Error: rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
File:                     rlEpNifxvXqfU3iOKmXqBBNGpwI.mft (raw, json)
Hash identifier:          TvY3DVlSEMR5MWu8rm8OSDQLsrNz5GXGXe6jmUBAOIE=
Subject key identifier:   41:B0:AA:41:1E:71:2C:CA:EB:DC:7B:C1:42:9E:C0:C0:D2:02:A1:B4
Authority key identifier: AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02
Certificate issuer:       /CN=F3620C16AR/serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
Certificate serial:       04F2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
Manifest number:          04E6
Signing time:             Sun 04 Oct 2026 03:27:12 +0000
Manifest this update:     Sun 04 Oct 2026 03:27:12 +0000
Manifest next update:     Tue 06 Oct 2026 03:27:12 +0000
Files and hashes:         1: rlEpNifxvXqfU3iOKmXqBBNGpwI.crl (hash: nWZ+gAGFaGPmfApxaMT+vsaqhniXZMoODJ9TRkvnk4s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                          rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AR, serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
        Validity
            Not Before: Oct  4 03:27:12 2026 GMT
            Not After : Oct  6 03:27:12 2026 GMT
        Subject: CN=6ac1c790-b93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:74:4c:fa:3c:e7:b5:4c:85:9f:b1:25:df:
                    45:ad:1b:28:d4:65:ac:86:43:c2:54:51:03:9f:27:
                    a2:ee:b7:1b:f8:ec:ea:ae:83:ea:cd:13:81:e6:1f:
                    02:0e:c0:a9:8f:24:e4:da:a1:6d:8d:0c:cd:76:7f:
                    a6:92:cc:4b:c8:64:4e:59:b7:84:89:bf:6d:82:57:
                    ba:35:52:dd:61:c4:b0:8b:fe:d3:d5:bb:66:80:7f:
                    23:90:3e:fa:be:02:9f:8c:92:86:8f:38:06:15:c2:
                    75:80:0f:6a:87:41:31:39:73:11:bc:c3:1f:e3:8c:
                    53:68:64:73:18:56:2f:04:79:88:bf:41:92:af:1a:
                    7e:97:87:dc:ff:d6:8f:ab:6f:3f:1d:9f:4a:42:d0:
                    53:8d:5c:3c:98:ae:79:80:6d:27:30:57:0a:95:09:
                    d7:56:bf:d8:44:d9:07:dd:65:07:26:aa:f2:5d:00:
                    89:42:05:49:ee:dd:0b:47:ac:47:18:db:ad:f1:88:
                    2d:ee:ff:37:8a:78:7f:25:16:45:a8:6d:cb:a9:ad:
                    ee:5a:35:09:2a:3e:d8:d2:b6:8f:9c:df:1b:14:21:
                    49:cf:5f:5c:2f:ee:4d:d8:17:dd:a0:04:0e:55:e2:
                    09:f8:56:25:7d:b7:f9:db:f1:4b:f2:67:bb:f0:1c:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B0:AA:41:1E:71:2C:CA:EB:DC:7B:C1:42:9E:C0:C0:D2:02:A1:B4
            X509v3 Authority Key Identifier:
                keyid:AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:07:33:99:2d:ff:5c:f6:3b:1a:59:b2:11:a9:04:30:40:
         95:a8:73:dd:85:59:1e:b1:5a:e4:28:3a:58:f6:8a:ee:19:a1:
         f8:9c:e5:65:37:c5:c4:c7:bb:48:29:f3:2c:4c:9a:c0:6e:80:
         bb:11:2e:f9:57:5e:68:b1:32:67:44:ef:a0:1e:6e:22:4b:42:
         2f:6f:b6:f8:9e:78:bf:41:95:d2:53:30:87:38:b7:bd:c9:0b:
         0a:0a:5e:13:d3:85:72:79:28:be:c5:d7:9e:50:6f:61:32:fb:
         c6:36:9c:04:55:7d:56:d7:5e:26:ab:7e:0f:d8:9e:48:25:e4:
         39:0a:41:70:ef:8e:27:4e:12:2c:37:5e:2e:79:4a:66:2f:75:
         58:af:9d:67:39:d9:8e:a8:92:e7:74:91:30:0a:bd:a2:8c:3b:
         b2:cd:2c:49:7b:5f:a5:db:22:b9:e9:a0:b7:28:28:e3:ae:13:
         c8:fe:58:be:69:e5:75:fd:62:3a:60:73:f8:36:0c:26:06:46:
         48:1c:29:24:3d:2a:26:e0:7d:cb:44:b3:68:f6:33:eb:c5:1d:
         c8:34:b8:1f:fa:1f:d1:9e:46:47:05:e4:b0:42:39:18:43:62:
         12:74:47:bc:2a:40:35:7c:d9:ee:cc:c4:5e:12:a2:ed:e7:75:
         93:d6:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:34:55 2026 by rpki-client