Error: rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier:          OfBgf3naV4ECUk0/qIQD+YZp4pF578Q2ueD95ZGk6Jw=
Subject key identifier:   FC:ED:4D:6E:26:DE:F5:C1:BF:28:4A:24:A7:8D:D3:71:E1:96:93:A7
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer:       /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial:       056E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number:          056C
Signing time:             Thu 24 Sep 2026 03:10:50 +0000
Manifest this update:     Thu 24 Sep 2026 03:10:50 +0000
Manifest next update:     Sat 26 Sep 2026 03:10:50 +0000
Files and hashes:         1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: YTFb4KZ4fz9OsBSO1Vs4sczmuOpoJ3EGZCcJQ2g5YhY=)
                          2: 8651F3548EFE11F18C8872F2CE1D38B0.roa (hash: s2JmDXus50oLEEaUALD5HleYNY+S5t45bCkpw9Qi/PU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                          rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Validity
            Not Before: Sep 24 03:10:50 2026 GMT
            Not After : Sep 26 03:10:50 2026 GMT
        Subject: CN=6ab494ba-fb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:35:dc:d7:5f:3e:49:3c:75:cd:33:60:a5:
                    d4:39:b5:0d:ac:50:28:1d:6b:7b:2a:de:0b:fc:7f:
                    28:42:ce:c0:6c:62:e7:ff:ce:1d:5a:5d:ed:51:f4:
                    65:57:09:a6:22:d7:d4:24:3a:30:57:bc:c5:44:42:
                    a4:25:d5:e7:41:de:0a:93:87:49:89:73:3f:82:76:
                    f1:8c:fa:d6:00:c2:d5:cb:85:fe:a1:a0:a2:8f:ac:
                    7a:04:1e:cc:fc:e5:a5:56:18:9d:88:e2:aa:9c:a0:
                    cd:5b:b7:ed:ba:7d:45:a6:4c:68:65:79:71:21:47:
                    35:de:31:75:cb:4a:5e:4c:40:73:8b:40:bb:fd:24:
                    b6:7a:33:ec:03:25:24:1a:6f:c7:4b:b8:26:4e:ea:
                    18:3f:f3:fc:6b:15:65:22:5b:29:57:b9:3a:f1:2e:
                    18:c5:00:63:f7:00:14:12:8a:96:ce:d3:7b:66:fb:
                    5a:02:61:ab:75:4a:1b:3a:22:42:a8:f7:8a:6a:08:
                    bc:eb:c8:af:b9:7c:72:77:dd:56:e2:2f:7b:8b:00:
                    75:d4:8b:b6:cf:83:50:65:e1:30:82:7d:d6:b0:45:
                    87:c2:0d:14:7f:a0:87:e5:c2:65:a3:2d:d6:f4:be:
                    7f:52:3c:4e:bc:1d:e0:55:03:44:66:51:76:7c:6f:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:ED:4D:6E:26:DE:F5:C1:BF:28:4A:24:A7:8D:D3:71:E1:96:93:A7
            X509v3 Authority Key Identifier:
                keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ca:c1:65:b7:62:48:64:4f:4b:4d:76:37:76:46:d3:87:94:
         67:2e:eb:eb:d0:82:ea:13:76:3f:f5:02:19:17:a2:24:5a:1d:
         00:7b:28:13:f5:6e:06:57:b7:de:31:cd:e8:76:43:ae:d9:20:
         ef:42:e5:47:46:67:91:8c:92:dd:50:e2:37:77:21:a6:2d:85:
         1c:94:f4:fc:14:d1:19:ca:59:8f:3b:a2:10:67:ea:ee:fc:80:
         9c:17:e0:80:29:61:0c:1c:bb:16:8b:af:bb:c8:b4:57:07:0b:
         db:cb:93:cd:2e:ea:10:ba:cc:e7:fc:24:66:3d:3c:f8:08:d7:
         11:4a:93:59:ad:bd:5e:08:55:6e:3d:0a:21:1e:40:18:c7:d4:
         f2:87:b1:20:ad:f6:64:92:08:9e:c0:20:1c:08:36:45:a7:5b:
         60:10:e6:15:19:38:0a:9c:b4:9b:68:04:4a:32:5a:51:96:0f:
         55:8b:1e:09:63:79:7e:ef:8d:ba:18:ba:53:86:3e:bd:d1:13:
         7f:46:1f:5e:19:db:3b:74:27:7d:66:e7:04:e7:89:d2:c1:16:
         84:22:87:4d:07:4b:fa:81:bd:33:3a:59:b5:94:ed:41:69:ab:
         2d:cd:25:3e:f6:60:f4:19:89:9a:51:a2:cf:b9:98:1f:07:95:
         15:e9:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:10:40 2026 by rpki-client