Error: rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
File:                     tKCUA2WAIUx9QccbjIZXpO4vQHI.mft (raw, json)
Hash identifier:          9e8j1xkbkZr71RUl9YTj3hlCVH1SfmfeQOkRMU3L7sc=
Subject key identifier:   F5:CE:E4:FF:B3:36:A4:3A:40:43:06:0B:3D:F7:5D:FC:E6:92:32:86
Authority key identifier: B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
Certificate issuer:       /CN=F367678FAR/serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Certificate serial:       032A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
Manifest number:          0327
Signing time:             Wed 28 Oct 2026 04:24:41 +0000
Manifest this update:     Wed 28 Oct 2026 04:24:41 +0000
Manifest next update:     Fri 30 Oct 2026 04:24:41 +0000
Files and hashes:         1: tKCUA2WAIUx9QccbjIZXpO4vQHI.crl (hash: y8iLWpZEN4YHS/wFqAy4KKMe0NsamIIJf5YBqFguGW8=)
                          2: D4BB84D2FB4D11F0813767BCDAE4EC9C.roa (hash: 6orY5HDTrqcJDGgLrnlopPbVVmnOGIchGbKlp8nWwkA=)
                          3: E4F48340FB5611F0A42CE5F2DAE4EC9C.roa (hash: c43xolzw0tHDkUtxlVN9yifXJdNfipBBPwirCFEY2fE=)
                          4: A9F8F834FB5611F0A8B511EFDAE4EC9C.roa (hash: clMvWxZhI/yPXjk9yvhw+m8VCG7iFUmKLeS0+j0MYWg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
                          rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAR, serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
        Validity
            Not Before: Oct 28 04:24:41 2026 GMT
            Not After : Oct 30 04:24:41 2026 GMT
        Subject: CN=6ae17909-605d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:a5:c9:00:79:c3:10:4c:5f:aa:0b:77:26:
                    5d:cd:ff:15:2d:4f:60:eb:89:5a:d1:73:40:de:70:
                    a4:59:39:61:d5:f6:96:9f:1c:f3:2a:3b:a6:eb:95:
                    57:1f:98:3f:e7:fc:fc:dc:d4:dd:52:8a:0b:b8:22:
                    f8:32:3c:8b:97:7e:ab:c4:95:84:c0:c9:8c:58:f0:
                    ef:8c:40:ac:1c:ce:50:22:07:22:ba:3c:c1:79:50:
                    1b:12:6c:bd:12:0a:bd:ca:ae:ae:55:36:14:f3:d5:
                    53:d9:5d:ed:ee:f7:0f:73:85:64:5a:d6:d7:b4:10:
                    bf:33:c9:ed:7e:6b:fe:2b:9c:de:f2:18:76:b6:a0:
                    6e:04:c0:fb:a9:3e:2f:f7:14:39:5a:18:f7:e4:06:
                    14:da:d5:18:55:a5:f5:e2:52:1f:a2:6c:3a:95:86:
                    fb:01:c8:bc:49:1d:f7:b8:f9:d9:31:73:06:9f:cb:
                    c8:79:53:cf:18:a7:95:12:f2:b8:fc:2b:83:e9:94:
                    80:02:75:58:a9:40:d2:35:f7:9d:ae:0f:60:60:d3:
                    79:7c:49:ca:4e:0a:b1:53:5e:e3:36:43:cf:d5:09:
                    16:03:4e:de:9b:76:f7:8c:1f:4b:06:29:12:e5:14:
                    7b:fc:de:e9:7b:8b:6d:a3:89:0a:18:14:3f:a3:8f:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CE:E4:FF:B3:36:A4:3A:40:43:06:0B:3D:F7:5D:FC:E6:92:32:86
            X509v3 Authority Key Identifier:
                keyid:B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c4:f1:eb:a8:2f:a0:ae:b2:1f:98:ff:b5:db:bd:e5:aa:88:
         cd:f5:5e:96:88:6e:56:0a:b7:b9:38:54:ea:38:9b:35:bc:e4:
         a4:b2:43:6e:bd:e8:4d:24:02:8e:85:24:bf:63:50:7c:91:41:
         09:13:53:d8:9b:bc:91:5f:c8:05:38:c5:eb:c4:9d:a8:e4:fa:
         e3:01:ae:3b:6a:90:42:9f:b0:4b:9c:b4:e3:8b:38:71:8f:83:
         18:26:16:07:33:f3:e5:6e:33:59:7f:d3:be:74:4e:1d:5a:a6:
         0a:73:77:29:62:f3:05:4b:43:bd:34:04:3a:13:e9:66:b7:2a:
         66:f9:a3:03:e6:57:b4:90:33:19:8a:9c:69:50:84:19:cd:23:
         73:c1:5b:1d:20:59:0e:df:38:b4:29:b7:85:d3:9d:eb:81:c3:
         52:f1:ae:39:14:1d:1d:71:d1:01:00:5d:bb:7e:79:bb:96:02:
         1d:9c:25:d9:d2:f3:95:34:e3:33:5a:02:74:1e:61:48:eb:ee:
         ba:ee:32:2d:f6:d3:58:74:a5:21:2b:20:3e:1a:a4:76:9b:4d:
         30:e2:83:6d:d2:f3:a5:df:e7:b0:aa:ad:f7:9e:72:ef:e3:d1:
         cb:ad:76:64:4a:60:fe:17:dd:85:ce:90:b4:2d:8e:dc:61:d2:
         d4:8f:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:42:37 2026 by rpki-client