Error: rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
File:                     Go8PdPo6YC9H_Ow2uLP3niHzABg.mft (raw, json)
Hash identifier:          JjklCwnXptepLYFYmznLb2obtu2GTlEG2wjjOWv+wEM=
Subject key identifier:   25:6C:04:F1:3C:C6:8A:8F:87:2E:61:0F:26:05:02:B9:EB:D3:DE:7A
Authority key identifier: 1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
Certificate issuer:       /CN=F3656177AR/serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Certificate serial:       0E4A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
Manifest number:          240B
Signing time:             Fri 25 Sep 2026 01:05:37 +0000
Manifest this update:     Fri 25 Sep 2026 01:05:36 +0000
Manifest next update:     Sun 27 Sep 2026 01:05:36 +0000
Files and hashes:         1: Go8PdPo6YC9H_Ow2uLP3niHzABg.crl (hash: 97yghg6XSZmheiIK9bxI+ZwaRBjYCXGvkQ0pDKphu3k=)
                          2: B0CB3182C8C611E9B220F755F8AEA228.roa (hash: gqrU/z6iXLRtLiCnHFZa0s+2uBK1Ct+5G7ihg1BeuL0=)
                          3: 0E3B72CCC8C811E98D790458F8AEA228.roa (hash: itr9OUnzmKbdqppKMzcknLB4lBw9Ah9MK/Fp31d00b0=)
                          4: B6DAAC5EC8C811E9B566A258F8AEA228.roa (hash: Y4yGjlwVyROuEGeowY33dWqLnQRQW/byvC0cJpLJ8EA=)
                          5: 361323CCC8C711E9B652C156F8AEA228.roa (hash: ZDrsLI1RWkFdQohl1nTyw5JGa4/mTeCrLl2gQVNYxnU=)
                          6: 146302C4C8C711E984B79356F8AEA228.roa (hash: DdSuiwT/ngk7JQ1+7xZSJqCpSkRWy7BhZniM1rPy9e8=)
                          7: E73F0D38C8C611E98A095B56F8AEA228.roa (hash: B5Em/KidBogdtiGbZ1QNgeUY8m5bNBKn2AeQxhe44fA=)
                          8: 66123256C8C811E99A726E58F8AEA228.roa (hash: u5cowoJMX4Hxd12oQmnhhFSMAoh12QYhoXjiZuk5pKI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
                          rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3658 (0xe4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AR, serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
        Validity
            Not Before: Sep 25 01:05:36 2026 GMT
            Not After : Sep 27 01:05:36 2026 GMT
        Subject: CN=6ab5c8e1-fa38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:a2:c5:9b:71:e2:c6:da:4d:79:77:60:6e:
                    41:84:9c:cb:73:8e:11:ff:43:e3:82:4c:92:c0:a3:
                    91:ad:07:f9:fb:30:45:9e:2b:5c:65:3c:02:98:74:
                    09:59:33:24:25:79:03:48:60:e2:d1:31:aa:6e:d0:
                    1f:ff:ee:fb:3d:4c:ac:8a:72:54:2a:a5:95:b5:17:
                    ce:7b:d0:9e:cf:d3:ad:70:9e:62:33:2f:da:17:19:
                    d1:c1:6b:70:08:ab:4c:2a:de:fa:a3:c5:5c:99:f1:
                    bb:39:63:bb:ef:ca:72:d9:3f:15:b3:c1:56:d3:ff:
                    4d:bb:6f:0a:10:0e:89:51:61:83:3c:d8:a6:48:5a:
                    6c:75:8d:fc:b9:8c:b2:57:cd:e3:a4:95:54:23:64:
                    f4:5b:de:0d:0a:ce:da:5b:fb:6c:15:3b:21:60:a0:
                    d2:db:2f:ee:5c:22:39:1b:33:05:76:b6:ad:46:cb:
                    f4:90:66:4b:a7:2f:ea:24:29:3e:07:69:5c:46:7d:
                    95:1e:8d:c9:b0:c1:b9:bd:7b:f9:0b:f2:df:eb:2e:
                    c4:7e:4c:3a:f3:8c:38:8d:8e:32:da:76:15:a2:df:
                    70:17:a3:ad:83:ec:e7:a4:68:83:94:bd:f7:76:79:
                    f8:2a:66:6f:f8:25:f4:27:da:e3:09:4a:ee:1f:74:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:04:F1:3C:C6:8A:8F:87:2E:61:0F:26:05:02:B9:EB:D3:DE:7A
            X509v3 Authority Key Identifier:
                keyid:1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:06:67:3b:5b:eb:da:4d:1f:85:7b:29:06:09:10:09:12:a3:
         a4:8c:76:f1:1d:85:57:16:de:6f:2c:37:69:33:6a:24:dc:43:
         08:88:3a:96:fb:97:c2:9c:13:19:8c:81:c6:b2:1c:5f:ec:47:
         8f:12:76:1f:27:00:fe:3e:1d:27:94:c5:25:2d:43:1d:4c:d9:
         12:5b:38:a1:33:94:d8:46:eb:d8:c1:d0:70:65:8b:99:ca:9a:
         5f:d8:a9:5d:a3:8e:33:83:8e:b7:b7:92:b0:7d:a8:c5:1e:0f:
         63:9c:f2:e2:fb:07:08:58:74:52:07:6a:62:c7:06:48:0e:bb:
         79:88:5e:d8:37:a9:27:d3:0a:6c:68:01:da:12:67:11:5c:d1:
         9a:94:78:7a:14:5f:58:9f:50:f1:b4:7c:c7:5d:18:21:3d:61:
         2f:27:3e:cb:96:fa:6d:1f:d3:b3:73:b7:a7:88:02:aa:cf:42:
         07:bb:48:8a:ca:63:ac:ab:7e:63:b1:31:e2:84:d8:86:fc:73:
         85:f6:d6:b6:46:db:2e:53:60:43:89:1f:8f:95:3a:2d:86:28:
         d2:ec:ca:9a:6b:a3:d3:b6:e5:2b:ed:cc:cd:2b:5d:8f:8b:de:
         bd:7e:e0:3d:e7:b7:94:42:0d:93:fd:17:6d:d6:7a:9f:e8:e6:
         f7:6a:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:57:33 2026 by rpki-client