Error: rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File:                     ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier:          VbQrmmZ6eZQ86Wjgm14sN3TTGWBkxAuHsr5SDn/o3gc=
Subject key identifier:   D6:06:78:58:CD:D1:4A:D3:E9:38:27:97:4C:95:99:68:08:79:38:68
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer:       /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial:       0FB5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number:          0FA7
Signing time:             Fri 18 Sep 2026 01:00:23 +0000
Manifest this update:     Fri 18 Sep 2026 01:00:22 +0000
Manifest next update:     Sun 20 Sep 2026 01:00:22 +0000
Files and hashes:         1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: IRHiYKloAJA7Fxsvwr00agcSaEoo1lv3UT2hPvPGBeo=)
                          2: 12A260B4849111F195A5D2BBCE1D38B0.roa (hash: Zb+WC9W9F2kd9qzK90J/GHlkEMoKxwiZKn5a50rvWiY=)
                          3: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
                          4: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
                          5: 3E04DE108B7811F18705BAE8CE1D38B0.roa (hash: C1lsyEuFMUa4JVGq3Zk1ehqqctSAV2zoFX32Ak+7/iw=)
                          6: 87C7F2EE8B7811F18687D0E8CE1D38B0.roa (hash: VHPttPpUSEj/IMkJOgNZXqpouSQeuk9KI7TWIgiMsNo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4021 (0xfb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
        Validity
            Not Before: Sep 18 01:00:22 2026 GMT
            Not After : Sep 20 01:00:22 2026 GMT
        Subject: CN=6aac8d26-31c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5e:22:ac:4e:a6:ef:bb:a5:c0:c9:ab:30:ff:
                    c9:5a:d0:e0:4b:24:d8:09:38:57:ad:b9:87:33:a7:
                    42:75:88:3c:70:d3:d4:6d:f6:61:b1:a4:4b:b1:72:
                    3a:15:c3:01:cf:53:83:0b:ec:75:a7:70:8b:03:d9:
                    60:4c:f9:9a:95:f2:a8:25:78:dd:54:dc:cc:44:c9:
                    b6:e8:47:43:84:fa:31:57:1d:bb:84:48:c3:c6:d0:
                    2f:4e:57:99:f8:bc:c5:ca:33:f7:3b:e6:81:63:4c:
                    fd:d9:49:12:a3:3b:37:36:f5:98:e3:c5:93:eb:ff:
                    42:55:fa:16:8f:47:73:3e:93:7f:63:6f:73:24:bd:
                    e2:44:0f:42:29:21:dd:bd:5d:4a:85:dc:29:30:8c:
                    49:85:2a:a3:1c:ee:77:1e:c2:42:85:43:9c:a7:86:
                    6d:61:5d:78:15:f1:9c:df:21:6f:f6:11:10:72:d4:
                    39:70:1e:26:51:2e:c0:87:36:2a:f2:1f:e3:27:d0:
                    cb:6b:8f:82:6e:e2:e9:19:1d:04:01:bf:29:78:76:
                    91:98:c6:2f:cc:92:d9:16:c3:28:6e:8c:bd:04:8e:
                    c4:40:39:27:98:1b:76:a0:98:31:f0:e5:67:86:0c:
                    eb:b5:d7:84:e9:df:c3:0d:71:db:08:03:f2:56:1d:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:78:58:CD:D1:4A:D3:E9:38:27:97:4C:95:99:68:08:79:38:68
            X509v3 Authority Key Identifier:
                keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:5b:4e:67:2f:bd:86:5f:6e:e7:33:0b:a5:f3:08:9f:d3:
         40:b6:f4:0c:cc:05:5d:1d:a5:8d:75:f6:67:39:9d:1d:db:15:
         31:ae:57:f9:df:30:ef:ab:01:01:9d:01:d3:f7:94:e1:25:c9:
         b9:6e:de:57:72:23:b2:0d:bc:8f:3b:51:8f:6a:8c:f1:d6:33:
         e1:ae:51:f3:b1:80:7b:64:f9:ae:1f:71:7b:6f:dd:d8:4e:ce:
         5f:ac:9d:6c:d0:51:67:b7:93:8b:ea:03:39:35:77:f7:e4:5f:
         2b:52:e3:c6:d4:f5:1b:f6:9f:d7:1f:e4:67:1d:94:57:78:c2:
         ef:e3:d9:02:98:2e:ad:50:4d:2c:73:b5:4c:9e:16:35:34:45:
         6d:bb:95:ab:60:21:e7:39:6b:52:1d:27:89:b8:ff:4d:d2:63:
         bb:b6:7d:04:8b:cd:b5:cd:14:c2:2c:f2:23:be:1e:cc:ef:7f:
         93:a3:10:4b:a3:36:09:a5:42:24:e7:a6:19:c4:5b:52:77:bb:
         5c:2a:ea:cb:c7:95:44:11:5f:e5:0a:c6:92:98:32:77:da:86:
         58:20:f4:37:5c:c8:6f:a4:b1:57:c9:85:21:8f:6c:d5:c3:41:
         77:57:d8:ff:a4:3a:04:ba:28:61:ac:a9:ab:14:f4:96:9a:db:
         4b:90:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:14:02 2026 by rpki-client