Error: rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.mft (raw, json)
Hash identifier:          jHzkVx8IeDm1yXPwYqovZ4VibCiNiMSWF8mzXxv6jsY=
Subject key identifier:   96:3B:AB:F7:89:EA:BE:CF:F5:CA:8C:0E:7C:6D:11:66:46:89:8B:F8
Authority key identifier: 8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Certificate issuer:       /CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Certificate serial:       0613
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
Manifest number:          0610
Signing time:             Thu 24 Sep 2026 02:55:09 +0000
Manifest this update:     Thu 24 Sep 2026 02:55:08 +0000
Manifest next update:     Sat 26 Sep 2026 02:55:08 +0000
Files and hashes:         1: iyncQT61Ar1t3qMGRh4aehCExfY.crl (hash: qX2HGhidf+MVLz96aL/W8CTQCbq9LzqkIBuJJoEs0RM=)
                          2: D927C5E0646011F195E8E4BCCE1D38B0.roa (hash: 1oTp9jMogubuZz8gKPeh9PyU8dk/iK14H3bkMhWBgDE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                          rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAR, serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Validity
            Not Before: Sep 24 02:55:08 2026 GMT
            Not After : Sep 26 02:55:08 2026 GMT
        Subject: CN=6ab4910d-9443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:82:ba:98:c5:fc:d6:50:28:ac:9f:ee:a3:0c:
                    d5:ac:b9:d5:15:c4:5f:07:38:59:ee:d3:25:16:d2:
                    e7:f1:d6:77:80:c2:fe:ad:3e:df:6c:6b:62:5c:34:
                    73:2b:b9:03:3a:74:25:65:23:64:95:5d:b4:a4:41:
                    4c:3b:c4:cf:8c:1c:f0:5f:9d:d3:bd:46:98:07:80:
                    ae:19:d6:4d:66:ce:1d:82:cc:10:3d:61:0d:d3:b6:
                    67:db:53:88:1a:ed:1b:0f:d7:c1:fb:cd:bc:70:8a:
                    9e:1c:f7:34:74:b2:47:54:3b:77:6e:20:59:4d:12:
                    ca:23:c0:c1:bf:e2:41:02:d7:0e:32:ab:4c:32:26:
                    16:a4:6e:d2:7f:86:8c:d4:03:1c:82:b3:42:d3:27:
                    24:5e:30:0f:c5:3c:b6:78:86:18:66:10:cc:06:61:
                    82:b2:55:e6:a8:2a:07:59:6a:74:61:3a:b0:1b:5f:
                    4d:9a:dc:59:10:5e:14:a5:c4:e1:05:c1:52:65:57:
                    83:e5:ac:71:95:31:e0:c7:a2:39:61:8a:25:6d:82:
                    91:6a:f1:e7:85:1e:d5:9c:5c:15:d8:02:b7:09:20:
                    67:dc:04:e1:fe:d6:51:d9:f5:2b:c2:e7:db:81:74:
                    44:b5:bb:87:ae:71:70:7a:c2:e9:8f:dc:97:33:15:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3B:AB:F7:89:EA:BE:CF:F5:CA:8C:0E:7C:6D:11:66:46:89:8B:F8
            X509v3 Authority Key Identifier:
                keyid:8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:07:34:0f:b0:91:ec:ef:d6:a9:60:d1:28:52:54:f5:41:50:
         20:f4:f3:a9:4e:67:0e:d7:8a:6b:94:72:01:e7:be:cb:8f:6c:
         ff:52:fd:59:0e:15:fc:91:e3:bd:77:9e:35:75:6d:5c:6f:a1:
         19:42:9f:36:73:72:08:db:77:30:56:d7:7a:7a:46:ac:b6:31:
         95:03:ca:28:d0:8a:91:a7:ed:e5:22:a2:79:f6:68:48:eb:62:
         70:07:6e:3b:c3:50:5a:26:5a:cf:bc:16:ed:3c:fc:f4:b0:5f:
         76:e1:f1:ad:30:48:da:bb:51:03:23:0a:37:50:f1:a9:f0:bd:
         bf:85:0a:3a:9b:13:43:44:ed:f0:6a:b0:1e:4d:86:7d:2e:d1:
         f4:09:69:7f:ba:7a:d2:a4:9f:06:f7:1a:6f:9c:d3:93:8c:14:
         40:a3:01:b0:53:d0:be:eb:b5:2f:dd:b2:42:fd:23:a9:86:73:
         5c:33:64:1b:22:b8:62:86:0c:d5:b8:48:0b:76:67:f6:3a:db:
         d4:e2:40:ff:82:5e:19:95:88:1a:f9:aa:09:b0:9e:9a:23:c2:
         60:0b:53:23:8e:de:52:bc:e5:d2:9e:8e:30:a9:17:7f:48:01:
         a3:ed:1d:7f:29:ad:62:1f:9a:99:36:ef:92:0e:f0:38:84:83:
         da:fa:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:05:36 2026 by rpki-client