Error: rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
File:                     3IJjhe1IHHwjMIBE24nEU5kq3E8.mft (raw, json)
Hash identifier:          mC/jME8kqBkQe6qaFO7wMC+ic2xNHK9o+89ANn4vOK4=
Subject key identifier:   92:8C:ED:48:5D:BF:00:E9:95:B8:DB:8F:28:C5:95:C5:53:3A:E9:81
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Certificate issuer:       /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial:       066F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
Manifest number:          066D
Signing time:             Sun 11 Oct 2026 02:44:31 +0000
Manifest this update:     Sun 11 Oct 2026 02:44:30 +0000
Manifest next update:     Tue 13 Oct 2026 02:44:30 +0000
Files and hashes:         1: 3IJjhe1IHHwjMIBE24nEU5kq3E8.crl (hash: tjVLVI++3l+nPqpSmo/ljGo6yENGX1BfCasZ1odindU=)
                          2: DAB5B58871A111EF9A6AEC6F762E951A.roa (hash: YivpnequhZt8XqJ2qMGWn/m6KFZdSXQEvVcrsKtKSmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                          rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647 (0x66f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAR, serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
        Validity
            Not Before: Oct 11 02:44:30 2026 GMT
            Not After : Oct 13 02:44:30 2026 GMT
        Subject: CN=6acaf80f-064e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:83:3d:52:47:b4:02:34:0a:77:8d:19:1c:
                    cc:dd:1a:d9:33:1c:d3:9b:af:27:18:11:c6:72:f6:
                    f6:53:56:5a:ce:95:f8:6d:9d:e5:a4:94:2d:72:db:
                    b8:ca:fd:62:0c:1e:6c:cb:e3:55:4b:5b:db:78:78:
                    48:1d:9b:52:59:17:81:d6:2d:1c:62:54:2c:8c:c9:
                    6a:5d:e2:c8:f3:f0:07:03:34:65:2d:63:90:94:2c:
                    06:5a:df:32:ca:40:95:b5:40:1a:62:01:a4:59:2d:
                    8c:05:86:1d:69:ba:b9:54:08:89:15:d8:92:53:6e:
                    6f:ab:77:f0:c6:57:e3:0e:a4:45:d0:4b:99:28:49:
                    46:a5:4b:70:e8:40:3f:88:e1:28:eb:dc:f5:a8:93:
                    94:55:98:61:67:32:50:93:4b:ed:b8:9e:84:42:56:
                    24:7b:cc:78:e8:13:be:a0:05:9a:54:48:03:b6:ec:
                    1c:ed:24:54:dd:c8:65:94:0a:4c:51:9a:75:2e:72:
                    85:85:ed:9d:b8:7d:8b:57:7d:cf:4e:1f:5c:dd:54:
                    82:38:6c:7e:7f:6c:c5:fb:26:da:a9:74:4b:33:dd:
                    9a:a9:ad:d7:0e:f8:28:51:98:4d:65:b2:01:5f:c1:
                    48:b7:62:5c:ec:f8:a4:9c:d9:b1:ab:0b:33:be:2d:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8C:ED:48:5D:BF:00:E9:95:B8:DB:8F:28:C5:95:C5:53:3A:E9:81
            X509v3 Authority Key Identifier:
                keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:38:45:b3:81:e3:07:87:4e:0e:5d:39:34:d4:ae:b1:da:69:
         fa:b9:11:bd:5b:13:5d:8a:3c:b0:a1:4a:b2:39:3a:ea:53:f1:
         bb:52:d4:9b:5f:4d:bd:66:f4:87:90:f4:98:ff:31:5c:70:cb:
         e1:5f:22:98:d1:cf:01:48:51:59:97:d1:82:bc:e5:d0:25:ab:
         6f:77:ed:20:80:de:ad:2c:49:1c:fd:7a:5d:9b:fc:cd:96:17:
         81:dc:d1:e9:0f:c7:4f:be:b8:2f:f0:4c:61:c5:ef:ab:23:fb:
         06:93:46:2c:1b:a6:4f:df:ba:0d:7d:34:4c:84:50:fd:87:e2:
         aa:ff:65:8b:df:60:04:3e:4d:56:47:ef:83:f1:18:7f:8f:41:
         dc:48:30:b0:4e:2a:4b:ff:ae:be:e3:fd:e2:9f:ff:9d:c5:0b:
         10:9f:69:fa:87:17:a1:f1:67:3f:c1:c6:14:fe:f3:fa:f3:e9:
         cb:de:93:ed:b2:d4:3f:29:94:a9:28:4f:d4:a8:3a:9a:b0:6a:
         db:4c:80:30:de:8e:6c:35:26:c6:c0:2c:2d:0f:94:32:fa:37:
         ab:61:b5:d9:db:73:7b:f5:b8:5e:e4:36:60:cb:db:e6:e3:c0:
         2a:35:d4:9d:eb:54:42:c2:08:19:c3:65:91:c4:7a:74:c3:8a:
         f4:cf:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:53:57 2026 by rpki-client