Error: rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
File:                     mDG4OL4rkAR85SvUJaCCldQ2HvI.mft (raw, json)
Hash identifier:          uP5F5OfxXqO5ahgrsTXnbrz0n8wdkx6mecBpLvfj4xo=
Subject key identifier:   6A:82:63:C5:2E:6E:15:A1:C1:4D:CA:F1:3A:D5:FC:58:09:F6:78:76
Authority key identifier: 98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
Certificate issuer:       /CN=F36F56CAAR/serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
Certificate serial:       0A96
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
Manifest number:          0A93
Signing time:             Fri 04 Sep 2026 01:29:32 +0000
Manifest this update:     Fri 04 Sep 2026 01:29:32 +0000
Manifest next update:     Sun 06 Sep 2026 01:29:32 +0000
Files and hashes:         1: mDG4OL4rkAR85SvUJaCCldQ2HvI.crl (hash: x7fgwFu79X+tvIBBLlUyG5SY3MZuHZS9aQnl4E4rZeg=)
                          2: 2B42CBB2841C11EA8535FD14F8AEA228.roa (hash: dahsJO63bmsOpbiHiBcDrrEKjGQByqLKcepUunArLEQ=)
                          3: 58068464849811EAA9BC2712F8AEA228.roa (hash: NPwlzjfWgkGmqApnLab/DQv5DjJ9aHzrshBcmsHKY5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                          rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2710 (0xa96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F56CAAR, serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
        Validity
            Not Before: Sep  4 01:29:32 2026 GMT
            Not After : Sep  6 01:29:32 2026 GMT
        Subject: CN=6a9a1efc-bf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:e5:c8:67:f4:c6:d0:50:4e:ea:06:b0:df:
                    d4:34:41:41:3f:58:85:fe:f4:f0:f9:be:e0:e3:64:
                    c6:4a:08:92:a1:6a:32:c1:e8:67:d0:0a:9a:50:e2:
                    85:b1:f1:73:4a:8b:36:8f:02:84:cc:a1:fa:c9:81:
                    cd:97:b0:22:54:3f:5a:4b:f6:35:3d:af:e2:bd:a3:
                    6d:38:34:c6:25:04:44:11:d7:82:65:47:d9:eb:66:
                    87:9a:cd:f5:02:74:56:f0:7e:f8:86:b0:9f:7d:60:
                    34:15:a1:8f:b6:5a:c2:0d:dd:f8:98:2c:17:f3:37:
                    7e:d1:27:c2:07:02:2f:9d:cf:40:df:e3:11:03:6c:
                    52:a6:b1:6f:88:0d:8a:00:82:0f:ee:73:2e:36:ba:
                    33:29:4f:7e:01:b5:2a:18:a7:15:b0:ad:27:e5:b2:
                    bb:0c:4f:da:1f:13:94:6d:9f:cb:81:ba:0a:84:66:
                    f2:bd:7e:8e:47:d4:01:93:6f:df:8c:02:66:f9:73:
                    da:5c:57:bf:93:0f:bf:fd:af:34:fe:63:38:1e:19:
                    b4:09:8f:7b:8f:29:c4:f5:53:aa:f5:76:0a:e5:3c:
                    fe:f9:b9:a0:35:8f:d5:e8:28:a7:a5:3d:91:65:1c:
                    8b:14:8c:f1:04:1b:19:f8:78:c9:01:61:cf:7c:e9:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:82:63:C5:2E:6E:15:A1:C1:4D:CA:F1:3A:D5:FC:58:09:F6:78:76
            X509v3 Authority Key Identifier:
                keyid:98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:33:6b:0e:e9:6f:7d:6c:68:f3:bd:37:29:18:62:0a:c8:7a:
         23:34:96:15:d5:5c:87:3a:d4:1e:c2:74:ad:fd:b5:65:21:81:
         cb:93:3a:75:91:7a:0d:b0:f6:70:1f:b3:1c:8c:ab:24:24:49:
         9b:ae:c4:14:a8:85:98:85:42:30:c4:94:8a:97:dd:f2:cf:3d:
         fc:26:e1:84:4e:b1:09:ba:cd:15:91:a3:23:34:ac:7d:d6:52:
         e3:d9:01:66:e7:cb:1c:fc:1f:14:e3:40:9d:71:3c:c9:f4:8c:
         d9:11:35:da:ba:89:0a:9a:51:e1:cd:ac:52:ab:d9:da:30:ab:
         ca:70:cd:3f:50:18:7c:8f:77:55:d3:e2:4e:d6:7f:a5:06:db:
         8a:be:63:7f:83:41:4e:5e:21:a6:6d:d9:7b:28:a2:e3:16:13:
         22:0f:59:ce:6d:29:01:6b:ad:ae:cf:d5:cd:df:3d:01:b4:f4:
         ef:09:bc:9b:83:cd:06:8f:98:51:10:d0:14:e5:35:81:0c:09:
         aa:2b:cc:e1:3a:08:ee:83:84:64:0e:86:6e:59:23:7b:4a:0b:
         f8:2d:03:8e:59:c5:e1:09:ad:fd:03:fb:68:fd:44:84:38:75:
         c0:23:d5:7b:dc:a3:7b:c2:64:67:b4:c6:3f:98:03:e6:63:a1:
         7e:fa:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:43:49 2026 by rpki-client