Error: rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft
File:                     FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft (raw, json)
Hash identifier:          +lQz2ZeTo4NwcwSEfQt61cpRLM4vXSkUg+gou8XlOo4=
Subject key identifier:   C5:EF:AD:4C:62:C8:4D:E4:43:FE:7E:9B:ED:30:39:6A:2F:23:2E:0B
Authority key identifier: 15:3D:C0:11:51:20:E2:40:A0:4A:AB:9A:E0:4F:AD:64:79:26:B1:24
Certificate issuer:       /CN=F367F26DAR/serialNumber=153DC0115120E240A04AAB9AE04FAD647926B124
Certificate serial:       0AD9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft
Manifest number:          0AD3
Signing time:             Thu 24 Sep 2026 01:19:40 +0000
Manifest this update:     Thu 24 Sep 2026 01:19:40 +0000
Manifest next update:     Sat 26 Sep 2026 01:19:40 +0000
Files and hashes:         1: FT3AEVEg4kCgSqua4E-tZHkmsSQ.crl (hash: cY+4Jy3o6PlbVoyq71h29w6H2KYxJFNMu7IGIXVHViI=)
                          2: 16018B34188C11F1A67028E5DAE4EC9C.roa (hash: YK06nGsXOl3zmJE+1ADa7T9j6CDDbGC/qd8vMyl5oV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft
                          rsync://rpki.afrinic.net/repository/arin/FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DAR, serialNumber=153DC0115120E240A04AAB9AE04FAD647926B124
        Validity
            Not Before: Sep 24 01:19:40 2026 GMT
            Not After : Sep 26 01:19:40 2026 GMT
        Subject: CN=6ab47aac-9cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:be:5b:00:b9:0d:29:bb:36:11:7d:79:85:08:
                    12:aa:e9:a2:92:55:f3:ef:ad:c3:4d:48:63:3d:6d:
                    50:46:a5:17:a2:b9:a7:62:03:f6:4e:47:8c:05:9a:
                    b7:cf:37:6b:01:06:fc:76:20:cd:d3:61:49:8d:64:
                    83:eb:ba:5d:ea:5b:cd:a1:9c:98:21:26:6c:ae:42:
                    e9:76:82:96:0a:ec:75:cd:da:3a:6c:33:ab:b1:19:
                    b9:91:9c:a6:fc:98:a1:c5:04:82:f2:01:70:96:47:
                    54:06:a2:28:72:69:5e:68:1a:8e:e6:13:e5:c9:0d:
                    5f:13:de:34:bd:a7:57:69:dc:3f:8e:cf:d2:3c:45:
                    25:a9:9b:77:81:33:84:22:df:88:98:9d:8e:3a:ea:
                    69:01:79:46:8f:60:36:75:8b:35:1f:ca:da:8c:4d:
                    b4:b1:a4:7f:3d:50:b0:26:1c:09:cd:fd:88:4c:c2:
                    f1:25:e0:af:d9:98:db:be:91:d7:8b:46:f9:a6:a1:
                    b8:ff:c5:20:e9:31:0d:3f:99:cf:0f:0a:5a:92:d2:
                    cd:94:09:67:d1:87:51:e5:58:c4:5f:b7:d1:f8:7c:
                    a2:07:7c:6f:a1:99:84:f9:86:f7:94:e7:54:7b:17:
                    39:b6:6a:71:d8:6a:4b:41:75:35:c5:e6:0e:b9:8a:
                    8d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EF:AD:4C:62:C8:4D:E4:43:FE:7E:9B:ED:30:39:6A:2F:23:2E:0B
            X509v3 Authority Key Identifier:
                keyid:15:3D:C0:11:51:20:E2:40:A0:4A:AB:9A:E0:4F:AD:64:79:26:B1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:e8:52:88:b8:d2:dc:81:03:71:13:d4:9e:57:01:68:05:
         49:79:9a:ef:46:4b:69:90:ac:e3:0a:61:f0:82:75:bc:c6:3e:
         c0:ef:65:4c:39:ce:79:10:76:ec:27:71:21:5d:b6:b7:d9:26:
         25:49:70:79:87:d4:cf:af:77:78:88:c3:2c:58:c2:74:fc:c2:
         90:93:e3:55:91:55:2d:68:42:bc:57:e7:b4:d3:43:12:96:34:
         30:ed:b5:f3:b4:55:94:54:8f:c4:35:68:53:1a:00:30:9b:c3:
         0d:f9:70:75:30:c3:e1:9d:93:c9:c0:7b:a6:ef:9d:8c:56:a7:
         8c:ad:4c:59:e5:d4:05:6f:e7:60:70:e1:93:c5:c7:62:e9:ea:
         99:09:00:fc:36:22:fc:4f:e4:a2:3f:0c:dc:17:00:ca:c3:7a:
         13:20:30:b9:71:2d:85:93:cf:11:4f:e3:b1:48:fc:d0:da:42:
         a9:31:3c:ec:1d:08:1f:e4:3c:ea:6c:4d:e0:5f:9b:84:dd:60:
         9a:97:ce:60:e1:d4:a4:ab:ce:88:a3:14:48:0a:76:8d:a4:72:
         1a:9b:8d:cc:d9:e4:67:79:bd:c2:01:11:5f:4b:bf:90:12:46:
         16:22:18:a3:3f:04:ac:d4:f1:97:f1:dd:f8:74:d7:36:4b:f7:
         12:a7:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:22:59 2026 by rpki-client