Error: rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          nddle6z2OD/tIiXyP6QVWkEpQkxtDclNlFwD4LbWQ3Y=
Subject key identifier:   15:43:5D:49:5D:EE:C5:19:CD:9F:B4:D4:87:C7:FB:F8:99:AB:B7:D7
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       056B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          0569
Signing time:             Thu 24 Sep 2026 03:11:38 +0000
Manifest this update:     Thu 24 Sep 2026 03:11:38 +0000
Manifest next update:     Sat 26 Sep 2026 03:11:38 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: qhyXvRBJdvxSH7xI+rf3ZK5AoTVMw+bzuuFqcNKXXH8=)
                          2: 05934784930B11F19AA2B6FBCE1D38B0.roa (hash: nb6/XJ6e4mY9S+Wo7/PcMs8AFDHTkQOgBHpBhQIhJuU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Sep 24 03:11:38 2026 GMT
            Not After : Sep 26 03:11:38 2026 GMT
        Subject: CN=6ab494ea-0963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:56:47:eb:7c:cc:b4:1a:f3:69:2a:61:2c:
                    af:0d:fa:ec:e9:c7:24:bf:14:9d:dc:c2:6f:76:1d:
                    a3:0a:72:48:b6:36:b5:d4:75:4f:ad:9e:df:e4:72:
                    6e:4e:86:3d:52:40:e6:90:a1:dc:29:d2:98:47:b3:
                    8d:9e:9f:1d:e5:d3:c6:41:8e:77:00:fe:4c:5f:6d:
                    48:3c:2b:94:8b:e5:e9:7f:db:54:57:37:a1:a1:bb:
                    f5:eb:63:ec:4e:8d:30:59:9a:41:41:32:ba:7a:4f:
                    86:8a:1f:14:6f:df:f5:38:df:c3:fe:dc:0f:0b:dc:
                    4b:8b:c1:63:13:d7:11:69:71:07:34:ad:39:d1:b2:
                    94:92:30:fb:14:02:b0:c3:7d:78:c3:71:67:85:f9:
                    e0:96:6d:89:0f:f6:2c:ad:8a:26:f8:22:db:f4:80:
                    74:16:c8:ed:ad:2e:02:e5:27:c1:d0:e9:5c:b9:36:
                    e4:c3:ff:ff:59:91:9f:47:87:9f:f0:29:5f:f4:f2:
                    d5:05:6a:d8:5c:1d:75:da:56:85:7d:26:5c:c0:4a:
                    f6:0f:98:7f:bb:b9:44:cc:c8:bf:f8:22:72:0f:3f:
                    54:09:cb:d8:7e:05:00:97:3f:5d:fd:63:5a:19:3f:
                    8b:39:ae:fb:29:34:a1:72:fe:42:84:7c:6f:11:e0:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:43:5D:49:5D:EE:C5:19:CD:9F:B4:D4:87:C7:FB:F8:99:AB:B7:D7
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:06:de:64:b2:fe:19:b1:11:06:84:d8:6c:0f:1e:d4:53:
         90:7b:ca:50:e6:c8:e6:a9:01:f9:d3:1a:27:08:dc:7e:48:3c:
         39:69:9e:05:55:5b:d1:c8:08:41:0c:ab:e0:67:67:fd:2d:8e:
         07:fb:ba:bf:8a:f8:53:77:11:88:04:b5:85:6d:e5:41:85:bd:
         18:48:99:44:32:9a:ef:6d:e0:42:43:5d:04:8b:43:02:fc:43:
         c5:fc:42:5e:45:96:e6:5b:69:3f:7a:53:d8:58:ed:32:b2:bc:
         28:2e:b7:42:42:ac:b3:9b:5e:05:38:6d:ce:77:e8:b1:61:46:
         05:b7:4b:3b:56:5a:69:77:4d:6e:b5:ec:0e:20:35:19:3e:c0:
         87:27:89:49:14:e7:b1:70:8d:e0:e5:0c:c1:76:f3:6b:6f:e0:
         b7:e2:c5:65:de:3e:dc:7c:ea:1f:4f:a5:f1:26:81:0e:85:84:
         c9:e1:00:66:38:b0:48:b1:ab:de:48:b6:f7:d3:26:2d:d8:22:
         b8:0a:c1:cd:da:a2:3d:db:80:37:e8:88:e9:8a:1f:96:38:c2:
         03:f7:42:4a:ee:83:97:34:15:23:c9:cd:42:d9:fe:3d:09:de:
         c0:5d:ec:1f:d3:d5:9d:06:72:82:34:dc:2a:6c:e2:47:87:7d:
         70:6e:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:55:18 2026 by rpki-client