Error: rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
File:                     w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft (raw, json)
Hash identifier:          oSVPNO3xMhzySS41egSX1ytozPOp8cuHHKExcrhDBvk=
Subject key identifier:   DB:FB:00:8D:53:29:A2:B3:37:2D:2C:DC:55:3C:30:BF:83:3D:5B:C5
Authority key identifier: C3:85:74:21:D5:DB:8B:61:44:D0:7C:3C:59:37:1F:42:03:17:A9:77
Certificate issuer:       /CN=F36CF917AR/serialNumber=C3857421D5DB8B6144D07C3C59371F420317A977
Certificate serial:       065F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
Manifest number:          065A
Signing time:             Sat 26 Sep 2026 02:45:42 +0000
Manifest this update:     Sat 26 Sep 2026 02:45:41 +0000
Manifest next update:     Mon 28 Sep 2026 02:45:41 +0000
Files and hashes:         1: w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl (hash: JGrFEpyl/n1QzTTbyN/AkZQfsdTlLZUDTczJkgo+I2M=)
                          2: 5002074A8A8911F18559EDB9CE1D38B0.roa (hash: Z5PYBIpWyue4OBGgmLl5UAhP6vxGTSwaWTgoVmQM8bw=)
                          3: 9FD8B6BE8A8511F19A30BDA4CE1D38B0.roa (hash: 20TTeReP9LBEIc4n+ud2MuZvhWvzCQCXDYXfcGRz4u0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
                          rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 02:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CF917AR, serialNumber=C3857421D5DB8B6144D07C3C59371F420317A977
        Validity
            Not Before: Sep 26 02:45:41 2026 GMT
            Not After : Sep 28 02:45:41 2026 GMT
        Subject: CN=6ab731d5-61d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:dd:96:bc:82:d6:97:0f:dc:69:ad:c0:cc:
                    ea:3a:0a:25:28:00:8f:95:77:9e:fe:2b:70:9a:84:
                    d5:1a:d6:7a:ab:82:09:2c:74:4c:cb:c8:76:7d:12:
                    54:50:8d:36:7b:ca:f7:ac:e6:76:78:e2:a5:8d:6e:
                    ad:20:b3:a5:14:c5:a4:23:83:22:bb:de:13:a6:32:
                    bc:3a:02:a4:2c:fd:61:6b:91:d5:8b:6d:02:8c:15:
                    94:05:75:15:9c:27:84:7a:7f:af:35:dd:f6:a9:19:
                    0d:50:7c:74:bf:56:c1:f2:0a:e0:9b:d0:1b:6c:c2:
                    16:9a:91:65:3c:46:b9:93:92:69:6c:53:8e:5a:96:
                    76:96:df:3b:d5:c9:a9:0a:97:90:9c:c8:1a:d7:7f:
                    a1:17:a0:a7:19:41:cc:b2:32:c0:7f:ca:a4:05:1b:
                    28:70:69:c2:b7:ca:b8:db:84:f9:54:b7:1d:46:b8:
                    14:dc:37:da:ec:26:78:37:55:7b:d1:5f:55:1a:ad:
                    63:da:b6:22:af:2a:63:4c:bb:48:05:43:0b:c3:e1:
                    b6:b9:51:ce:96:ad:10:23:83:f8:af:8c:41:62:83:
                    40:24:4c:92:88:f0:1e:95:ff:c5:f5:2a:dc:f3:a2:
                    9f:74:92:33:9d:94:92:c8:d4:94:8f:5c:1d:e6:39:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FB:00:8D:53:29:A2:B3:37:2D:2C:DC:55:3C:30:BF:83:3D:5B:C5
            X509v3 Authority Key Identifier:
                keyid:C3:85:74:21:D5:DB:8B:61:44:D0:7C:3C:59:37:1F:42:03:17:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:42:9a:eb:d1:1a:d4:7c:4e:52:0f:73:71:0e:d6:47:5f:
         1c:c7:1e:a7:60:0f:fd:87:a5:ed:45:62:ff:6c:34:f8:00:d5:
         0c:0a:f6:24:cf:2f:d4:d6:ba:66:f3:84:81:04:57:c4:6f:85:
         a4:2f:79:aa:82:52:47:65:f1:1c:d6:bc:7f:3b:99:13:5d:71:
         67:18:68:9c:a6:b7:60:83:43:7d:1b:f7:cb:e8:ff:a6:ea:fa:
         26:42:39:a7:9c:8e:8d:e5:55:d4:94:09:fb:02:d5:0a:6a:10:
         58:e3:54:2c:65:5f:20:52:bb:31:75:8e:1b:06:65:e4:d5:9a:
         4a:d1:a2:cf:e2:b5:a0:19:0d:aa:3d:07:41:01:0b:82:14:11:
         49:3a:8f:a7:8c:55:59:cd:03:03:71:19:df:dc:45:39:8a:a1:
         dd:ed:d9:53:b6:57:dd:1b:3a:f3:56:e1:43:c5:2e:89:03:c9:
         19:04:e8:e0:40:b6:f4:1b:6b:d1:69:30:c1:0d:97:ed:cb:fd:
         13:21:18:20:16:1d:39:a5:5a:43:bd:e9:a2:ae:31:cd:dc:ca:
         b4:84:14:66:5b:99:50:06:b3:6f:3f:96:6d:08:58:1f:1d:d5:
         9e:96:8d:25:d4:86:8c:17:12:96:98:6b:7d:a2:63:e1:a4:32:
         22:c7:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:51:17 2026 by rpki-client