Error: rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          xPbVOysoW0Aq0JQRaN/pXfRqGGgqr7yiUCqofDnyeAg=
Subject key identifier:   9B:3D:65:5B:68:88:AB:D3:CD:76:DB:6F:23:CD:B6:36:D6:9E:C6:16
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0EBE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0EBC
Signing time:             Thu 05 Nov 2026 01:05:28 +0000
Manifest this update:     Thu 05 Nov 2026 01:05:27 +0000
Manifest next update:     Sat 07 Nov 2026 01:05:27 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: twHByTJ+ILmY4XPUUDAkSI+s1NE2Mzp6hwnhGl227bM=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3774 (0xebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Nov  5 01:05:27 2026 GMT
            Not After : Nov  7 01:05:27 2026 GMT
        Subject: CN=6aebd658-b890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:f0:c8:9f:b5:7d:44:b1:24:95:6a:50:a8:
                    c6:57:64:36:7b:85:f0:74:1b:ea:6d:fe:ea:49:00:
                    71:0b:85:f3:0e:8c:f4:73:1a:18:13:8c:91:43:44:
                    18:38:c4:46:66:1f:b7:75:7f:79:60:86:0e:82:b9:
                    c4:9c:1a:07:96:b9:29:64:62:00:99:2e:4b:82:99:
                    3b:59:e6:37:23:88:39:8e:26:3c:fc:e7:c6:ae:30:
                    85:65:c6:b0:9d:60:b3:68:47:3a:8e:1a:e8:3f:68:
                    f7:eb:29:58:d9:e6:2f:ed:79:60:1f:14:d7:a0:f8:
                    50:92:85:ce:66:d5:3d:12:c0:77:30:6b:92:b6:8e:
                    be:78:a1:9d:2d:e7:73:cb:6a:ad:cc:33:90:5e:68:
                    6b:92:39:8d:a5:0f:30:1f:b9:64:d0:9f:7c:5e:9b:
                    ca:ab:37:bc:06:f4:a8:6b:43:a4:64:0d:05:45:0b:
                    74:60:b7:53:79:92:11:44:d3:fc:90:87:2e:de:d3:
                    70:64:d6:c8:ea:d5:db:e0:e7:d5:a1:11:33:6b:58:
                    13:87:3c:a6:60:5e:07:b3:33:87:a8:d8:4b:c1:ae:
                    c8:cf:04:96:d1:71:c1:46:8e:4c:63:39:e3:a6:1f:
                    48:b6:b7:ff:c6:7e:a7:8b:e9:52:c4:5e:49:50:c1:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3D:65:5B:68:88:AB:D3:CD:76:DB:6F:23:CD:B6:36:D6:9E:C6:16
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:24:5e:c7:4d:07:63:ae:b5:b0:08:48:8b:ea:c5:43:bb:41:
         da:1f:b9:bb:ab:c8:03:a9:93:c1:92:fc:e3:f4:a8:b4:0a:59:
         e7:23:83:eb:9a:32:ce:b1:c5:40:5f:90:a0:65:4b:fe:8e:e3:
         64:6b:ef:1a:e2:b3:29:8a:5c:85:c0:60:0c:a7:3a:03:10:8c:
         fa:64:3d:6f:af:ea:be:a2:12:cf:39:55:30:94:92:c3:a2:3b:
         06:8b:9d:62:f3:6e:7e:bb:f3:a4:d3:96:ac:83:9c:3e:23:28:
         25:c9:2e:ec:ca:c5:19:61:47:eb:7d:8f:7d:22:2c:19:10:b3:
         18:05:5e:4c:ab:98:cc:94:9e:ed:60:65:6a:d1:91:98:43:46:
         47:c3:47:2c:82:06:b3:d0:d1:d1:85:c3:b2:d4:72:11:a6:60:
         47:bf:94:5c:44:52:ce:98:ff:e5:87:6a:5b:05:d4:30:1a:5b:
         29:0f:9d:c3:00:fc:35:31:5b:91:c2:47:43:d9:47:34:73:0a:
         95:c1:e2:af:63:29:06:1c:5e:86:f7:a9:3d:0d:31:b3:55:ec:
         2d:f6:8e:d9:48:d8:a4:1e:a4:b8:71:9d:be:0f:d8:1d:e0:27:
         9e:67:5b:ce:1d:08:d3:11:4c:5d:1a:da:e8:b4:18:e2:b7:6d:
         47:6d:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:12:08 2026 by rpki-client