Error: rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
File:                     -sDqJCqAq1tZab-mHdXZlLIVbrU.mft (raw, json)
Hash identifier:          uN43igQis/G74gyBUbJ5de7tvB09K3gnvvLA160UcVk=
Subject key identifier:   F9:27:16:3E:D9:D4:68:D6:95:A8:CF:FB:BC:A0:19:1A:EE:D1:1E:6D
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Certificate issuer:       /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial:       053C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
Manifest number:          0538
Signing time:             Mon 28 Sep 2026 03:19:28 +0000
Manifest this update:     Mon 28 Sep 2026 03:19:27 +0000
Manifest next update:     Wed 30 Sep 2026 03:19:27 +0000
Files and hashes:         1: -sDqJCqAq1tZab-mHdXZlLIVbrU.crl (hash: OB6hAVbVRch7WdFBV1JjSrPwyVmkdKprbyNIWDtIF8I=)
                          2: C838A4D646CD11F0B8C628B5DAE4EC9C.roa (hash: RTdZvWYUXJmf/Li5OHmQzr8WCYMhMf0ZpwZGPZXQQ+o=)
                          3: A696AAEC46CA11F0B0F691A0DAE4EC9C.roa (hash: xB7HU00jvjBw/6JgiS40uDAO/7+ErDQc10oiyq65hjE=)
                          4: 3561E70246C911F0B48FB997DAE4EC9C.roa (hash: hvGUR7BeqJ6MTLBaAk0vWcFdQF+l1z7VmRPb0Tpc0aQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                          rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1340 (0x53c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAR, serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
        Validity
            Not Before: Sep 28 03:19:27 2026 GMT
            Not After : Sep 30 03:19:27 2026 GMT
        Subject: CN=6ab9dcc0-7279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:a6:d8:e7:8c:8d:fe:e9:3e:5c:ff:05:fc:
                    59:5e:c1:4f:43:5d:c4:93:ce:e5:07:22:9d:b5:e1:
                    53:e1:c0:6d:72:61:94:0d:ee:83:1e:88:a2:ba:cd:
                    57:c1:49:a0:61:aa:63:f8:cd:b8:b3:71:88:78:80:
                    42:f5:47:d2:9f:66:06:ef:a8:0f:05:17:87:6e:72:
                    1f:e7:19:e6:45:ac:91:80:05:58:07:3d:62:08:af:
                    6c:4f:2b:e5:26:7d:d7:b2:70:29:6a:38:c8:19:37:
                    22:34:af:33:c4:06:7d:fa:20:7e:ed:12:5f:bd:58:
                    63:34:89:15:90:54:6d:12:f0:82:7f:11:9f:96:41:
                    72:26:be:20:19:71:ca:0d:2e:78:b2:bd:d6:b8:24:
                    4e:a5:30:5d:20:af:58:2a:c7:c7:25:15:b8:21:23:
                    fa:7c:21:33:ab:15:03:c6:0b:12:11:1e:b7:7f:59:
                    bc:37:5c:15:fa:0b:a4:5c:82:7a:9d:06:23:ba:8d:
                    ba:0e:4d:d2:71:ba:bf:3f:28:09:c9:6e:2f:95:84:
                    87:dc:f6:9f:b5:83:6f:d3:3c:3a:7f:a9:06:c9:b5:
                    e3:32:07:88:04:a1:60:14:75:ae:39:ec:5e:bb:3e:
                    61:fb:f7:a7:a3:88:c5:7e:ee:04:b1:7e:e0:2f:4e:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:27:16:3E:D9:D4:68:D6:95:A8:CF:FB:BC:A0:19:1A:EE:D1:1E:6D
            X509v3 Authority Key Identifier:
                keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:11:ab:ff:16:b6:d7:82:fe:79:e8:18:ed:59:d5:b6:a0:77:
         80:e2:41:ee:fc:1b:55:60:34:b3:12:d2:8e:d3:e9:b7:dc:9c:
         86:9b:c3:f1:d8:76:af:22:b2:54:1c:2d:98:be:b9:ba:2d:3f:
         dd:33:d7:39:f1:a5:42:15:4c:6a:af:4f:c5:87:32:76:0d:99:
         59:39:7c:64:b4:cc:e5:8d:cf:2b:3c:15:f2:90:64:ea:56:f9:
         64:c6:3f:d5:7b:49:ff:1a:d4:97:4b:4a:da:2b:dd:fe:bc:fb:
         30:fa:5b:f7:a9:d5:fc:89:c5:a3:88:14:c8:c5:ff:2f:b6:37:
         85:4e:32:66:a0:4c:39:c3:2a:4f:5a:75:3d:b7:b1:aa:05:77:
         be:62:df:9b:5a:8a:25:fb:5e:73:ce:91:01:65:97:98:9a:ac:
         ad:7e:32:ae:1e:2e:0a:81:26:21:5b:3d:2b:19:c8:7d:28:63:
         c7:9a:6d:d0:93:2d:11:5e:37:e0:90:0b:d6:ee:c3:4e:38:e4:
         11:f0:c9:1c:45:28:f0:ea:d4:90:71:1f:1a:2f:79:b9:bb:1e:
         bf:be:d7:2d:97:fa:24:7f:f6:28:e8:07:e1:c4:48:e2:28:dd:
         05:02:84:e6:70:f6:06:3d:c2:bb:f6:e8:f3:49:0c:e1:0e:d3:
         b7:b0:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:25:51 2026 by rpki-client