Error: rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.mft
File:                     ZR6Rlo4xccF87sDESReO5-FJdBg.mft (raw, json)
Hash identifier:          6sFAlzm2a9xCi1+I/WWZ0e7X2b+EYMc73LBAe82cI9w=
Subject key identifier:   92:BD:03:BD:69:1E:9B:BB:14:69:FE:6F:3F:4A:97:C2:8D:6D:1A:0F
Authority key identifier: 65:1E:91:96:8E:31:71:C1:7C:EE:C0:C4:49:17:8E:E7:E1:49:74:18
Certificate issuer:       /CN=F364FE7FAR/serialNumber=651E91968E3171C17CEEC0C449178EE7E1497418
Certificate serial:       0574
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.mft
Manifest number:          0572
Signing time:             Fri 25 Sep 2026 03:09:00 +0000
Manifest this update:     Fri 25 Sep 2026 03:09:00 +0000
Manifest next update:     Sun 27 Sep 2026 03:09:00 +0000
Files and hashes:         1: ZR6Rlo4xccF87sDESReO5-FJdBg.crl (hash: +e524s0e0QvOoq9Ut5/MCEbu8c6ThYo7Z+P+FyX+ZLs=)
                          2: C5A3761CEDD911EFA5DF909F762E951A.roa (hash: hZfV1xEAL1sT3W1eG7s8f3Z0rtLuoAUEZBkWsBcTbHY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.mft
                          rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364FE7FAR, serialNumber=651E91968E3171C17CEEC0C449178EE7E1497418
        Validity
            Not Before: Sep 25 03:09:00 2026 GMT
            Not After : Sep 27 03:09:00 2026 GMT
        Subject: CN=6ab5e5cc-b27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:a1:4a:f6:40:39:6a:6f:c5:57:af:98:97:
                    1c:64:72:bc:ad:9c:2d:db:a2:2f:73:94:0f:de:f6:
                    9e:30:34:89:54:46:ba:a8:90:78:fa:1d:f0:6e:08:
                    09:6f:5d:fd:96:ed:b6:b9:8a:2c:7a:88:8c:21:66:
                    4e:a9:da:83:0e:61:03:a2:58:e9:a3:a3:fd:9d:9e:
                    48:4d:c6:b4:35:8d:17:42:9a:c0:e0:9f:56:fd:00:
                    eb:92:9a:35:41:fc:bf:be:d5:b8:e5:b2:22:e5:35:
                    45:31:5c:a0:f3:02:96:08:e3:e7:32:f9:01:4d:88:
                    0b:fc:da:b0:0f:f6:60:31:99:c2:b6:68:f6:c2:76:
                    26:a0:3a:d2:49:33:77:90:46:67:61:f8:26:12:d7:
                    18:9b:92:b1:21:dd:28:7d:ab:c2:dd:e6:bc:49:b4:
                    c3:4e:4e:39:be:d4:ea:39:3d:dd:b8:93:aa:c2:ec:
                    cd:5e:1b:92:a9:37:c8:65:f1:46:bd:7a:5b:32:8b:
                    df:94:ef:39:67:af:15:41:58:73:a2:39:7f:7e:fc:
                    b7:87:0d:d4:2b:3a:ff:40:4e:cd:8a:db:48:09:b3:
                    b4:64:e1:25:34:d6:36:16:57:80:48:91:17:99:fc:
                    af:00:91:7f:d4:48:fd:22:54:47:a4:71:20:00:d6:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BD:03:BD:69:1E:9B:BB:14:69:FE:6F:3F:4A:97:C2:8D:6D:1A:0F
            X509v3 Authority Key Identifier:
                keyid:65:1E:91:96:8E:31:71:C1:7C:EE:C0:C4:49:17:8E:E7:E1:49:74:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:96:4a:9e:5a:24:7f:a2:02:5d:a4:35:7f:b7:ac:08:29:ea:
         fa:a6:bc:f6:34:48:fe:cb:73:11:45:36:8d:13:05:49:2a:1e:
         9c:01:86:a3:67:dd:bd:c3:34:cb:73:20:1b:5e:3f:01:03:78:
         88:79:de:24:56:e3:82:8a:2f:0e:fa:60:35:b8:57:f7:8a:ad:
         4a:c0:b7:fe:02:8f:86:79:14:81:4b:64:86:3c:7a:1c:3b:6d:
         2c:bf:d3:75:77:eb:0a:b1:76:99:0e:b4:9d:9f:39:de:7a:d5:
         96:f3:bc:98:3c:00:cb:5d:b7:a8:31:3d:0e:6a:a9:56:08:e3:
         60:e8:95:c3:15:1f:52:97:19:73:91:20:c4:78:b9:f1:58:c2:
         e9:18:8b:33:e4:61:f3:59:a3:d4:dc:51:3b:a4:6e:99:ff:18:
         7b:2a:7d:77:11:8f:ae:d7:04:88:b4:1c:88:8f:eb:30:40:aa:
         3f:15:a5:4a:b0:55:ca:1c:e7:88:3a:20:cd:87:c4:fc:90:07:
         09:31:76:a3:72:1b:4e:91:66:14:2d:1a:4b:e8:d8:6c:ab:94:
         19:89:6f:18:29:ee:7c:70:c2:40:13:a2:16:74:db:0f:15:50:
         b3:4c:86:e1:49:86:55:2c:0a:32:5d:6a:62:ce:cf:be:30:2c:
         ab:76:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:53:07 2026 by rpki-client