Error: rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File:                     f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier:          9DW4RrTNpnd53mH66sAMJWx6x1FNEGoSZqDbEvhuhT4=
Subject key identifier:   79:74:D3:A5:36:96:11:5E:41:90:B4:85:8F:47:2E:9A:FC:26:5A:09
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       097C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number:          0973
Signing time:             Tue 27 Oct 2026 01:48:03 +0000
Manifest this update:     Tue 27 Oct 2026 01:48:02 +0000
Manifest next update:     Thu 29 Oct 2026 01:48:02 +0000
Files and hashes:         1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: sZhuKy3NLkXm9V0excUlOr8wKOYAZkd18d5isSj2Gug=)
                          2: 99A8625A96FE11F19C5185EDCE1D38B0.roa (hash: ECeVYVnqSVePtrNnv7WRQg4E/vshrUHBa3IjZ0zix/s=)
                          3: 5F3603A4962A11F1933886E0CE1D38B0.roa (hash: KMBACeJyVBJ0puCbfz/1XEtdPxL3K0XtxQ8Urj+oW2Q=)
                          4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
                          5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
                          6: F3C4F07896FE11F1AAB3ACEDCE1D38B0.roa (hash: 2/iMpDmTcl0zOebckPQ0ks803UQyEcERHUqi3OJVhhg=)
                          7: 51F67174962F11F188DB07FDCE1D38B0.roa (hash: C8vjN53fFmtWhX47uFtrZkO/tziLE7NPmO35j+SgWFQ=)
                          8: 5EFC7BDC8A6511F19E0DA0DFCE1D38B0.roa (hash: c6XaX+zU98bORccST4vkvWDGnTdu9fL1YRi4X5XYzmE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2428 (0x97c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: Oct 27 01:48:02 2026 GMT
            Not After : Oct 29 01:48:02 2026 GMT
        Subject: CN=6ae002d3-3928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:04:36:ee:f6:fa:ce:87:c6:58:35:e0:34:
                    90:ed:8b:a9:83:9f:c1:1c:67:f9:95:ab:f4:ea:8a:
                    62:3c:2d:7b:d0:f0:7e:dc:a6:fd:a0:5e:b1:7c:81:
                    29:cb:0b:12:67:f6:ab:b7:c7:ec:36:57:bc:90:38:
                    78:6c:42:0a:d0:33:7d:d2:e5:df:71:d2:af:6d:7e:
                    fb:b5:1c:c2:4b:3f:31:9b:26:40:58:ad:8a:ee:61:
                    da:38:3e:c4:b9:31:79:14:0c:da:68:04:d8:89:39:
                    4a:c9:4f:e2:6a:f3:6a:ea:35:b8:23:5a:3e:57:24:
                    d0:8d:4f:da:f6:d6:87:36:f0:94:d7:9d:b2:d2:86:
                    21:2d:04:7b:8d:7b:9c:65:35:01:7a:73:10:38:0c:
                    9c:73:03:73:5d:dd:8a:a3:0e:2f:b2:f3:28:e1:de:
                    9d:06:16:09:05:7e:62:f7:17:6a:f0:39:3a:e1:54:
                    d1:75:59:80:ae:31:9b:a5:ff:de:df:8c:22:6f:fc:
                    a2:1b:f5:06:11:30:a0:e3:47:88:48:53:b4:2a:a5:
                    30:77:fd:d7:43:b9:5d:f1:6c:64:4d:da:01:27:fd:
                    65:39:03:70:82:9c:bb:61:b8:d0:2f:7d:ba:fa:67:
                    7d:17:c7:80:20:1f:9a:e8:b6:20:17:19:a4:54:3e:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:74:D3:A5:36:96:11:5E:41:90:B4:85:8F:47:2E:9A:FC:26:5A:09
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:5e:80:fb:d4:09:06:d3:e2:79:06:64:29:1e:41:f0:eb:e9:
         32:7a:93:db:da:34:fa:46:ce:cb:e0:93:f9:ce:3f:5b:87:b5:
         13:43:b5:49:d7:3a:25:83:d8:80:9d:6b:87:02:6c:58:6a:a6:
         c3:92:ac:46:a5:07:87:98:ab:8d:9b:ba:2f:b9:d7:5f:10:74:
         91:91:03:2c:4a:4c:34:4e:c1:41:5a:78:15:71:dd:ef:8a:1a:
         f1:7e:ae:0b:e4:d5:c1:ae:67:d2:a6:4f:74:8b:72:6e:c0:b1:
         17:80:86:9d:33:b5:4b:cd:93:a1:83:1c:8c:eb:e1:d7:67:a9:
         1e:17:de:7f:53:24:32:46:69:9a:d5:a2:cd:97:e3:6e:89:23:
         df:0f:10:48:de:32:32:e4:df:49:80:25:25:a6:9e:b3:33:0a:
         1f:a4:dd:07:1e:79:bf:d4:7d:51:37:33:57:e7:73:9b:de:1f:
         37:52:a1:21:65:4d:8c:b0:00:a0:7a:b2:ec:9c:5d:30:21:d9:
         2b:d1:f3:95:60:c1:4d:eb:d3:de:9f:eb:01:d1:a2:73:c4:9f:
         41:5f:88:91:9d:d0:db:de:6a:07:eb:7c:01:98:50:12:a4:fb:
         33:98:ab:45:ba:1d:0e:5d:69:94:ab:a5:24:35:86:a4:42:27:
         d0:78:c9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:36:26 2026 by rpki-client