Error: rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File:                     5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier:          o+3aGU2/iS/XPCJpKJZ6DiAlQ4NZYM7bcQyeAjMt2DE=
Subject key identifier:   1F:C8:67:62:35:C2:6B:3F:AC:44:35:45:32:97:6A:E6:AE:89:22:4F
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer:       /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial:       0ACF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number:          0ACE
Signing time:             Tue 27 Oct 2026 01:26:22 +0000
Manifest this update:     Tue 27 Oct 2026 01:26:21 +0000
Manifest next update:     Thu 29 Oct 2026 01:26:21 +0000
Files and hashes:         1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: S65HvgbdnCp2joVMo83W4EeHQEsRCG9b0zGRzRG2cxs=)
                          2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                          rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2767 (0xacf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AR, serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
        Validity
            Not Before: Oct 27 01:26:21 2026 GMT
            Not After : Oct 29 01:26:21 2026 GMT
        Subject: CN=6adffdbe-aa52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:82:24:f0:60:f8:f1:65:fb:9a:d3:62:dc:
                    5d:91:92:88:1e:8d:d1:80:fa:30:33:e0:34:2c:9f:
                    5c:74:08:54:88:47:07:91:c8:84:24:22:eb:b6:86:
                    a6:47:fb:43:99:55:c3:fb:d6:3a:35:44:f3:a8:55:
                    38:c7:ef:6c:49:f7:af:e0:1c:6f:cc:d0:6a:62:e5:
                    d9:79:d6:bc:e5:58:19:c1:4a:93:90:31:7f:b5:44:
                    1e:9c:9b:2c:9c:49:97:63:df:54:4f:40:8f:d0:77:
                    f5:f5:13:64:35:c2:7e:11:aa:4c:12:52:57:3e:01:
                    09:22:ba:77:93:02:8b:d9:65:eb:9c:59:e2:6d:8c:
                    b7:a9:31:d4:0e:b0:99:29:7d:f3:ee:af:e6:99:6f:
                    5a:24:68:ee:17:81:91:4c:18:4e:56:82:d4:8f:e0:
                    a0:e5:db:72:8f:ed:7f:4e:60:21:66:bd:5a:0e:f7:
                    9b:65:c4:22:48:21:9a:ef:33:14:5c:5f:54:ce:2a:
                    41:d2:16:81:a9:67:64:5c:10:f2:77:50:7d:10:05:
                    63:7e:69:0e:be:88:ae:a0:92:c4:3f:02:1d:ac:7e:
                    79:44:bd:ac:48:85:96:1f:b6:a7:db:8e:09:50:0c:
                    76:2e:f8:d9:f0:79:73:3b:6a:8c:53:59:e6:82:35:
                    c1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C8:67:62:35:C2:6B:3F:AC:44:35:45:32:97:6A:E6:AE:89:22:4F
            X509v3 Authority Key Identifier:
                keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e5:54:61:f4:e8:d5:8b:c9:3f:90:76:8c:e3:db:76:7b:56:
         22:6c:63:c9:f3:a5:c0:50:27:76:7b:16:d7:7a:d6:86:75:87:
         2d:2a:2e:cb:94:94:3f:04:91:6d:15:fd:49:80:f5:99:6e:c6:
         f1:46:20:09:16:71:dc:91:5e:58:36:62:6a:6d:c2:cd:c5:a2:
         a2:6c:83:69:2a:07:52:14:a7:cc:9d:d6:b5:4e:73:30:a9:f6:
         fd:1b:2c:fb:7c:35:dc:3d:63:0f:f7:4f:69:1e:2e:fd:89:d4:
         c3:74:be:f8:9f:e0:e2:31:ae:b2:a1:f3:24:8f:1c:c7:e2:60:
         24:11:ee:95:41:08:c7:82:78:2c:34:4e:46:b7:b5:46:c7:c8:
         c8:62:a5:9e:a4:4a:30:68:13:2b:fc:3a:5d:94:44:3e:09:c0:
         1c:d4:dd:67:8c:d9:51:2b:99:ce:03:ff:d6:30:15:8c:e7:3f:
         8f:fa:58:52:1f:32:20:14:df:c5:6e:04:60:91:26:a2:3b:e0:
         62:89:38:ef:3a:89:b5:cc:58:43:61:16:cf:c9:5d:45:f2:0d:
         a3:6f:87:94:06:09:e5:ad:16:1c:8a:19:e5:1d:66:43:0e:35:
         02:43:f2:cb:0d:78:86:a8:b1:b9:c4:d9:57:47:96:b0:f1:b9:
         26:fc:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:54:22 2026 by rpki-client