Error: rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
File:                     rSMXDJgzsl2HE6A3DEhgcko8h-o.mft (raw, json)
Hash identifier:          CMZFIwoId6Q3e7mjtLkva1iR7X0aB2O7rhf8Ma4BDuY=
Subject key identifier:   17:19:E3:97:46:04:EE:AF:B7:A1:9C:6D:BA:43:0D:78:79:13:54:77
Authority key identifier: AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA
Certificate issuer:       /CN=F362B8A8AR/serialNumber=AD23170C9833B25D8713A0370C4860724A3C87EA
Certificate serial:       0818
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
Manifest number:          0817
Signing time:             Thu 15 Oct 2026 02:04:55 +0000
Manifest this update:     Thu 15 Oct 2026 02:04:54 +0000
Manifest next update:     Sat 17 Oct 2026 02:04:54 +0000
Files and hashes:         1: rSMXDJgzsl2HE6A3DEhgcko8h-o.crl (hash: p0bRpje6bmh+MQ0QRHMgHPaeDnX4vWD3z3D4tGhlWQI=)
                          2: AE53A0009EA911EB9AC82A41F8AEA228.roa (hash: 1bd0I/6rZsKsWNhyL71qhITbxUZVlPI0gALS+mourjE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
                          rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B8A8AR, serialNumber=AD23170C9833B25D8713A0370C4860724A3C87EA
        Validity
            Not Before: Oct 15 02:04:54 2026 GMT
            Not After : Oct 17 02:04:54 2026 GMT
        Subject: CN=6ad034c7-40ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:46:ce:2d:50:ce:18:f4:81:ae:5f:51:1e:
                    62:09:14:f3:98:8e:d0:70:e7:af:78:e3:60:eb:35:
                    80:1f:85:e5:f7:b7:f8:33:45:30:e6:e5:cf:07:63:
                    cd:e8:4a:f6:e0:5f:17:cf:f0:5a:fa:97:7c:c2:d5:
                    34:49:b4:20:7f:78:ec:cd:af:ef:94:1b:b2:75:1c:
                    60:0b:59:f2:63:96:f5:d3:b4:4a:09:64:61:c3:68:
                    9c:c7:5a:7a:a3:d8:cc:23:c2:5d:b1:8e:17:f1:de:
                    70:80:1a:03:63:b6:31:97:16:4f:19:d8:dc:ee:bc:
                    cb:0d:6f:1c:e3:3c:9f:b3:ab:16:24:c0:5f:57:bc:
                    a7:d4:fb:b0:e8:57:e7:72:da:98:b5:13:b6:5a:54:
                    5e:3c:27:77:c3:31:2a:52:8f:75:d5:38:21:46:86:
                    bc:1f:d5:1a:06:fe:6a:17:08:a4:f4:9e:39:45:31:
                    ef:e7:a6:3b:a2:a9:f0:a8:b4:e8:35:f5:91:a4:d9:
                    02:80:13:9a:74:a2:b2:a5:a6:d5:9e:ea:9b:82:78:
                    e3:69:a7:21:7a:ed:5f:cf:ad:cb:d4:9d:ba:5f:40:
                    d2:9d:f5:a7:4b:40:22:ca:84:bd:70:52:a4:3d:a1:
                    0a:39:c2:86:dc:44:4b:c1:89:f7:e3:12:12:3c:05:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:19:E3:97:46:04:EE:AF:B7:A1:9C:6D:BA:43:0D:78:79:13:54:77
            X509v3 Authority Key Identifier:
                keyid:AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:88:ee:d5:86:8e:d2:fa:02:fc:a0:81:f5:41:65:33:ce:2e:
         b5:ba:0b:29:5d:e0:25:2f:ec:12:2f:07:74:21:59:1c:80:d4:
         9c:1b:b0:eb:4a:f0:9f:3f:d4:cc:a6:d9:36:a2:5f:eb:81:21:
         0d:d1:43:28:8b:70:e3:68:67:9a:9a:7e:1d:ad:fa:6d:14:89:
         ef:c7:5b:59:de:e6:2a:6b:71:fc:1b:9b:03:3e:2a:f0:b6:c4:
         d7:02:0e:35:ab:1d:c7:fb:16:76:f7:91:58:f9:75:a8:f3:b4:
         3c:aa:56:76:2d:9d:79:5b:65:65:a7:a0:fa:40:10:b8:70:e7:
         56:b8:f3:c6:2f:75:cf:35:3b:ca:8b:b4:16:31:64:88:e6:e7:
         2d:08:4e:be:21:bf:7e:13:b3:9d:3f:97:02:35:16:03:79:56:
         f8:b0:07:3e:5c:90:c3:ef:2c:9c:5e:87:87:eb:dc:19:96:e4:
         19:bd:91:ca:0e:42:0e:bc:1c:0b:54:f0:c3:3f:dc:bf:89:b3:
         ef:fe:f3:fd:bf:65:fb:1c:c6:29:06:fb:cc:85:cc:f8:98:f3:
         e2:8c:3f:96:28:23:08:33:c7:a2:55:83:a3:16:62:39:d8:f9:
         57:62:01:ea:44:14:21:2d:32:a4:29:ee:e2:4f:e9:91:9e:b8:
         97:81:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:06:01 2026 by rpki-client