Error: rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
File:                     a1799knJ49BMj10MwSmaYW_V-Ak.mft (raw, json)
Hash identifier:          xUN8NLjB6UB+z3AjomSDwsJE+MV96coJggaOOZo6Hto=
Subject key identifier:   E0:AC:EC:DE:14:5A:B0:4B:0D:F7:E5:C2:31:4F:93:80:45:CB:1C:0E
Authority key identifier: 6B:5E:FD:F6:49:C9:E3:D0:4C:8F:5D:0C:C1:29:9A:61:6F:D5:F8:09
Certificate issuer:       /CN=F3644DAEAR/serialNumber=6B5EFDF649C9E3D04C8F5D0CC1299A616FD5F809
Certificate serial:       0827
Authority info access:    rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
Manifest number:          0820
Signing time:             Sun 11 Oct 2026 02:05:21 +0000
Manifest this update:     Sun 11 Oct 2026 02:05:20 +0000
Manifest next update:     Tue 13 Oct 2026 02:05:20 +0000
Files and hashes:         1: a1799knJ49BMj10MwSmaYW_V-Ak.crl (hash: SIDrfp7hQ9d7RKAjP7q+o0yAVmMSXpqvDap7twXrEAw=)
                          2: A16239EC8C3D11F1BE7644A3CE1D38B0.roa (hash: 0JYmzfGx8sLMXKvehvd/IVdvY+JnR2awowJUxkVlje0=)
                          3: 4B70F5508C3D11F1878AED1DCF1D38B0.roa (hash: Br/bcIz5Bxo60iBuJqBn4eFX0dkWOUQkz1oUt9KXjyk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
                          rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087 (0x827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAR, serialNumber=6B5EFDF649C9E3D04C8F5D0CC1299A616FD5F809
        Validity
            Not Before: Oct 11 02:05:20 2026 GMT
            Not After : Oct 13 02:05:20 2026 GMT
        Subject: CN=6acaeee1-df56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:f5:38:ce:8f:39:0b:51:35:ac:b6:7a:c4:
                    7a:2f:44:93:84:01:fd:4e:6a:f1:2e:61:65:8b:d0:
                    43:79:c5:8b:d9:e7:54:fb:4b:91:00:44:c6:43:d4:
                    e9:c9:a2:35:80:45:51:84:cb:ce:de:74:ed:a2:5c:
                    da:67:3d:4e:90:11:ad:89:2c:66:d5:77:4a:70:f7:
                    2b:2f:c2:fc:b9:28:ce:c0:d2:b8:07:83:90:9b:c2:
                    01:97:3b:b7:77:fe:74:fa:8e:5a:6c:27:84:07:bb:
                    e9:6a:d1:45:ed:36:24:a5:4f:58:08:83:ae:81:e4:
                    19:af:88:e4:ee:81:50:5e:db:d9:bf:b9:ed:9e:11:
                    9d:ba:f0:0b:6b:16:01:32:bf:01:4e:c3:8d:d9:9d:
                    d2:33:87:5e:8a:79:96:7f:19:be:80:9c:08:1a:50:
                    e7:54:ad:b8:2a:e0:f6:14:3e:97:8a:d8:2c:9d:17:
                    9f:0a:84:bf:4f:f1:85:de:20:94:e4:bd:88:e5:a0:
                    52:1b:a5:42:a2:dc:83:dd:ec:05:5d:f7:d7:2b:1e:
                    18:1d:2d:1a:cd:c2:c9:f3:4b:b6:3d:cd:24:d1:16:
                    a9:a8:26:c2:5f:d1:85:73:5c:ad:9d:25:09:ea:e7:
                    dd:95:85:8f:3a:0f:1f:01:59:17:43:11:a3:2c:64:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AC:EC:DE:14:5A:B0:4B:0D:F7:E5:C2:31:4F:93:80:45:CB:1C:0E
            X509v3 Authority Key Identifier:
                keyid:6B:5E:FD:F6:49:C9:E3:D0:4C:8F:5D:0C:C1:29:9A:61:6F:D5:F8:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:31:d0:ab:c5:69:ca:da:2e:5b:fb:ae:f3:f8:29:2e:d1:29:
         f7:b6:6f:74:63:de:65:ab:af:95:aa:47:6e:2e:29:c8:a7:d2:
         5b:3c:f9:95:48:48:83:f3:9e:1b:cf:d7:ec:53:bc:38:4d:22:
         b5:32:49:b2:8c:8b:d4:33:3e:cd:cb:8e:6e:b9:11:9d:30:0d:
         ec:47:9b:10:41:d9:98:b3:a0:5d:c7:c1:a2:8f:e1:73:03:c8:
         c4:5a:76:c8:0e:a9:cb:30:f3:a4:de:26:2f:98:6a:a9:fe:af:
         b6:6a:76:2d:44:5b:16:f2:7c:1d:2e:f5:d4:fa:17:4d:2f:23:
         a0:e1:e1:11:04:24:af:86:7d:fd:25:df:e8:6c:86:f3:ba:e2:
         92:87:6e:c1:c6:a9:17:40:93:d6:12:62:05:91:1c:f4:f0:9f:
         42:c6:c8:9d:f4:80:9e:87:63:4b:ab:8e:bd:f1:34:d2:f1:80:
         14:82:0e:d6:fb:ce:c4:54:42:ca:74:cc:09:d4:70:5a:fe:ce:
         9b:8e:e4:16:09:5b:b5:37:b0:48:4e:aa:3d:02:18:45:9b:c0:
         af:18:de:48:a6:59:55:3b:37:4f:41:11:09:49:7a:6a:3f:e9:
         85:34:74:a6:29:a2:19:2f:73:80:af:2e:98:ae:22:a0:f9:18:
         a0:f6:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:32:37 2026 by rpki-client