Error: rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
File:                     LjUlNVWULww8pjeATUbZWgKk-ek.mft (raw, json)
Hash identifier:          pQ5pPRYKsFSJMB1q09k8CqD8K5P+HT5vDl08uChR0oE=
Subject key identifier:   C5:8B:5E:FA:FF:0D:A5:D2:24:02:9F:CC:B6:4C:46:54:3A:74:FF:83
Authority key identifier: 2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Certificate issuer:       /CN=F3627BD6AR/serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Certificate serial:       0F28
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
Manifest number:          0F23
Signing time:             Tue 13 Oct 2026 01:02:22 +0000
Manifest this update:     Tue 13 Oct 2026 01:02:22 +0000
Manifest next update:     Thu 15 Oct 2026 01:02:22 +0000
Files and hashes:         1: LjUlNVWULww8pjeATUbZWgKk-ek.crl (hash: 6/3cj6V2NJXYJ8PoqtCv05LwO7jrvD9MPhQ6Jd3gOpo=)
                          2: 7FAE258E8C0811F1954847E1CE1D38B0.roa (hash: gYLuwqv/Jon5ookF4+rJrsGD0ySTLCd3p+wokkaSSpA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                          rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3880 (0xf28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AR, serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
        Validity
            Not Before: Oct 13 01:02:22 2026 GMT
            Not After : Oct 15 01:02:22 2026 GMT
        Subject: CN=6acd831e-a210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:24:44:6e:72:49:fa:d9:ab:3e:14:b4:2a:
                    a1:1c:91:27:5f:e2:ef:a2:25:c4:bf:47:99:d2:7b:
                    b0:0f:90:b3:14:78:c4:d5:1c:4b:0a:16:90:51:64:
                    53:ff:e5:43:33:d0:0c:6a:c8:13:3e:60:ad:52:20:
                    9a:88:4f:2a:87:f8:16:95:a8:28:98:ef:07:9b:fc:
                    49:62:ef:b1:a1:b4:cc:16:fc:ea:65:f7:df:6e:8d:
                    2e:bb:80:e6:78:e9:1b:cf:61:73:24:86:1d:f7:fd:
                    3e:88:2f:47:7c:55:e7:27:18:6a:f3:c6:c9:f7:27:
                    0c:48:77:27:6d:d0:a8:ab:48:ab:6b:38:67:70:92:
                    d2:13:4c:89:6e:bd:cd:f4:5e:80:40:c1:f3:05:d7:
                    04:b0:e0:94:e5:03:36:4a:c8:ee:4e:e8:02:74:ad:
                    9e:56:8c:4e:10:d7:2d:05:57:2d:78:42:c5:2b:b8:
                    71:87:47:ed:e0:8b:e9:ba:2f:74:04:2c:44:d6:a7:
                    31:65:4b:72:65:16:0d:e7:83:a8:44:2c:c2:90:ae:
                    ff:01:9e:d4:0a:74:61:e1:45:71:a4:ed:63:d2:b2:
                    32:04:db:ab:a7:6a:4e:a1:43:1b:0c:24:f7:0f:25:
                    84:ac:ca:de:35:b6:64:67:61:5e:e5:b9:aa:0a:44:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8B:5E:FA:FF:0D:A5:D2:24:02:9F:CC:B6:4C:46:54:3A:74:FF:83
            X509v3 Authority Key Identifier:
                keyid:2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2a:3a:e3:f3:03:68:ef:d0:99:6e:09:ae:61:7e:ae:c1:ea:
         f7:fc:d3:51:c4:45:aa:84:12:28:d4:1b:ef:96:8d:3e:1a:1c:
         05:33:24:88:4c:5d:87:07:4a:53:e8:ed:a9:6f:f8:a1:3c:54:
         0d:39:d0:a9:b6:8f:1b:7c:44:7b:e2:45:0b:72:bb:bf:84:ce:
         18:5e:6d:83:aa:aa:96:ec:ea:1b:08:8c:39:55:be:ed:b4:18:
         5f:76:7e:92:e1:ce:ea:f0:54:ee:ff:14:77:00:c9:e6:c8:21:
         1a:c2:df:da:40:55:7f:43:4d:62:b9:f5:6f:33:9c:2d:01:a1:
         95:b1:e7:ad:a8:47:e5:5a:8f:78:50:c2:60:2d:08:bf:2a:56:
         85:cb:4d:81:44:1f:89:22:b3:4b:fa:ef:8b:97:6a:2a:37:b1:
         3d:80:25:b6:5d:ad:92:39:94:46:c9:b5:72:2e:a9:ba:29:b8:
         2b:d4:66:d3:e5:8c:0d:da:02:18:9f:14:52:94:af:d8:d5:20:
         0f:cd:46:66:0f:29:1d:dc:4e:bf:7b:e3:a6:0b:22:42:22:d0:
         02:c6:de:ce:5b:7d:ac:7c:31:27:aa:b5:96:36:0c:89:0a:0b:
         96:01:ba:04:aa:e4:e9:d8:ed:2f:b1:65:a9:d0:7f:f7:51:52:
         4c:c1:e5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:52:41 2026 by rpki-client