Error: rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
File:                     v_ENc6qBONzjZ0KnZvllI4WeSHw.mft (raw, json)
Hash identifier:          /drZIWJZEfSAwG1y7MiqUMidQ1xLjC81HX6EJ3laPpE=
Subject key identifier:   1B:9A:8C:EE:F4:32:8F:16:BB:9D:06:98:0C:95:AC:63:78:BD:9A:3B
Authority key identifier: BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
Certificate issuer:       /CN=F36F144CAR/serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Certificate serial:       0A83
Authority info access:    rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
Manifest number:          0A79
Signing time:             Thu 29 Oct 2026 01:34:35 +0000
Manifest this update:     Thu 29 Oct 2026 01:34:35 +0000
Manifest next update:     Sat 31 Oct 2026 01:34:35 +0000
Files and hashes:         1: v_ENc6qBONzjZ0KnZvllI4WeSHw.crl (hash: 9TeOmncEYhFgYMhWVBeaSfsoLtt0mwqLciFp0Gr01uE=)
                          2: 8798FAA821AF11F197D80AB0DAE4EC9C.roa (hash: yINpq7jr9xplZf3UorF40WMgy5Q4M9fmu1bCUIs0aD0=)
                          3: B571390E21AF11F1A70F3CB0DAE4EC9C.roa (hash: jQBOlKXzRvL7aZ4LvcPCaJ8v5ZYQA2/tFLBZwlHecQA=)
                          4: 4A1F521C21AF11F1AFF9D3ADDAE4EC9C.roa (hash: EgoFvPh8BZLqAUs5ARxtz1AMfn7yN93szVvusnSBYKY=)
                          5: 6D16A902345111EA83C8F660F8AEA228.roa (hash: CEsf8aJnIGJmX6uZlMZKivmaxNidagXwOjPfOH6lI4A=)
                          6: 0D29923C21AF11F189E0F7ABDAE4EC9C.roa (hash: 8ZikLGmt4ec0ORFNQUxDPWAGIabOlnW5dc7hSnlXZeU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
                          rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2691 (0xa83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F144CAR, serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
        Validity
            Not Before: Oct 29 01:34:35 2026 GMT
            Not After : Oct 31 01:34:35 2026 GMT
        Subject: CN=6ae2a2ab-0e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:34:2b:84:f6:a1:ce:0b:e2:2a:28:ab:dc:
                    dc:18:d0:e0:cd:b7:72:91:a1:35:30:ea:59:50:31:
                    aa:82:e2:29:08:d7:80:79:1a:42:3c:95:9d:62:e7:
                    71:c4:22:72:e5:52:c4:bb:a1:dd:90:0b:9e:30:72:
                    a5:54:46:01:a1:dc:bd:98:09:5d:fd:b0:67:e4:ec:
                    6d:1c:1a:77:ea:eb:df:90:39:ce:4c:ed:11:2a:82:
                    58:a6:bf:c6:3e:db:0f:5a:aa:75:b0:ff:c8:fd:0b:
                    6e:e1:70:b3:08:b3:e5:f6:e4:f7:13:1d:e3:66:8c:
                    f4:31:72:75:d9:7f:0f:24:c9:da:50:a3:6a:dc:71:
                    cc:63:83:3e:5c:5b:79:1b:f5:87:c9:d4:36:a2:3b:
                    d5:89:d2:f2:7c:83:e5:b7:fc:27:2e:a3:6e:1e:72:
                    6e:c0:01:50:b2:7a:35:bd:26:6a:39:6b:fa:67:8d:
                    aa:ac:24:43:75:b5:3f:29:c2:56:ec:21:7d:56:b7:
                    e7:b5:95:a0:41:1f:0c:23:10:87:58:1a:c0:26:00:
                    97:19:f1:e7:6b:c4:3d:4b:25:34:47:eb:ee:7a:2b:
                    3a:83:66:af:da:77:b0:02:b4:e0:14:85:3e:dd:90:
                    5d:43:ad:5f:72:fb:0a:aa:fc:9a:ac:eb:1f:e1:dc:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9A:8C:EE:F4:32:8F:16:BB:9D:06:98:0C:95:AC:63:78:BD:9A:3B
            X509v3 Authority Key Identifier:
                keyid:BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:93:c0:39:2e:f5:b4:7a:18:c0:9e:11:38:c3:11:20:21:78:
         6e:6c:e4:f5:05:8a:77:52:ed:dd:74:35:e3:86:5e:07:12:44:
         4f:0e:fe:8b:01:2b:fe:f8:89:40:7d:1f:75:0f:25:d3:72:ae:
         2f:b2:d8:43:0d:64:1f:ee:7e:d0:01:a7:7c:84:17:4c:48:1f:
         45:b4:b7:59:75:d8:bd:76:21:8e:b3:46:bb:c3:36:4e:8f:ef:
         53:52:89:97:9e:fa:fe:7a:29:82:ef:8c:e9:06:8c:fa:4e:95:
         1b:72:59:fa:4b:3c:a7:d6:68:03:94:04:46:a4:17:0e:14:96:
         4d:8f:03:00:7f:b9:35:b2:74:dd:2e:44:7a:22:20:6c:54:93:
         3a:43:27:a0:dc:ea:bc:73:32:6d:50:60:37:38:fc:f7:e4:4d:
         e9:e5:ef:82:19:b2:86:56:5d:7a:82:96:4d:d9:13:e0:f0:0b:
         92:a9:4b:c0:06:8e:15:b3:67:fd:32:6d:c9:a1:e9:d0:12:d9:
         b6:07:f3:26:29:fd:84:ca:61:d8:7f:5f:ee:68:58:18:09:a9:
         3f:c3:3a:cb:24:c6:1e:8a:4a:90:d4:30:81:e4:fb:bc:ac:7c:
         b2:a5:27:c2:4e:b8:cb:12:4a:7e:82:59:a9:e4:c8:37:07:0d:
         30:87:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:28 2026 by rpki-client