Error: rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.mft (raw, json)
Hash identifier:          H6qHF0eK7FPdTzdfCPiD9T1nhZ+aOozDV//0agI+cio=
Subject key identifier:   26:4B:3E:C5:CB:38:86:F3:2B:F4:B8:FE:A4:9E:BF:6D:64:B9:7A:DD
Authority key identifier: 8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Certificate issuer:       /CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Certificate serial:       05F6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
Manifest number:          05F3
Signing time:             Wed 26 Aug 2026 02:54:26 +0000
Manifest this update:     Wed 26 Aug 2026 02:54:25 +0000
Manifest next update:     Fri 28 Aug 2026 02:54:25 +0000
Files and hashes:         1: iyncQT61Ar1t3qMGRh4aehCExfY.crl (hash: 1P07ZYe16qxNNXyblpl9mhER0C3NC6fjQiUyIayMyQA=)
                          2: D927C5E0646011F195E8E4BCCE1D38B0.roa (hash: 1oTp9jMogubuZz8gKPeh9PyU8dk/iK14H3bkMhWBgDE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                          rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526 (0x5f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAR, serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Validity
            Not Before: Aug 26 02:54:25 2026 GMT
            Not After : Aug 28 02:54:25 2026 GMT
        Subject: CN=6a8e5562-0b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:8c:d1:7c:b1:57:7a:a2:30:38:70:33:1d:
                    d0:c2:8b:4e:a9:89:d6:29:69:97:ca:db:3e:7a:16:
                    1d:c9:38:69:51:f8:15:50:52:27:23:47:4e:21:69:
                    04:97:b0:65:64:ad:f0:50:1e:7f:65:04:1a:c5:07:
                    c4:df:aa:23:87:6f:5c:90:27:8f:39:58:2f:4b:58:
                    40:aa:ae:be:e6:3e:4d:1b:c0:8d:1b:2c:7a:81:ae:
                    77:15:a0:23:c4:5f:dd:03:b3:bb:61:bf:71:4e:01:
                    5f:34:5c:54:a4:45:e4:c7:f4:1c:7d:26:eb:0c:dd:
                    f2:b0:18:d5:94:7e:77:cc:4f:06:91:3f:e3:3d:97:
                    db:08:16:c4:9f:fc:83:50:57:bc:ff:18:5b:6d:66:
                    0f:c4:b9:aa:a4:be:e6:5f:9b:ec:20:54:9e:84:a2:
                    e3:52:8b:93:f0:e6:d5:27:e7:4b:fe:d0:0b:96:15:
                    07:76:59:c8:47:c7:a1:ac:95:a1:49:b4:f6:02:a0:
                    53:d6:d2:e1:12:09:4a:fb:fa:ff:29:51:09:2c:aa:
                    ae:65:0a:38:6f:ae:ea:4c:f2:6e:82:2f:d4:e1:11:
                    77:cb:cb:5f:7a:54:cb:52:ee:92:57:21:12:2f:e8:
                    46:9c:b3:c3:a9:80:b8:86:dc:34:be:19:54:fa:6a:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4B:3E:C5:CB:38:86:F3:2B:F4:B8:FE:A4:9E:BF:6D:64:B9:7A:DD
            X509v3 Authority Key Identifier:
                keyid:8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:11:55:e0:34:91:9f:c1:4c:6a:9d:5c:49:f9:76:26:94:5b:
         63:6f:32:af:66:f9:1c:8c:86:0c:d8:81:0e:5d:90:d1:61:ab:
         3b:2d:58:85:5b:24:af:3c:6a:7e:93:79:b0:ad:74:cd:16:99:
         1e:72:cb:02:e0:eb:38:a5:ea:4b:00:9c:1f:d4:02:05:24:ff:
         e8:94:ae:f6:8c:8c:a6:6d:b1:d3:54:23:ff:a0:c7:ad:e3:08:
         4c:44:aa:af:da:99:21:26:c8:bd:6c:ed:49:16:d9:bf:f2:27:
         0a:dd:cd:94:0e:4b:89:4c:94:eb:83:1b:2c:9d:74:1b:30:27:
         31:b2:fd:20:4b:50:ac:17:a0:85:b9:66:93:46:6b:f3:b5:3d:
         0b:da:97:fb:ad:4d:36:61:c8:91:f2:c9:a0:c5:57:01:3b:e6:
         f9:27:b2:da:9d:d0:97:11:4e:ac:3b:46:8e:ef:16:6b:02:a8:
         c9:a6:84:23:8a:24:2f:85:e2:16:ec:47:3a:fe:c2:30:bf:e6:
         bf:2b:b7:50:5e:9d:52:59:dd:1f:0a:d8:9a:5b:d5:dc:98:76:
         b3:f3:41:22:bf:41:d0:58:3f:ca:61:4e:86:d8:74:88:3c:71:
         ff:da:2d:f9:00:15:d0:3a:3d:68:fa:ab:e3:a7:1c:cd:29:08:
         4d:68:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:14:20 2026 by rpki-client