Error: rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
File:                     a1799knJ49BMj10MwSmaYW_V-Ak.mft (raw, json)
Hash identifier:          6fYuBb3bdVl6HsksY8MTIMYahRu29RQs+PTAG+DhHAI=
Subject key identifier:   08:17:B7:96:0B:9F:81:09:1E:7F:B3:F2:0B:24:C7:AA:87:2F:92:EF
Authority key identifier: 6B:5E:FD:F6:49:C9:E3:D0:4C:8F:5D:0C:C1:29:9A:61:6F:D5:F8:09
Certificate issuer:       /CN=F3644DAEAR/serialNumber=6B5EFDF649C9E3D04C8F5D0CC1299A616FD5F809
Certificate serial:       0820
Authority info access:    rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
Manifest number:          0819
Signing time:             Sun 04 Oct 2026 02:04:05 +0000
Manifest this update:     Sun 04 Oct 2026 02:04:04 +0000
Manifest next update:     Tue 06 Oct 2026 02:04:04 +0000
Files and hashes:         1: a1799knJ49BMj10MwSmaYW_V-Ak.crl (hash: wfStxWQSCiB5Ry2ty5P7ub2dUCHsDtRIZkmVY3mLw6c=)
                          2: A16239EC8C3D11F1BE7644A3CE1D38B0.roa (hash: 0JYmzfGx8sLMXKvehvd/IVdvY+JnR2awowJUxkVlje0=)
                          3: 4B70F5508C3D11F1878AED1DCF1D38B0.roa (hash: Br/bcIz5Bxo60iBuJqBn4eFX0dkWOUQkz1oUt9KXjyk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
                          rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080 (0x820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAR, serialNumber=6B5EFDF649C9E3D04C8F5D0CC1299A616FD5F809
        Validity
            Not Before: Oct  4 02:04:04 2026 GMT
            Not After : Oct  6 02:04:04 2026 GMT
        Subject: CN=6ac1b415-b417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:ea:ca:c8:cf:64:6b:60:c6:c6:d8:e3:d1:
                    4c:ca:08:63:be:0e:81:cb:4f:dd:00:dd:a2:cd:53:
                    38:55:2f:2c:5d:22:8b:c8:ba:37:e7:49:d4:94:53:
                    d5:d4:8c:e8:a3:c4:49:e5:79:27:ce:8a:44:e2:02:
                    ec:ad:d3:a1:1f:e6:32:cb:f6:0b:44:7a:fa:c1:5b:
                    30:69:ec:92:47:44:da:8c:1c:f4:3c:ac:41:d5:9a:
                    fd:60:1d:11:56:d4:5d:f1:2c:ac:37:65:94:75:5f:
                    1b:91:b9:b1:19:31:50:d6:af:2b:a2:20:aa:67:87:
                    29:c7:cc:fb:2b:ad:9d:d0:b8:e8:28:6d:cd:35:11:
                    7d:a8:b3:c4:c5:a9:f1:6c:d5:a6:a5:bc:8f:df:47:
                    f2:78:c7:1b:c8:54:e9:4f:2c:09:0a:33:47:f2:57:
                    f3:83:53:77:b2:82:e1:c6:84:83:f7:8e:6f:bc:a2:
                    02:3b:15:98:f1:83:5e:31:5a:1a:9a:5e:87:3c:7d:
                    27:16:e8:b8:5e:9d:fe:dc:12:58:f3:4e:8c:49:24:
                    a0:b1:e1:5b:18:73:f9:60:3d:9c:2b:a4:f2:d9:c8:
                    9d:05:bb:82:22:d3:c4:3b:07:ae:07:ce:ea:1b:8f:
                    f2:22:20:a2:85:48:92:ec:bc:b4:c7:85:2b:dc:52:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:17:B7:96:0B:9F:81:09:1E:7F:B3:F2:0B:24:C7:AA:87:2F:92:EF
            X509v3 Authority Key Identifier:
                keyid:6B:5E:FD:F6:49:C9:E3:D0:4C:8F:5D:0C:C1:29:9A:61:6F:D5:F8:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:87:b5:54:a0:23:89:2e:11:05:d1:fb:11:b8:63:ad:8c:74:
         92:c1:43:05:a8:ab:c4:c2:30:3b:e9:a9:32:5c:14:2a:21:2b:
         a7:a2:69:6f:79:f9:e9:b8:5d:c3:1c:a8:da:51:f7:7a:d0:bc:
         ce:3e:8f:11:5b:5f:a2:16:f9:14:ef:70:99:3a:a0:75:03:be:
         33:5a:dd:9b:f7:3e:1d:f1:d1:53:09:5a:49:05:8f:c3:f3:b4:
         09:57:b9:55:67:4a:51:eb:5a:da:ae:df:36:0e:0d:7c:b1:8e:
         a0:51:b4:b0:94:b0:45:29:74:04:60:86:48:fa:de:28:bc:bd:
         31:cf:5c:4c:cd:4d:13:4c:ec:b0:1b:54:9c:07:2c:78:11:13:
         34:ba:db:2e:d7:05:6d:d4:9c:2e:61:91:0a:82:4b:79:24:1e:
         e7:1b:12:3c:d7:de:45:99:49:49:4a:53:93:3b:fb:c7:f6:9f:
         d7:ce:4e:cf:2f:a7:ff:cc:fd:02:c7:5a:04:e5:63:26:d2:4c:
         f3:b4:d7:9a:e4:b9:e9:0a:92:eb:cc:1e:6e:3c:a1:5f:5e:5e:
         41:04:1d:57:3a:06:e0:49:78:8b:c2:8b:57:5e:4f:8b:30:1d:
         a6:55:a8:91:99:f9:d2:66:39:1a:4f:ee:98:4f:12:23:79:a6:
         f8:22:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 14:17:56 2026 by rpki-client