Error: rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
File:                     rvs0nSNMbGbEJJJb7hApnarwubw.mft (raw, json)
Hash identifier:          Dn8c3cHnexsOOomm9NsvlsT5UmIT4R4J6dgmpolXT34=
Subject key identifier:   7A:06:F8:E2:91:E1:0A:45:50:83:FC:93:19:BE:4C:6F:48:EE:74:AA
Authority key identifier: AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC
Certificate issuer:       /CN=F368B07FAR/serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
Certificate serial:       0D13
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
Manifest number:          0D0A
Signing time:             Sat 19 Sep 2026 05:27:24 +0000
Manifest this update:     Sat 19 Sep 2026 05:27:23 +0000
Manifest next update:     Mon 21 Sep 2026 05:27:23 +0000
Files and hashes:         1: rvs0nSNMbGbEJJJb7hApnarwubw.crl (hash: zkQLpTkARoihtB/ta8pJrHUhlyynDfCZ0DFnQlfWEZI=)
                          2: 7D59CC5CB2B011F09C79E0CBDAE4EC9C.roa (hash: ciMAnSRFb1RAh00SyY2+AZRm5zIar3kt01Ckcd7m8rU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
                          rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3347 (0xd13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B07FAR, serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
        Validity
            Not Before: Sep 19 05:27:23 2026 GMT
            Not After : Sep 21 05:27:23 2026 GMT
        Subject: CN=6aae1d3c-3b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:a7:ad:87:1f:6a:d9:f6:c5:af:40:e7:15:
                    12:72:f4:59:b9:8d:b9:d5:f2:14:c5:17:ad:08:92:
                    cc:e3:e7:4c:3f:b8:0e:f8:8e:7a:00:27:aa:7e:b3:
                    bc:f7:e7:f9:92:1d:2e:2e:14:54:5b:29:a2:e3:db:
                    61:31:88:9e:30:70:0d:d8:aa:7f:bb:67:c1:72:cb:
                    e7:96:8a:22:d7:d2:c9:51:3d:18:48:53:1b:d7:d4:
                    a3:31:1e:a8:77:e9:4d:7e:21:2e:cd:c1:19:3b:a6:
                    31:cc:fd:a2:78:2b:f9:cf:6a:80:a3:d0:d3:b3:c9:
                    eb:2a:12:38:9c:2c:05:83:b0:bc:74:93:58:e5:50:
                    93:ad:4c:ae:95:d1:93:7b:05:37:bb:f1:96:64:2b:
                    80:1a:e7:64:c7:28:e1:4a:c1:90:8c:e7:1d:0f:ad:
                    54:b6:f1:17:b2:c6:af:35:6d:05:57:b2:5a:81:26:
                    99:6e:d2:cf:9c:57:d4:ce:f1:3b:53:4e:f9:f9:6b:
                    34:9e:02:3a:1c:13:a5:57:6b:60:82:3f:24:69:0f:
                    70:73:46:7d:b4:74:40:2e:f9:6d:4a:7c:71:1d:c8:
                    a1:2f:7c:35:ea:92:91:8e:44:4e:d3:cb:cc:f0:08:
                    7e:2d:35:91:81:3e:32:7e:b7:88:4e:2d:56:c8:ef:
                    32:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:06:F8:E2:91:E1:0A:45:50:83:FC:93:19:BE:4C:6F:48:EE:74:AA
            X509v3 Authority Key Identifier:
                keyid:AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5c:98:2c:f7:3c:75:38:c5:55:e7:b6:4d:1d:46:1f:5e:53:
         da:26:96:56:10:55:5f:16:11:5f:78:8f:a0:c4:96:81:18:2e:
         8c:4f:5c:5c:6e:12:6f:fe:a9:eb:a1:a8:7a:c6:69:d4:50:a5:
         6b:d5:10:b7:c3:57:94:18:10:45:c3:11:bd:03:22:95:9e:ff:
         17:34:97:58:39:51:c1:4f:fc:37:44:5a:3e:25:b7:af:3e:05:
         3e:4f:6e:fc:2d:9d:65:5e:72:15:8b:ae:66:f9:20:ff:d9:20:
         da:4b:56:96:31:a5:02:5a:9b:b3:5b:66:8b:d8:4b:4a:13:73:
         38:d5:4c:24:90:b2:dc:fe:9b:40:70:a3:a1:9e:ca:ab:95:2c:
         00:c9:e9:bb:16:da:0a:e3:68:e8:39:31:8a:5d:0f:1b:c8:a0:
         28:c2:94:2e:81:58:a1:94:18:69:b0:e3:e0:49:65:02:4b:36:
         f0:ba:24:a5:2c:ac:f4:46:21:04:7a:be:81:60:f9:8f:2c:8b:
         07:4d:bb:84:3d:2b:e8:aa:7a:89:a9:d6:c0:76:77:02:10:04:
         ef:68:0e:a7:be:23:d6:cc:3d:5f:af:36:44:ed:e5:93:30:1d:
         b6:c6:81:28:ac:c5:60:6b:73:ba:ed:2b:2b:35:3a:39:1d:26:
         41:bc:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 15:25:10 2026 by rpki-client