Error: rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
File:                     SfsOFqhdQF1bnyOWCmkJwdfBW38.mft (raw, json)
Hash identifier:          /gTDa8LCUi5lkCnYKrHG0fnLnYQrGC80dM5X0lnGNQc=
Subject key identifier:   18:B1:C8:A2:9D:26:82:90:3A:43:D8:51:CD:46:CA:37:EF:82:92:24
Authority key identifier: 49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F
Certificate issuer:       /CN=F36D987FAR/serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
Certificate serial:       6A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
Manifest number:          69
Signing time:             Sat 31 Oct 2026 05:44:47 +0000
Manifest this update:     Sat 31 Oct 2026 05:44:46 +0000
Manifest next update:     Mon 02 Nov 2026 05:44:46 +0000
Files and hashes:         1: SfsOFqhdQF1bnyOWCmkJwdfBW38.crl (hash: L5ESXGxejJDhfqsml6tMim0+WWysny5t4x4vOx2g7mM=)
                          2: 423092FE844811F190DB7106CF1D38B0.roa (hash: rbEzzy1Z6bVrpIUjaoY1g/gq6tM0MnrHv81mcm8Ps6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
                          rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 02 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D987FAR, serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
        Validity
            Not Before: Oct 31 05:44:46 2026 GMT
            Not After : Nov  2 05:44:46 2026 GMT
        Subject: CN=6ae5804f-5b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:d0:3d:cd:fd:9c:a2:fa:9c:ad:6c:3d:1f:
                    18:72:b9:cc:81:26:e9:43:5e:0a:4d:52:49:22:d9:
                    0c:bd:20:7e:4c:19:60:e3:aa:7f:e9:ff:b3:31:06:
                    64:6c:0a:1e:e7:2a:61:80:ec:80:87:06:7b:d7:75:
                    23:a1:d2:5a:4a:9a:c3:65:b3:b2:d5:b4:5b:4b:36:
                    99:36:6e:54:e2:19:4a:7a:6a:72:cd:36:af:00:23:
                    f3:cc:e7:2c:28:5f:32:1d:92:af:f3:46:5f:42:43:
                    67:3c:41:93:3e:b5:bc:a1:d1:ba:15:c7:b6:a4:74:
                    5f:2f:a2:9b:cd:d9:81:bd:bb:cc:5b:d8:ca:f9:6a:
                    95:48:92:c9:d6:1a:73:48:99:61:a6:9a:6a:70:36:
                    c6:1a:78:62:41:f3:3a:f8:28:b2:bc:4c:61:e3:3d:
                    b4:69:9a:c6:12:ee:89:f6:25:4d:0a:cd:f2:33:48:
                    ae:4c:6b:5b:23:45:c5:3b:e8:65:84:9d:e1:8d:71:
                    dd:0f:e6:dc:00:3c:19:8e:b5:be:f8:aa:e2:aa:97:
                    ea:26:44:3a:0a:a6:18:f0:f7:1e:3d:16:0e:b5:13:
                    bd:63:a0:f5:69:5c:2a:10:9e:88:40:ad:6e:72:5f:
                    ef:28:4e:b3:86:c2:58:12:1a:0b:c7:ec:68:55:3d:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:C8:A2:9D:26:82:90:3A:43:D8:51:CD:46:CA:37:EF:82:92:24
            X509v3 Authority Key Identifier:
                keyid:49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f1:15:dd:4a:dc:4a:86:9f:c8:d0:ba:d8:4e:7c:20:2a:e6:
         c8:b5:28:ac:c4:c0:bf:5c:43:ff:96:e3:e9:93:d9:2f:03:40:
         ea:fb:54:f6:3f:84:29:ae:d7:e9:16:0f:06:30:24:6e:d8:ce:
         ea:66:74:3e:30:b1:9a:c2:e2:38:e4:54:07:57:e9:c1:9c:c5:
         0c:a9:36:a3:58:55:e2:76:6d:bc:a5:bd:41:5c:62:af:ce:07:
         30:17:98:2f:3b:a5:fb:29:4a:28:df:7d:67:01:42:0b:69:ac:
         44:68:6f:d0:af:87:e2:c6:58:8d:ce:bd:ca:a0:48:58:a0:e1:
         f8:a9:79:84:b7:81:e2:6c:f4:da:04:8b:af:81:31:91:97:03:
         9d:47:8c:8e:2b:9e:7e:aa:f5:03:60:32:bc:79:d9:17:13:5b:
         96:29:ac:5d:68:cd:74:32:d0:5e:79:3f:ee:3e:99:63:98:9f:
         8a:41:d5:49:33:69:ec:23:f4:c1:0d:52:6c:51:16:20:86:87:
         c8:00:f7:65:63:64:8a:8a:8c:4a:b8:1b:65:cd:b3:44:44:15:
         aa:71:f0:25:9e:44:2f:dd:05:8e:00:7b:f6:51:91:b8:73:da:
         4d:b1:91:9f:3f:ef:a7:f7:a2:5f:66:b0:fc:27:ce:30:16:3a:
         a7:36:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:56:30 2026 by rpki-client