Error: rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File:                     ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier:          uA8bevRisa1F53ihEyiYnxijOqlHnBisLlR39iqw9aI=
Subject key identifier:   20:70:42:41:32:D9:23:19:AC:D1:46:DA:3B:09:4D:4F:DC:11:1E:01
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer:       /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial:       05CC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number:          05CA
Signing time:             Tue 22 Sep 2026 03:02:34 +0000
Manifest this update:     Tue 22 Sep 2026 03:02:33 +0000
Manifest next update:     Thu 24 Sep 2026 03:02:33 +0000
Files and hashes:         1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: 6+GViF9QQisj9cAlA7V8lj0eRnz+0XM78GqGAppIkVM=)
                          2: 14676520195C11F1882310E6DAE4EC9C.roa (hash: MEXom9qqtVBHi9cTLvqwaxyNpMlwORLkLiKzmbGhhwI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                          rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
        Validity
            Not Before: Sep 22 03:02:33 2026 GMT
            Not After : Sep 24 03:02:33 2026 GMT
        Subject: CN=6ab1efca-b025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:9e:87:ab:21:46:ec:73:27:0c:35:6d:d3:
                    b6:18:6c:ce:54:f7:e5:13:ad:59:02:93:6f:19:dc:
                    62:61:94:4b:cf:93:42:0b:12:ba:dc:4f:8f:06:30:
                    be:a7:d4:8e:71:b5:95:28:d3:ad:93:4b:d9:d6:33:
                    07:29:5d:f2:65:99:52:04:7c:b3:ba:8a:b2:ba:57:
                    6e:ff:06:00:d6:8d:1a:ac:80:aa:f0:ea:25:ef:fd:
                    4c:b6:bd:6f:4a:70:68:11:4a:00:77:09:5b:99:df:
                    26:12:aa:e1:4f:62:46:56:c4:b6:fd:0c:3e:72:7c:
                    42:ff:75:be:d7:bd:ed:ca:c2:63:c0:25:7c:3c:d2:
                    6b:42:0e:c6:75:2e:e1:f6:63:bd:e6:66:4d:36:25:
                    f1:6f:0d:f5:ec:17:6b:4a:1a:2d:14:15:0a:aa:79:
                    f6:13:36:9f:ba:5d:39:20:f1:f2:e6:ef:5d:fb:09:
                    a4:af:3b:5a:a4:21:98:b1:1a:cd:42:9d:51:7a:3e:
                    ec:9f:b1:f4:ce:d1:98:49:2e:bf:97:f5:87:a9:95:
                    74:2c:2d:ee:63:58:1a:41:c9:3b:df:1b:e0:b8:ed:
                    49:04:03:0e:f8:a6:00:dc:1c:40:5e:d8:e5:ae:4e:
                    0e:fe:95:c2:81:1a:3c:3e:65:76:ae:dc:04:01:84:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:70:42:41:32:D9:23:19:AC:D1:46:DA:3B:09:4D:4F:DC:11:1E:01
            X509v3 Authority Key Identifier:
                keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6c:4a:29:c5:98:c9:6a:a3:0a:c4:40:8f:42:a5:1c:5e:86:
         df:16:da:9b:64:cd:a0:66:eb:15:b1:5e:d2:64:42:6b:85:2f:
         87:da:c4:09:6f:25:3f:c6:00:35:57:41:cc:7c:50:ca:ba:d9:
         d8:a9:bc:cf:4e:4a:07:4e:14:b8:b4:7d:b4:b9:45:f2:e0:71:
         e3:d3:3e:99:e4:57:61:04:fe:aa:49:2f:18:85:6b:bf:05:75:
         5f:07:5e:ea:a6:4c:28:4e:15:34:c5:d1:8a:4a:7a:d4:2b:5a:
         bd:a2:6a:f1:9d:11:60:2c:72:a0:9f:74:20:80:8f:07:9b:16:
         a9:3d:05:9a:14:06:35:7b:4e:67:c8:48:16:f8:55:fb:20:66:
         24:16:8e:39:9c:60:c8:bb:05:44:0a:76:63:16:e2:e6:36:84:
         34:17:cd:e5:80:32:ba:4b:b9:4c:81:20:08:c8:4a:dc:f1:92:
         6a:3a:23:86:3d:96:fd:a1:8d:54:11:3d:73:58:83:c0:c9:d7:
         d5:39:0e:1d:28:30:52:54:07:48:bf:0a:eb:8e:b0:15:0f:b9:
         59:16:f7:e9:75:43:b0:7c:5a:ce:b0:74:73:54:5d:72:05:09:
         92:81:92:1a:6f:9c:1f:36:7b:23:d4:a9:fd:bf:7a:f7:db:f0:
         0f:5b:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:00:54 2026 by rpki-client