Error: rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
File:                     rvs0nSNMbGbEJJJb7hApnarwubw.mft (raw, json)
Hash identifier:          LHtVKR9Q9E3iju/1/9e4xXjr0lXqNSCCcTDqu9UP9QA=
Subject key identifier:   FF:06:3A:00:C5:C0:0E:66:4F:B8:35:CE:F6:E9:CB:5D:CA:F9:7F:7D
Authority key identifier: AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC
Certificate issuer:       /CN=F368B07FAR/serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
Certificate serial:       0D1A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
Manifest number:          0D11
Signing time:             Sat 26 Sep 2026 01:09:54 +0000
Manifest this update:     Sat 26 Sep 2026 01:09:53 +0000
Manifest next update:     Mon 28 Sep 2026 01:09:53 +0000
Files and hashes:         1: rvs0nSNMbGbEJJJb7hApnarwubw.crl (hash: NJ74yaO9WNe9DWy5YIP+wpb2oTHlO0Ah2S6IkEpYh38=)
                          2: 7D59CC5CB2B011F09C79E0CBDAE4EC9C.roa (hash: ciMAnSRFb1RAh00SyY2+AZRm5zIar3kt01Ckcd7m8rU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
                          rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3354 (0xd1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B07FAR, serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
        Validity
            Not Before: Sep 26 01:09:53 2026 GMT
            Not After : Sep 28 01:09:53 2026 GMT
        Subject: CN=6ab71b62-30b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f8:fc:69:0c:0f:34:f8:ee:f4:26:17:46:b8:
                    b3:c7:7a:c1:d2:53:a2:64:e7:b7:8f:b6:2f:5d:73:
                    0a:af:a3:db:8f:cc:8f:7e:f1:09:1d:2b:02:81:e3:
                    f8:ed:37:e8:52:dd:0a:b5:dc:0b:91:45:26:a8:4c:
                    e7:99:95:a7:b6:df:dc:2e:59:c7:e5:ac:07:47:1b:
                    4a:90:35:ae:28:2c:f0:67:79:2c:a4:b3:89:45:dc:
                    9c:8f:32:7f:1e:78:f0:c2:8c:e1:da:d5:58:a6:c8:
                    65:53:f6:18:d1:d4:a0:6d:d2:f9:18:66:bb:c9:e0:
                    0a:a8:2c:2f:2d:8a:b9:84:8d:b5:85:4c:15:b0:96:
                    53:0f:03:6b:62:15:48:0a:d4:11:9b:df:7f:6a:2e:
                    1f:d5:03:a2:1f:70:2d:54:90:c8:87:c5:2c:19:19:
                    f4:82:14:09:39:eb:bc:57:5f:6b:7a:a9:e0:c8:dd:
                    b9:9c:ab:6a:0b:8b:e6:06:dd:e3:42:cf:c0:02:b5:
                    96:89:50:19:8f:7f:a0:81:79:35:ef:2b:8e:e8:21:
                    17:74:d3:f4:71:7d:f7:1e:07:5a:a0:03:9d:24:ab:
                    30:01:bd:b6:a1:33:cd:19:5c:fa:fb:80:03:5c:2f:
                    b4:ac:84:4a:8c:dc:b3:41:13:fc:fb:bb:e1:cc:64:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:06:3A:00:C5:C0:0E:66:4F:B8:35:CE:F6:E9:CB:5D:CA:F9:7F:7D
            X509v3 Authority Key Identifier:
                keyid:AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:00:c2:ee:26:9f:4e:f5:9c:eb:90:ae:14:ca:43:c9:c9:47:
         6e:85:17:2c:fb:35:c5:80:d6:f9:21:e9:be:1b:00:df:9a:e3:
         ca:af:02:08:7a:a6:53:42:87:e3:d9:81:8c:6d:2b:2a:e3:40:
         29:3c:bf:e0:ee:6e:bf:e4:8d:25:58:43:de:09:59:b9:f5:f0:
         26:2e:42:06:9e:70:56:89:4d:b9:32:30:10:99:1e:91:1f:28:
         db:02:e3:36:f0:7d:c1:29:89:1c:45:8f:ff:3b:2e:05:e1:c2:
         2e:38:76:73:b8:01:82:d8:84:94:dd:4b:09:f9:ae:18:2f:9a:
         26:19:0e:5e:8d:4c:fb:dc:b1:72:b7:0b:91:e3:e4:55:8c:9a:
         89:74:bc:46:f9:78:6d:1b:2e:00:70:ca:35:de:3f:5c:f2:c1:
         9b:34:c9:0d:88:58:be:00:0a:fe:f4:5f:e5:e9:31:db:b4:c1:
         92:b1:bc:26:2f:31:ba:06:f3:3f:9a:8e:c8:81:31:14:73:63:
         27:e1:de:19:6e:ca:ee:69:96:a6:8b:bb:f0:c0:3b:96:06:16:
         55:e9:cf:bd:74:b0:eb:9a:15:68:95:45:47:b9:0f:3d:16:26:
         73:21:fa:1e:98:09:5c:2d:f5:6c:b3:5c:6c:73:ae:40:bd:e4:
         14:46:28:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:11:05 2026 by rpki-client