Error: rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
File:                     bvB88gdsxaYJayVyrgiV_Wc_RxI.mft (raw, json)
Hash identifier:          613O+7kO86U6dNJEAlVyRdynecZzdAhF8DhUUx03ZWo=
Subject key identifier:   31:3D:1B:82:F6:9D:0B:9D:83:C7:B6:88:DF:F8:F2:02:94:7D:BC:1C
Authority key identifier: 6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
Certificate issuer:       /CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Certificate serial:       0A79
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
Manifest number:          0A73
Signing time:             Mon 05 Oct 2026 01:32:34 +0000
Manifest this update:     Mon 05 Oct 2026 01:32:33 +0000
Manifest next update:     Wed 07 Oct 2026 01:32:33 +0000
Files and hashes:         1: bvB88gdsxaYJayVyrgiV_Wc_RxI.crl (hash: H8tesvaF/e4OjT6OGutYc0GSQYcsRho+OnrY2MxbTLk=)
                          2: FD8F3AE8BC2511EEA262C8AF775412E6.roa (hash: oLYmgki9mz5lwTsVGngG2jpWOy0zZNH+Gds3faUhjqY=)
                          3: 10BE688A8A5711F18C506009CF1D38B0.roa (hash: lC/r5XRT9wiwQaTE7675t9IEuG/3v0/7lZJEiCHl0Jw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
                          rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2681 (0xa79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037AR, serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
        Validity
            Not Before: Oct  5 01:32:33 2026 GMT
            Not After : Oct  7 01:32:33 2026 GMT
        Subject: CN=6ac2fe32-5bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:0e:00:dc:e6:64:4b:98:e9:02:fe:ca:bb:
                    29:2a:fe:af:24:1d:e2:94:19:b5:dc:02:76:59:81:
                    48:90:e1:39:9e:30:8c:48:0e:cd:b7:6e:9f:66:e5:
                    0f:34:93:71:02:a4:67:29:f3:68:86:a2:85:d8:f2:
                    ff:60:da:42:01:7f:67:7a:73:d1:bb:a6:2e:21:23:
                    dc:7e:6f:37:b9:ca:f0:bf:06:9c:99:b9:8e:c9:b8:
                    b8:e3:cb:d9:4d:3e:dc:ed:3d:30:8c:d5:dc:a3:4b:
                    84:f9:6a:8b:72:c7:78:cf:a5:3e:8e:e9:17:85:74:
                    ca:f8:7d:ea:a8:13:4e:0b:77:69:3e:e5:37:e1:48:
                    f3:62:42:30:63:ba:0c:fe:3a:e3:88:c7:aa:31:ed:
                    69:9f:1b:33:bb:e2:c4:44:7b:d0:05:1a:67:c5:e0:
                    d5:6d:c4:aa:ab:fd:9a:94:f2:50:fa:18:c1:d5:65:
                    72:a5:f7:64:35:f4:58:a5:ed:c3:76:56:d5:d2:6f:
                    20:1d:fb:4a:1d:36:f7:e3:26:b9:eb:3f:ef:13:c1:
                    6e:0b:c1:b4:6f:e3:17:87:74:2c:74:a7:c4:1a:46:
                    5e:18:58:5e:89:23:47:67:e0:ca:2e:e5:4a:b6:14:
                    4a:37:ab:2d:84:33:ad:14:e9:25:ce:e7:92:98:3e:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3D:1B:82:F6:9D:0B:9D:83:C7:B6:88:DF:F8:F2:02:94:7D:BC:1C
            X509v3 Authority Key Identifier:
                keyid:6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:53:d0:5b:fd:ba:ef:58:c5:9f:46:0b:5b:d1:ab:65:8e:64:
         5b:21:64:3c:0a:74:db:ed:87:91:28:d8:ed:c7:b3:76:77:6a:
         9c:e7:1a:38:a6:5b:1e:d8:bb:7f:83:9b:99:47:89:ec:fc:72:
         a9:cb:3e:1a:c7:1a:09:1e:83:dc:1f:a7:78:ec:44:92:ba:51:
         e2:0c:2c:bc:33:d4:bb:e1:fd:df:d0:0b:2f:da:90:74:d3:93:
         97:b9:95:ce:26:23:1c:87:b1:5d:fe:7d:a0:73:bf:36:17:ea:
         66:67:d0:f1:b3:b0:cb:d1:8c:00:b3:2e:9b:4a:e6:6e:70:24:
         18:ad:2e:e8:99:ef:1e:aa:6e:65:33:62:f8:09:ef:c4:67:2b:
         c4:be:62:71:1f:b8:8c:79:fb:a5:d9:20:a3:a4:3f:84:31:9a:
         9a:fd:19:0e:3e:da:a7:19:2a:8e:a0:96:36:f1:ce:54:e3:3a:
         08:90:b5:6f:b6:94:59:7d:1d:ce:19:b2:ba:5d:d4:bb:08:ba:
         79:f5:10:4b:f8:bb:67:69:7c:57:47:84:65:39:f0:e0:22:44:
         7b:0c:85:e9:d7:eb:67:3b:41:8b:ed:b5:08:e8:07:bd:6a:e2:
         3b:04:16:ac:7f:fc:04:a3:99:1f:01:88:cc:9f:fd:6c:92:d0:
         f4:38:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:51:51 2026 by rpki-client