Error: rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
File:                     VnyvmRgrnidPuabWkIh4qwHDQoE.mft (raw, json)
Hash identifier:          iuVNaHWYgramnXkRdh70ciwxOLG8M38o7yESmRv5DA8=
Subject key identifier:   55:A1:EF:B9:D5:37:A6:47:D1:87:34:01:D7:62:B1:68:2F:99:E4:C5
Authority key identifier: 56:7C:AF:99:18:2B:9E:27:4F:B9:A6:D6:90:88:78:AB:01:C3:42:81
Certificate issuer:       /CN=F367EEA2AR/serialNumber=567CAF99182B9E274FB9A6D6908878AB01C34281
Certificate serial:       04A1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
Manifest number:          049E
Signing time:             Tue 22 Sep 2026 03:35:11 +0000
Manifest this update:     Tue 22 Sep 2026 03:35:10 +0000
Manifest next update:     Thu 24 Sep 2026 03:35:10 +0000
Files and hashes:         1: VnyvmRgrnidPuabWkIh4qwHDQoE.crl (hash: QdSt23v9Nui7gfPRH87+tNM2wbEh9tPZzcOJ5GoZmIg=)
                          2: 3FB5FE122F6711EE90A2841B4AD9E6FC.roa (hash: WJqH0lra+XjbqtJEVmP0k9XRwahFYNZjcO/TJSOHaQA=)
                          3: C069B486B24311EEB2664F99775412E6.roa (hash: NeIq4SLTxB0EhIQzCliNvAbug3avKsYrABorphJD/7A=)
                          4: E71E5D4C2EB411EEA206B6794AD9E6FC.roa (hash: hbtcT6eA8KL9XUcRwzBfgyp8AVJuRXtNG7MjkLclPW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
                          rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367EEA2AR, serialNumber=567CAF99182B9E274FB9A6D6908878AB01C34281
        Validity
            Not Before: Sep 22 03:35:10 2026 GMT
            Not After : Sep 24 03:35:10 2026 GMT
        Subject: CN=6ab1f76f-c7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:62:09:b1:32:c5:53:50:c5:66:59:c7:98:
                    25:af:93:0f:a4:ee:9e:ef:16:bd:08:78:21:64:1d:
                    e8:3c:25:de:4c:57:23:16:47:e1:71:21:1d:48:81:
                    f2:07:68:2d:95:d5:66:9c:39:ee:b3:55:49:b6:1c:
                    2f:11:be:ec:bd:5b:27:86:91:2b:eb:c4:04:45:9d:
                    f3:d5:17:75:aa:84:46:92:25:c6:0c:07:bd:22:c6:
                    a9:c3:23:56:d2:45:f0:af:1a:91:15:16:ef:82:7e:
                    9d:e3:f1:41:16:49:3f:02:c1:d7:54:8b:79:5e:4a:
                    25:07:49:fb:86:ae:93:c4:c0:27:a7:4b:6d:de:11:
                    2f:60:c9:d2:15:90:c5:75:4f:38:20:b8:49:ea:8b:
                    64:7d:08:00:55:54:58:43:59:34:b6:0b:1a:c0:df:
                    8f:ea:eb:b0:9f:5c:67:95:85:79:ec:c8:7c:66:dd:
                    e9:fa:b8:bb:b3:d1:ba:5a:08:9b:ec:68:6f:15:0b:
                    dc:37:9f:f6:3d:2a:c9:c8:e2:c7:d3:70:6b:71:c6:
                    32:fe:c9:c9:25:0e:d4:b6:84:b8:54:73:c5:36:4d:
                    ad:8d:ee:4e:57:07:93:aa:6c:9c:5c:0c:9e:40:52:
                    1a:cb:51:ff:b4:3c:91:90:ff:df:35:77:c0:7e:54:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A1:EF:B9:D5:37:A6:47:D1:87:34:01:D7:62:B1:68:2F:99:E4:C5
            X509v3 Authority Key Identifier:
                keyid:56:7C:AF:99:18:2B:9E:27:4F:B9:A6:D6:90:88:78:AB:01:C3:42:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e5:c4:8e:14:43:5f:d7:f6:f6:df:8a:b6:3c:c5:23:1a:9d:
         95:f0:1a:b6:4d:ff:09:1b:89:d8:67:dd:a5:ba:aa:54:51:d8:
         0c:6b:57:0b:0c:a3:5d:f2:e0:cd:4c:ba:6a:c4:bb:a6:94:58:
         44:19:e7:82:f8:2f:02:69:07:74:08:70:32:43:f2:07:04:27:
         0c:bd:4a:50:f5:cd:bd:5c:74:57:f1:47:12:40:51:81:16:f7:
         6c:be:8c:42:55:2e:e9:aa:0d:53:73:ad:e5:89:f3:33:74:8a:
         e3:49:63:fc:b7:68:b0:81:95:2f:b7:d0:dc:41:7a:db:42:6e:
         b9:95:1d:4c:53:10:9b:c8:c7:90:97:8d:bb:92:cb:ee:c3:e5:
         f3:c6:06:14:d1:83:00:32:50:7e:75:53:0e:cd:5b:f1:6b:f6:
         40:67:15:16:25:17:2e:ad:58:c0:e1:bf:a1:c6:cb:fe:39:79:
         45:da:e0:4e:e5:c8:d8:c6:98:42:da:55:61:14:6b:00:18:e1:
         6d:41:fc:1e:82:1c:95:4c:57:6e:dc:08:de:e3:c9:70:6c:8f:
         f6:00:af:8e:0d:ab:1f:89:e6:1d:36:01:fa:38:7a:a0:8e:eb:
         f3:c0:6b:4a:37:42:67:65:d7:1b:c8:32:7b:2c:72:8d:af:31:
         1b:ea:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:09:46 2026 by rpki-client