Error: rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.mft
File:                     6KKF56kRnMEwyin3NXnbBoJPg7U.mft (raw, json)
Hash identifier:          vu/CzvlWlqUMFVvsKVI0wDhFgAND7d12kuR3hx1W8mg=
Subject key identifier:   27:87:DE:5F:8E:53:74:B6:C5:7E:EA:D8:3F:9C:78:E1:B1:63:6B:27
Authority key identifier: E8:A2:85:E7:A9:11:9C:C1:30:CA:29:F7:35:79:DB:06:82:4F:83:B5
Certificate issuer:       /CN=F36580B0AR/serialNumber=E8A285E7A9119CC130CA29F73579DB06824F83B5
Certificate serial:       0499
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6KKF56kRnMEwyin3NXnbBoJPg7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.mft
Manifest number:          0494
Signing time:             Fri 09 Oct 2026 03:39:35 +0000
Manifest this update:     Fri 09 Oct 2026 03:39:34 +0000
Manifest next update:     Sun 11 Oct 2026 03:39:34 +0000
Files and hashes:         1: 6KKF56kRnMEwyin3NXnbBoJPg7U.crl (hash: vdbEghMWGw2FeukOTKcX7g9nlO/XJobQoHXx7kmWnO0=)
                          2: E9200F1437BD11F0BD0B81C1DAE4EC9C.roa (hash: 1c3GThWv8g2r9qs7UzZVBaLErWyY4OZNe1fIMcoY0ww=)
                          3: F35321AEEB4711F0AF7185BCDAE4EC9C.roa (hash: 1KgeSVIu2WwP5Q0ZKuTz6NYvppB+1f3TjCR5SjMgp6g=)
                          4: 17F1ED10EB4811F09B4D51BEDAE4EC9C.roa (hash: j1UJok4KyLH+qJay7HOpo6TNPHm6WYRO9i2n21pUXeM=)
                          5: 60251E1041CF11EE97BA22154AD9E6FC.roa (hash: +/KON4UBgEg4d/T2YNBvCgKU2dUseDYpvvtJTHIMNow=)
                          6: C7A1013EEB4711F0B5BAA0BADAE4EC9C.roa (hash: 48f5gP3VbZLP65vW4gGKLtERnOxtpC1Gss5JvOP+GJI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.mft
                          rsync://rpki.afrinic.net/repository/arin/6KKF56kRnMEwyin3NXnbBoJPg7U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36580B0AR, serialNumber=E8A285E7A9119CC130CA29F73579DB06824F83B5
        Validity
            Not Before: Oct  9 03:39:34 2026 GMT
            Not After : Oct 11 03:39:34 2026 GMT
        Subject: CN=6ac861f7-2aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e1:e2:b9:00:1e:a4:11:db:3c:6e:fe:74:56:
                    ad:83:4e:9b:83:05:ad:ce:a7:2a:1c:13:9c:84:3c:
                    ec:b5:40:9e:5e:e5:58:e1:8f:be:f5:ed:a0:16:41:
                    41:00:93:33:92:cb:88:8d:b6:1b:c8:83:d2:9b:f3:
                    5e:5a:a4:29:26:94:25:2e:03:e3:8b:7f:06:90:c8:
                    dc:b6:ae:fa:bd:51:1c:3e:7e:5e:52:35:18:e5:9a:
                    3d:81:e9:70:de:e9:18:fe:06:9b:39:7b:e3:5b:b6:
                    c3:5c:02:9e:65:0d:e2:22:ab:18:77:19:40:a3:2a:
                    1d:7f:7d:c1:90:e9:d0:86:bd:50:e9:e1:0f:93:42:
                    80:c2:a5:99:ed:cc:da:a3:c5:cd:6d:5d:ef:aa:b1:
                    3f:c5:06:87:26:e4:47:3e:5d:d8:42:9d:35:94:5d:
                    8d:57:6a:bb:13:c0:6d:ca:59:af:e2:d5:2f:49:c5:
                    f9:5f:65:5c:ea:23:42:86:19:b7:e2:8b:5e:9b:76:
                    54:77:26:8e:fa:07:db:e4:6d:73:f9:13:e2:9e:0b:
                    26:50:05:3b:e2:e2:22:31:82:bd:2a:b4:2b:5a:f3:
                    73:9c:ae:11:a2:f5:7b:b4:f6:4c:66:2a:37:39:a2:
                    ce:5c:e6:a9:e1:35:1b:ea:5b:7e:1a:0d:4d:89:68:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:87:DE:5F:8E:53:74:B6:C5:7E:EA:D8:3F:9C:78:E1:B1:63:6B:27
            X509v3 Authority Key Identifier:
                keyid:E8:A2:85:E7:A9:11:9C:C1:30:CA:29:F7:35:79:DB:06:82:4F:83:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6KKF56kRnMEwyin3NXnbBoJPg7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:43:a2:01:c9:8d:94:8d:de:5e:bf:c8:19:49:5c:5f:89:25:
         5a:84:02:48:6f:b6:3d:23:1b:09:db:5a:34:7c:7c:8f:f4:18:
         c3:5c:1b:58:0e:37:ea:b4:8b:05:50:1a:14:18:73:fe:b7:e7:
         dc:c8:94:5f:e1:6a:ca:b6:7d:16:45:1d:dd:64:23:c5:84:90:
         01:8f:7e:f3:bf:83:dc:a5:5b:6d:1f:07:72:d2:27:68:a2:3c:
         f7:30:6f:09:f3:fb:e8:1b:b5:ab:45:85:9a:98:1e:47:83:55:
         c6:07:3b:41:cb:18:24:bc:6f:8f:97:78:51:67:28:b3:43:a3:
         fc:06:ae:7e:8b:11:fb:bb:d5:88:81:3f:1a:86:a5:21:6b:c0:
         1e:b1:7c:86:55:02:3f:18:cd:68:b1:a8:69:66:f3:59:31:d6:
         24:d8:ad:19:bc:22:bb:46:4a:24:81:08:e4:6a:da:17:1a:83:
         7e:5a:ce:84:37:1c:62:16:42:7b:86:a4:2d:d8:fb:69:99:37:
         b7:fb:3d:a0:5f:c1:15:e8:32:07:36:18:8a:ab:7f:5a:ca:87:
         26:31:49:8d:ff:35:47:ae:1b:dc:ef:fe:33:68:44:03:37:56:
         c2:3d:ca:9b:2c:46:1a:60:d7:58:1e:03:ce:4c:68:fd:8e:b6:
         1c:f9:5a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 07:37:38 2026 by rpki-client