Error: rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
File:                     4xEv77cGGMJWaxygluyNG7Xzucs.mft (raw, json)
Hash identifier:          uFxgutl2WctYLmRV5fxkd4QoYRcoQK3iqkIBVOsqAH8=
Subject key identifier:   6C:0D:12:99:AC:04:D2:31:12:C2:FF:4C:F8:62:18:FA:27:59:7D:2E
Authority key identifier: E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB
Certificate issuer:       /CN=F367FC4FAR/serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
Certificate serial:       0E97
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
Manifest number:          0E95
Signing time:             Thu 24 Sep 2026 01:05:14 +0000
Manifest this update:     Thu 24 Sep 2026 01:05:12 +0000
Manifest next update:     Sat 26 Sep 2026 01:05:12 +0000
Files and hashes:         1: 4xEv77cGGMJWaxygluyNG7Xzucs.crl (hash: VlRFqmtTMygd8rFsvGQL+WsUOC5GcV8xq4I8LWqrqhQ=)
                          2: CDF354A2AC2A11F18CD16CF0CE1D38B0.roa (hash: sknKm+iCUkffE/37S3al1b5OJSTfz4T+h17OUeQxUQw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                          rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3735 (0xe97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAR, serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
        Validity
            Not Before: Sep 24 01:05:12 2026 GMT
            Not After : Sep 26 01:05:12 2026 GMT
        Subject: CN=6ab47749-ce84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:3d:c6:99:dd:3d:19:4e:10:9c:0b:81:d7:
                    fc:25:c7:10:ad:03:5b:cb:d6:c1:e9:89:cf:b3:5f:
                    f4:b7:5d:c9:28:b8:c7:2c:08:74:a7:7d:ee:99:47:
                    c3:39:f3:d7:7c:0b:b5:9e:c7:59:71:0a:63:7c:b6:
                    a1:7e:3b:cc:06:49:b9:75:1d:b8:d3:df:c8:54:43:
                    6c:38:a7:be:1e:42:c3:24:81:6e:6d:72:82:27:93:
                    f2:fd:f9:0e:c5:cd:18:e0:4c:a2:a7:f5:da:7e:b5:
                    88:b7:3a:36:3b:25:0e:36:eb:e9:9b:cb:9b:bb:1e:
                    cc:05:01:f4:c7:2d:ce:a9:f3:4b:4f:21:86:4d:03:
                    6f:16:bb:6d:a4:85:69:af:17:28:ac:5f:71:29:c0:
                    ec:24:72:68:6e:67:23:15:0b:57:c4:4c:29:d9:e4:
                    c3:9d:21:71:17:72:37:2a:a3:71:4a:33:5c:4f:76:
                    72:6f:58:97:e0:ce:01:1e:79:3f:0a:fc:f8:86:f6:
                    61:5b:e6:3b:90:77:70:a7:a5:01:6c:1a:87:d0:18:
                    ff:76:9b:da:db:6d:94:94:4b:66:5f:bd:18:43:43:
                    6a:79:10:84:a6:08:86:1d:bb:9e:f1:c9:e9:96:d0:
                    46:39:0b:fe:19:0a:01:09:be:9a:fd:2b:a3:09:52:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0D:12:99:AC:04:D2:31:12:C2:FF:4C:F8:62:18:FA:27:59:7D:2E
            X509v3 Authority Key Identifier:
                keyid:E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fa:7c:5b:fc:fe:dc:cc:2e:89:a1:92:a1:da:be:0d:6a:f1:
         44:8f:32:8b:04:93:0f:ae:89:66:ff:73:35:52:b9:82:1e:e4:
         98:3f:d4:c7:51:68:d5:ae:c6:50:d6:c9:9b:49:b4:1e:1d:8f:
         5f:84:0f:b6:45:ee:ab:24:ea:c2:06:c5:d7:5e:9f:36:9c:5c:
         44:34:c4:c8:5e:c6:2f:f5:aa:1b:98:93:da:ed:37:4f:31:b7:
         da:14:1f:a1:01:67:89:38:88:34:f7:f3:1d:1f:0e:c0:16:ed:
         7c:c4:f6:27:94:9f:fc:09:59:f6:e1:12:f3:8c:18:9e:ba:be:
         ea:6a:49:5e:af:d0:05:d4:59:4b:d5:b5:52:a0:26:97:5b:3a:
         05:cb:8e:a8:0e:a2:05:be:87:3f:d4:c2:14:97:bb:49:92:a8:
         7d:5e:4a:c5:79:2a:15:1f:ce:cd:ea:1c:2d:41:bb:31:65:db:
         b2:a0:a6:ac:21:82:02:f5:de:6a:dc:41:c3:05:cb:a9:2d:55:
         c5:f9:b0:2e:f4:d8:6a:b1:50:8f:c1:d0:cd:de:73:71:88:04:
         19:02:29:77:dd:64:91:82:41:80:97:ed:b4:b6:bc:60:7f:5f:
         c6:e7:9a:24:09:b3:85:eb:25:3c:cb:60:2c:e4:73:c2:cb:59:
         d5:c3:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:18:17 2026 by rpki-client