Error: rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
File:                     rlEpNifxvXqfU3iOKmXqBBNGpwI.mft (raw, json)
Hash identifier:          KwsvAurM9rBpa69cTlPC/RrEyPTcE3hNYzh47RRNwR8=
Subject key identifier:   CE:4A:17:DE:4A:9B:FA:E6:DA:D9:35:9E:99:FE:36:70:30:70:58:E2
Authority key identifier: AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02
Certificate issuer:       /CN=F3620C16AR/serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
Certificate serial:       04F9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
Manifest number:          04ED
Signing time:             Sun 11 Oct 2026 03:28:49 +0000
Manifest this update:     Sun 11 Oct 2026 03:28:48 +0000
Manifest next update:     Tue 13 Oct 2026 03:28:48 +0000
Files and hashes:         1: rlEpNifxvXqfU3iOKmXqBBNGpwI.crl (hash: 29vRxH7cgrAUKShZw7lNxuHvtp4zefmTK1RQSloWH3E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                          rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AR, serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
        Validity
            Not Before: Oct 11 03:28:48 2026 GMT
            Not After : Oct 13 03:28:48 2026 GMT
        Subject: CN=6acb0271-04d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:7b:af:48:e9:f9:d1:c4:d0:31:f7:dc:61:
                    51:e1:38:0b:ae:1c:29:27:49:5f:53:df:0b:65:8e:
                    a2:03:c8:90:8c:51:d1:d3:1e:d5:9e:ce:f7:1f:9b:
                    07:94:92:7f:33:c5:c2:09:c3:73:b7:30:70:32:2c:
                    3d:56:0c:34:6f:0d:21:f1:26:18:e8:1a:0e:29:bf:
                    ca:cf:e6:1f:fd:4a:ce:dd:87:41:e3:9c:6a:7d:78:
                    61:37:0b:b2:4e:af:1b:1e:fd:79:63:07:b8:f1:73:
                    d6:48:fb:9a:cf:61:07:31:93:d3:13:52:87:95:84:
                    c5:62:e6:4c:f0:53:a1:01:1f:67:e9:67:a4:4e:bc:
                    4e:64:fa:73:7d:0a:5f:bf:4d:fd:44:23:53:89:82:
                    d6:9d:e5:f5:5a:9b:74:08:94:4f:39:a4:ac:31:d1:
                    5c:b8:40:7c:b0:ea:98:74:4d:87:39:c8:64:03:76:
                    80:bd:cc:1c:45:8d:d6:9e:e1:44:64:e7:17:55:f0:
                    4d:39:47:38:75:6c:1d:b7:c8:0b:5d:fb:af:d1:66:
                    ec:03:96:a4:55:53:63:55:82:5c:0b:92:64:72:df:
                    0b:5e:70:00:6a:8d:2e:6f:cd:54:a9:07:8f:bb:55:
                    70:1a:11:bf:93:80:6b:21:23:2f:3b:6e:81:6d:9f:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:17:DE:4A:9B:FA:E6:DA:D9:35:9E:99:FE:36:70:30:70:58:E2
            X509v3 Authority Key Identifier:
                keyid:AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9e:e0:b8:ff:5d:5d:09:f1:00:5b:f2:61:46:73:0a:9e:a1:
         03:f7:84:43:cc:bc:63:41:61:a8:21:b2:b8:38:39:6c:be:ad:
         76:bf:d4:45:a0:47:5b:76:a1:1b:76:13:56:07:0a:25:85:8d:
         a8:0f:1d:e2:f9:9e:ff:95:e7:12:db:a4:ba:88:98:94:ae:b2:
         33:84:b9:37:b0:09:ea:9a:53:4d:1b:a5:f4:26:15:2f:d1:f3:
         b3:61:da:94:7f:a8:5f:eb:35:4c:b7:d4:12:f0:dd:22:17:46:
         53:0d:4d:5f:f5:07:05:cc:8d:ea:51:a9:ba:8b:f3:69:c8:6a:
         f6:ea:c8:c6:22:34:16:20:8a:3d:1f:a1:c0:4b:c4:c4:cb:53:
         73:63:92:5a:b4:fe:66:7b:22:ce:3f:96:9c:75:e6:e1:60:cb:
         3f:f2:e6:ce:10:0d:1b:ad:ec:b1:c0:71:61:a1:b6:e6:7d:49:
         df:b6:80:4a:6a:59:6f:24:e7:67:73:a9:a5:2b:3e:bb:cf:ab:
         a8:a6:f8:aa:78:d6:a1:44:5b:39:bc:6f:fc:27:73:d1:80:ea:
         39:d7:71:7a:19:2c:4f:f5:d8:a7:1d:78:89:9e:64:78:43:6b:
         be:81:f6:6e:ee:f9:59:39:21:bc:77:31:25:a4:dc:0d:b4:41:
         ab:a9:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:50:25 2026 by rpki-client