Error: rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
File:                     VnyvmRgrnidPuabWkIh4qwHDQoE.mft (raw, json)
Hash identifier:          nIAWRJotnXOZJsBgEUP8hwGILgcMK+NFUDZRNuEgPmI=
Subject key identifier:   B8:25:7D:63:AF:B3:C5:1D:01:3B:C5:53:21:EE:26:E5:4E:6D:D5:4F
Authority key identifier: 56:7C:AF:99:18:2B:9E:27:4F:B9:A6:D6:90:88:78:AB:01:C3:42:81
Certificate issuer:       /CN=F367EEA2AR/serialNumber=567CAF99182B9E274FB9A6D6908878AB01C34281
Certificate serial:       04C3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
Manifest number:          04C0
Signing time:             Mon 26 Oct 2026 03:36:10 +0000
Manifest this update:     Mon 26 Oct 2026 03:36:09 +0000
Manifest next update:     Wed 28 Oct 2026 03:36:09 +0000
Files and hashes:         1: VnyvmRgrnidPuabWkIh4qwHDQoE.crl (hash: 0+yk9bH5DOOd+Jy0ptVCu8YEHJAQccwAPYz44uDtbYc=)
                          2: 3FB5FE122F6711EE90A2841B4AD9E6FC.roa (hash: WJqH0lra+XjbqtJEVmP0k9XRwahFYNZjcO/TJSOHaQA=)
                          3: C069B486B24311EEB2664F99775412E6.roa (hash: NeIq4SLTxB0EhIQzCliNvAbug3avKsYrABorphJD/7A=)
                          4: E71E5D4C2EB411EEA206B6794AD9E6FC.roa (hash: hbtcT6eA8KL9XUcRwzBfgyp8AVJuRXtNG7MjkLclPW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
                          rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1219 (0x4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367EEA2AR, serialNumber=567CAF99182B9E274FB9A6D6908878AB01C34281
        Validity
            Not Before: Oct 26 03:36:09 2026 GMT
            Not After : Oct 28 03:36:09 2026 GMT
        Subject: CN=6adecaaa-0ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:d0:76:db:9e:3a:d3:0f:d7:b8:6f:e4:d3:
                    b5:bc:f1:2a:95:37:46:c9:a0:a1:39:b8:6a:4b:a7:
                    98:ba:47:89:4c:c8:dd:29:43:79:19:5b:8e:9d:bd:
                    4a:48:52:16:8f:80:ee:94:ac:12:02:50:57:f4:fb:
                    e9:f6:12:b1:21:31:4f:2e:25:d1:64:77:68:0a:e8:
                    4e:e1:05:9b:ff:d0:4d:a7:30:71:f6:b8:36:c0:fe:
                    7b:7f:63:6f:a6:7d:32:75:f8:0b:6b:92:47:48:8c:
                    b6:07:c7:70:06:c8:d4:93:92:95:b3:26:ab:ce:bb:
                    83:8b:f6:59:48:fb:18:eb:65:29:bc:22:aa:5e:de:
                    40:c2:89:a0:44:ce:25:f4:e9:19:6f:f3:b4:96:9b:
                    8e:ce:f4:0d:45:89:2e:e5:1c:1b:03:49:60:62:47:
                    63:c7:9c:64:46:51:17:65:a2:a6:a4:27:b7:e0:00:
                    61:2f:6e:4e:ba:74:08:0e:d8:6e:a4:59:ba:c9:81:
                    21:2e:4f:b9:6b:71:36:a3:17:a7:e1:c9:33:16:59:
                    6a:ca:22:4f:e4:1b:34:d9:a7:cd:95:15:59:9a:da:
                    e0:fa:18:e8:c6:f9:bc:3c:58:66:24:94:bd:69:38:
                    96:86:6a:b1:0f:07:a8:19:88:9a:ec:a7:60:a2:86:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:7D:63:AF:B3:C5:1D:01:3B:C5:53:21:EE:26:E5:4E:6D:D5:4F
            X509v3 Authority Key Identifier:
                keyid:56:7C:AF:99:18:2B:9E:27:4F:B9:A6:D6:90:88:78:AB:01:C3:42:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:62:69:19:89:64:7e:48:73:a8:70:69:48:32:e4:2f:12:f3:
         bd:33:b1:be:4a:2b:95:36:c1:24:03:fd:58:26:73:5c:d6:be:
         bb:d0:06:2a:29:99:a1:5c:d6:94:73:9e:2b:17:a2:33:58:b8:
         d0:69:79:b0:9e:65:58:24:6a:5d:bc:13:02:bd:d9:53:f0:bb:
         7f:95:67:b2:7a:14:d9:29:4b:dd:5b:ce:8d:2d:7f:2f:ef:52:
         eb:7c:cf:da:f0:76:5e:8b:97:d8:ee:c9:29:e0:2d:77:94:e0:
         8e:b4:0c:4d:72:06:57:48:fc:80:cd:88:e4:fb:61:3e:7b:68:
         6e:7d:87:07:13:78:98:77:89:49:17:04:1c:7f:4d:52:07:1b:
         0b:9d:ed:68:98:30:d1:ea:3e:4c:13:c2:d0:46:01:20:4a:7e:
         f6:93:e9:02:8c:94:97:b2:d4:de:45:a0:84:ef:e1:fb:a4:71:
         40:30:89:42:ae:9a:bd:df:f7:2e:2c:e9:1f:06:91:3c:be:fe:
         80:8b:f6:f7:24:fd:29:f0:a2:22:e1:1c:1d:44:7d:1c:60:6c:
         24:3e:d4:d9:82:2b:92:ef:1d:94:8a:d3:2b:84:c6:bb:20:c9:
         db:b7:1d:f3:72:c2:13:d1:50:3c:09:fc:96:79:75:81:cd:04:
         ec:31:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:08:12 2026 by rpki-client