Error: rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
File:                     mANBymMoP9xkLng8RVg-pGRCMxs.mft (raw, json)
Hash identifier:          n9XfWGm8sOdAHoYDHTGE3saVoRnRy+u9ZkGvQkWCAHA=
Subject key identifier:   02:E9:D0:D2:C1:1C:A2:50:BA:FE:98:B4:04:33:D3:70:75:AC:65:C1
Authority key identifier: 98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B
Certificate issuer:       /CN=F36852F0AR/serialNumber=980341CA63283FDC642E783C45583EA46442331B
Certificate serial:       019C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
Manifest number:          0199
Signing time:             Wed 30 Sep 2026 05:08:28 +0000
Manifest this update:     Wed 30 Sep 2026 05:08:27 +0000
Manifest next update:     Fri 02 Oct 2026 05:08:27 +0000
Files and hashes:         1: mANBymMoP9xkLng8RVg-pGRCMxs.crl (hash: eMH/vYUYFbggrVCKREj4daB/ySLos8qlWRQx4w+GJO0=)
                          2: FD63E742542D11F1B1186BC0CE1D38B0.roa (hash: fxenuwc8NyJlxjY3DT8FzVGfGv8t70BydAqVxj3Y6hI=)
                          3: 6D2177B4832511F0892AAFC7DAE4EC9C.roa (hash: aHAZN2QhTCRQrqiHV0Jl7+gEXu4WrL625sFACBWD1qA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                          rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36852F0AR, serialNumber=980341CA63283FDC642E783C45583EA46442331B
        Validity
            Not Before: Sep 30 05:08:27 2026 GMT
            Not After : Oct  2 05:08:27 2026 GMT
        Subject: CN=6abc994c-e2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:eb:7a:00:3f:26:0b:e3:ba:93:f4:00:ca:
                    0d:78:51:15:26:e7:a8:c0:15:ee:34:10:49:b5:87:
                    30:0c:0b:bd:29:10:ef:f4:e9:8b:bb:0a:3b:cb:22:
                    67:20:37:04:82:66:2f:b3:80:7a:f0:c8:a3:71:55:
                    f9:36:8e:fe:0e:6b:b0:5f:27:97:fc:68:0d:3a:bd:
                    17:b7:04:b3:2a:55:fc:fb:a6:d5:6e:f2:59:9d:73:
                    07:5e:7d:55:26:b4:64:e8:83:bc:6e:9b:39:08:24:
                    fa:75:9c:d1:ee:2c:b1:c0:de:8b:be:73:bc:57:36:
                    21:f0:4b:c7:e9:15:38:59:11:f5:18:e0:0c:8e:43:
                    ab:5b:96:fd:03:d5:f0:5e:17:2d:94:e1:aa:c3:15:
                    22:9d:26:dd:5b:8c:fc:d1:71:79:17:bc:33:b4:e7:
                    17:87:32:6d:3b:46:a0:52:23:51:f7:87:8a:bb:8b:
                    9c:e6:16:85:83:55:dd:4d:1e:8a:73:60:78:79:75:
                    01:4b:7a:4e:5d:7d:fb:d4:31:b5:61:a7:93:56:4b:
                    df:04:79:a1:43:69:dc:fd:05:c0:2f:6f:d4:20:50:
                    b8:3f:a1:76:8f:64:f4:dd:23:f8:64:a0:5a:22:1e:
                    c2:3c:e6:f8:2d:5e:4e:ca:21:52:d4:84:99:42:3f:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E9:D0:D2:C1:1C:A2:50:BA:FE:98:B4:04:33:D3:70:75:AC:65:C1
            X509v3 Authority Key Identifier:
                keyid:98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:23:62:a2:5e:91:81:05:ba:3c:c1:82:87:98:97:9e:d9:75:
         bb:e0:b5:80:f1:af:37:9f:6a:1f:ad:3e:63:30:77:3b:cb:6b:
         78:75:ed:d3:93:b3:20:e1:1c:6a:97:dc:af:91:c9:97:f4:97:
         88:f5:81:71:0b:66:b6:5c:80:dd:3f:10:1a:03:58:40:9e:4c:
         c9:8a:76:53:db:bb:60:f3:99:18:a6:09:5d:06:b4:40:f8:e6:
         fc:28:a2:04:96:53:c6:bc:46:25:19:1d:93:7e:f4:6c:61:0f:
         75:c6:94:23:a3:ad:cb:7a:ae:94:e9:68:14:23:eb:bd:39:68:
         8b:b2:67:73:43:2d:d3:fb:1b:23:49:1b:6a:25:22:fb:ee:58:
         c1:ea:26:97:37:8c:3f:06:21:cb:56:d6:c6:38:0b:e6:04:a0:
         f4:d2:6f:07:77:59:fb:7c:b0:82:a6:7b:8d:30:4a:82:28:21:
         cb:90:c5:d5:ef:f3:81:f0:9c:31:74:41:ce:3e:d6:2a:eb:43:
         aa:f0:84:51:13:17:74:be:87:a6:02:38:9e:08:b5:c9:08:37:
         30:d0:63:8d:19:8e:13:75:31:2a:6e:21:b8:05:df:9a:e3:2f:
         4d:f0:8b:91:2f:04:56:72:ba:05:38:63:fc:fa:dc:60:20:b3:
         ec:dc:be:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:25:02 2026 by rpki-client