Error: rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
File:                     7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft (raw, json)
Hash identifier:          LHMXBBzqDCXY9APWcXLZwQ62ugbEE8ird3+c9bvH7xg=
Subject key identifier:   04:D8:AC:A8:C6:DD:D7:46:0E:6D:C2:A5:EB:DF:CA:17:99:0D:B1:85
Authority key identifier: EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
Certificate issuer:       /CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Certificate serial:       0354
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
Manifest number:          034F
Signing time:             Sat 17 Oct 2026 04:17:26 +0000
Manifest this update:     Sat 17 Oct 2026 04:17:25 +0000
Manifest next update:     Mon 19 Oct 2026 04:17:25 +0000
Files and hashes:         1: 7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl (hash: AlXWrkVbSATlHb4DRrsz1gDq0Hi7O+r2W8pEzPpCa7Y=)
                          2: 1F1E8DAE2D1111F19C746AC9DAE4EC9C.roa (hash: verwwM1qSDlHt1eWteeWg5Wyu5dh0r1sixVOjp6dIDQ=)
                          3: 125EF2A63F7011EFB90A2881762E951A.roa (hash: CYHaNxXH3G1/sB9APmxu1n3UtTgC5Edc0gfpDVgJNk8=)
                          4: B116646C2D1011F182D210C9DAE4EC9C.roa (hash: Ov51lJNCy4uqDkQo8rHB8kq0FYQa1S1y8nu5i0VfTfk=)
                          5: 73F502E22D0A11F1984F2EA6DAE4EC9C.roa (hash: 4k+reHjQ2qKzbqLfzomf/zDmUieo6Evhc7Pv9095Np4=)
                          6: 41A178E4429111EF8883AAAA762E951A.roa (hash: MkpjkL83C02qTlHENSDXSaJZwjQp8E4rGj/mJx7w1Cc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
                          rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36180A1AR, serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
        Validity
            Not Before: Oct 17 04:17:25 2026 GMT
            Not After : Oct 19 04:17:25 2026 GMT
        Subject: CN=6ad2f6d6-22cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:27:51:85:05:25:1a:00:4a:8d:6e:35:a6:f2:
                    98:d8:e3:50:d8:1d:a3:3e:5a:e2:b0:b3:0a:29:30:
                    f8:09:7c:96:e4:23:15:ed:53:ab:80:0e:b8:bd:a2:
                    80:2b:cc:97:84:06:e6:96:a1:18:9e:5f:53:c9:61:
                    f9:bf:b5:f4:de:35:f8:b2:eb:a4:64:61:7c:54:f6:
                    b9:d4:f6:fa:94:f5:99:7f:bd:ae:36:2b:09:bd:e6:
                    cf:db:05:88:7d:80:59:a2:b7:64:82:a4:76:fe:8d:
                    51:07:20:4f:fd:dd:3c:43:cf:35:67:4f:ea:01:14:
                    be:81:d0:6e:cd:8c:89:4b:43:d6:69:55:3b:ee:43:
                    0b:07:47:7c:dd:ef:40:3d:66:e8:24:e9:6a:68:d8:
                    ea:3b:ba:5e:51:9a:29:82:f4:cb:b2:72:37:7d:dc:
                    dd:6c:55:d9:0b:85:6f:e5:30:88:1a:ed:b7:19:fa:
                    7b:cf:3e:12:94:4e:db:f1:24:76:40:87:62:7c:33:
                    f4:f1:46:80:63:70:54:40:d9:b9:b2:15:4d:2e:ae:
                    b8:94:17:40:10:32:48:86:8b:79:0c:fa:99:e7:fd:
                    db:f9:3f:bf:8b:ef:06:85:f3:ff:33:41:b2:3d:1a:
                    d8:52:a2:c4:27:cc:97:c1:a2:d7:18:60:49:19:7c:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D8:AC:A8:C6:DD:D7:46:0E:6D:C2:A5:EB:DF:CA:17:99:0D:B1:85
            X509v3 Authority Key Identifier:
                keyid:EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:c6:ed:50:a0:68:95:18:a7:a4:72:34:b7:25:50:bb:7b:
         33:cb:df:db:b6:e4:01:3b:11:71:17:1f:50:10:fb:42:41:36:
         c1:01:a7:a5:bd:d4:da:88:49:98:f0:83:23:63:07:49:bc:ae:
         e2:a0:a7:f6:4f:4c:bb:cf:f6:51:de:a9:77:cf:ce:3b:d8:3b:
         b5:38:21:fe:7b:a6:6e:61:d0:ee:21:21:d8:14:bb:c4:75:05:
         e0:4d:a8:5a:ef:24:35:6c:e8:32:8f:e8:e3:0e:11:70:f8:28:
         18:62:3e:92:c9:aa:be:e0:32:4a:17:a2:f8:6d:1b:3a:1e:2a:
         af:6f:e0:d0:5b:d2:b3:63:69:f5:c4:88:36:d3:df:b1:35:8a:
         fd:84:49:91:5e:61:6b:d2:55:4d:b5:cf:da:3c:53:dd:47:e2:
         c1:ad:5c:1b:8d:88:76:6e:e7:3f:9f:ad:28:fc:be:10:df:5e:
         26:3c:35:b7:6c:18:cb:30:1f:85:4f:0f:44:7b:01:f6:c6:d7:
         d9:e6:5a:be:40:d2:4d:e4:98:90:cb:4e:2e:07:ed:91:46:9a:
         4e:41:ed:62:69:fc:a8:b0:2f:e5:c9:a0:28:b6:63:e8:db:3a:
         86:7b:a5:ed:0a:b1:bb:1e:90:cd:3b:62:cb:4f:ae:8a:b4:76:
         30:19:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:22:39 2026 by rpki-client