Error: rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier:          w5U0KI9y9kFR4ONI7Y37Q+uDSKIo2DrzUa+DCIY1p4k=
Subject key identifier:   88:C7:5A:CE:F2:9F:2E:24:3B:CB:CD:3F:0D:8F:75:1B:6C:01:C0:A8
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer:       /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial:       056C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number:          056A
Signing time:             Tue 22 Sep 2026 03:09:58 +0000
Manifest this update:     Tue 22 Sep 2026 03:09:58 +0000
Manifest next update:     Thu 24 Sep 2026 03:09:58 +0000
Files and hashes:         1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: T13CH2uHvdjNf+WdUP7pQsQEDwc8m6LXzl3VTmwc+Dg=)
                          2: 8651F3548EFE11F18C8872F2CE1D38B0.roa (hash: s2JmDXus50oLEEaUALD5HleYNY+S5t45bCkpw9Qi/PU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                          rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 03:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Validity
            Not Before: Sep 22 03:09:58 2026 GMT
            Not After : Sep 24 03:09:58 2026 GMT
        Subject: CN=6ab1f186-236d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:82:3e:75:7f:fe:e4:dc:62:59:f3:45:0a:
                    79:10:7a:d8:ad:7b:e1:ad:f6:7f:48:82:f9:1a:91:
                    35:87:0e:57:f9:54:39:dc:3f:3b:30:4e:1f:6e:06:
                    3e:83:eb:ae:03:9d:25:aa:8c:ac:c3:b6:1c:36:eb:
                    cb:2c:62:7b:7c:03:77:87:14:76:f7:5c:0d:01:9c:
                    8d:68:57:e9:08:da:58:f6:29:db:3a:3f:12:e7:04:
                    95:5f:3e:18:76:19:76:f7:13:15:92:4e:00:61:36:
                    da:0c:c6:23:6b:84:1d:1e:c5:2a:aa:8e:0b:b1:3c:
                    82:ac:82:91:a5:09:bd:57:88:d8:bb:e5:ad:98:8f:
                    ab:58:d5:1e:34:12:11:8f:5d:65:75:42:ed:4a:07:
                    5f:a4:dc:f2:76:e6:17:6b:0d:f6:01:58:1e:6e:55:
                    f7:b1:b4:b5:7c:57:6f:cc:63:17:7b:e9:a5:82:ea:
                    b8:64:d8:e6:58:3b:44:2a:c3:80:2c:d6:7e:00:27:
                    5e:1a:a4:8f:cb:2e:90:99:b2:ed:c1:4e:ba:71:38:
                    23:d9:9a:bf:e3:81:1b:77:1a:b2:38:17:31:8a:e0:
                    04:3d:b9:c5:b9:30:bf:c6:88:88:b9:84:2b:13:5f:
                    02:f4:a9:86:f0:5b:a1:ca:3c:9e:34:d9:5f:50:5c:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C7:5A:CE:F2:9F:2E:24:3B:CB:CD:3F:0D:8F:75:1B:6C:01:C0:A8
            X509v3 Authority Key Identifier:
                keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:34:e9:b5:42:0b:00:70:5f:9a:12:6f:51:6a:4e:08:18:9b:
         3b:bb:10:eb:55:74:a5:a4:e6:86:82:c6:b6:12:1f:5c:de:44:
         88:7e:3f:46:70:29:a1:5b:30:b9:a8:4a:32:d1:8b:cd:cb:c1:
         5b:60:e1:ec:4d:e0:8d:e2:5c:72:21:ff:88:d7:73:e1:24:7c:
         4d:67:3a:75:ab:49:0f:52:bb:ad:17:f9:1f:72:61:01:a1:af:
         15:e5:ca:6e:fa:12:be:16:b6:1a:cd:df:62:b3:d4:cd:1b:d8:
         01:2d:b4:46:dd:4e:9f:f4:1d:fa:95:47:4e:08:7b:d6:04:4f:
         c5:a3:f8:55:c5:62:2b:dd:38:f6:74:90:db:2a:07:7b:81:d4:
         0b:46:84:fd:6b:93:f4:f0:36:40:45:75:35:70:d8:e3:0d:87:
         c8:24:ef:cd:e5:57:a2:af:38:3a:4d:da:47:25:ab:6c:11:a0:
         a2:ea:88:44:7b:28:06:97:32:37:74:91:41:d7:26:eb:b1:96:
         25:e6:83:67:9e:37:d9:84:18:ad:66:23:49:25:8c:98:1f:9e:
         f6:2c:07:74:8b:5e:29:1a:ea:c5:b9:01:68:17:5a:43:23:1e:
         ca:c2:6c:20:8b:db:a0:91:23:a5:64:23:7b:89:a6:26:e8:86:
         4f:c8:84:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:51 2026 by rpki-client