2B:CB:8F:D1:18:97:56:F1:13:66:3B:B0:B5
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       038F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          038E
Signing time:             Thu 17 Sep 2026 04:07:29 +0000
Manifest this update:     Thu 17 Sep 2026 04:07:29 +0000
Manifest next update:     Sat 19 Sep 2026 04:07:29 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: 6b5C47v3BQZzswG8XOVfiQlS+BVLmOgMWvzgNTe4r4w=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: Sep 17 04:07:29 2026 GMT
            Not After : Sep 19 04:07:29 2026 GMT
        Subject: CN=6aab6781-fdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:e5:9e:e0:04:ff:9c:6e:91:10:52:57:06:
                    2d:ad:0a:0d:bd:44:c0:db:ec:a4:a0:27:29:37:57:
                    52:f4:1e:45:2f:78:cc:6b:05:88:3b:a9:22:98:20:
                    56:81:e5:0a:2f:ae:b7:b5:85:1a:ea:c0:81:fd:5c:
                    f3:9b:9f:1b:cf:6b:71:2f:34:f3:88:65:82:0d:b3:
                    5f:f1:68:64:07:a8:e9:27:58:f4:d1:91:8e:0c:86:
                    61:26:89:61:66:4f:f5:60:64:dd:77:94:d4:8c:9f:
                    a0:9c:ae:89:44:37:65:d2:5b:d0:2f:34:89:7d:f1:
                    0a:33:29:25:59:2e:74:de:cd:ab:5f:e2:13:64:91:
                    fb:9f:b3:50:0d:63:78:b3:41:32:94:b5:47:fa:23:
                    0b:d4:a9:f3:8e:83:59:31:ea:8e:52:89:ba:2f:3f:
                    7f:77:e0:ba:53:88:9a:a4:bc:35:99:54:81:55:54:
                    90:3f:2e:cc:4c:c2:96:e8:d3:47:5c:eb:38:79:14:
                    88:2c:94:22:9c:07:58:51:29:79:60:b0:54:51:66:
                    b0:7a:ff:d3:49:a8:d2:6a:f8:5d:48:fe:4e:70:2a:
                    c2:dc:31:bf:ab:32:8d:33:0c:54:f2:3c:52:e0:57:
                    a9:5a:7d:3d:e2:19:0a:f2:7a:8f:59:e5:27:f6:3c:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:23:20:F8:BA:6D:D6:2B:CB:8F:D1:18:97:56:F1:13:66:3B:B0:B5
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:64:58:29:21:ba:26:b9:27:4f:6b:57:62:1c:ac:26:ef:47:
         ef:03:0b:67:6f:97:9f:4a:68:e8:53:bf:75:fe:87:f8:15:83:
         94:d5:03:0c:31:12:cd:5b:5d:29:9f:26:e1:c0:6a:13:bc:8b:
         86:69:1c:3a:48:61:3b:2d:50:01:d2:a3:88:67:89:93:87:10:
         4c:09:69:bd:80:45:31:cf:65:ef:5e:53:ce:13:8f:39:3a:ee:
         13:e8:64:86:50:ea:da:53:8c:f5:01:c4:1e:11:c9:11:4d:c7:
         52:51:d8:f2:0f:ba:1e:3c:27:4c:d5:d0:73:e5:2a:1e:80:e3:
         c0:42:d1:2b:54:75:36:e4:a8:bd:3a:9e:72:d8:36:08:59:b4:
         d6:13:3b:45:6c:6e:07:f1:21:45:3b:c4:27:d4:de:09:6c:07:
         56:5f:5d:b5:44:c5:f4:58:0a:ab:39:87:9e:e1:54:07:57:0d:
         01:59:13:35:ec:1b:a6:f7:de:63:c9:a1:32:c6:00:8f:b0:98:
         cc:15:f6:6c:43:e2:b5:8c:38:1a:58:22:5e:c3:42:1b:af:c3:
         c1:40:a4:09:90:89:13:b3:86:8b:9f:8a:62:34:3a:f5:26:57:
         62:a6:70:6f:f9:98:f6:a6:9a:34:ae:b2:28:26:b5:04:75:76:
         2f:52:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:41:56 2026 by rpki-client