Error: rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft
File:                     FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft (raw, json)
Hash identifier:          MuMfLNJMxvyHqgwapTiSeTK4uiEZiKzmYFSR29tRk2Q=
Subject key identifier:   95:63:1D:FC:20:A3:41:78:66:0C:A9:0E:7F:6F:C4:2A:F4:0B:18:1E
Authority key identifier: 15:3D:C0:11:51:20:E2:40:A0:4A:AB:9A:E0:4F:AD:64:79:26:B1:24
Certificate issuer:       /CN=F367F26DAR/serialNumber=153DC0115120E240A04AAB9AE04FAD647926B124
Certificate serial:       0ADD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft
Manifest number:          0AD7
Signing time:             Mon 28 Sep 2026 01:19:50 +0000
Manifest this update:     Mon 28 Sep 2026 01:19:49 +0000
Manifest next update:     Wed 30 Sep 2026 01:19:49 +0000
Files and hashes:         1: FT3AEVEg4kCgSqua4E-tZHkmsSQ.crl (hash: oN72wvLAalAY2QyNGHDwxTDRjJ6YG/ZdprFqKo4e3Yc=)
                          2: 16018B34188C11F1A67028E5DAE4EC9C.roa (hash: YK06nGsXOl3zmJE+1ADa7T9j6CDDbGC/qd8vMyl5oV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft
                          rsync://rpki.afrinic.net/repository/arin/FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2781 (0xadd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DAR, serialNumber=153DC0115120E240A04AAB9AE04FAD647926B124
        Validity
            Not Before: Sep 28 01:19:49 2026 GMT
            Not After : Sep 30 01:19:49 2026 GMT
        Subject: CN=6ab9c0b6-6416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:51:94:a0:70:b3:22:27:b0:5f:54:96:16:78:
                    f4:1e:19:86:30:eb:56:c9:27:81:38:94:bc:78:fe:
                    74:e5:a9:03:1c:6a:26:45:6b:ad:d0:34:20:bc:cb:
                    a7:77:4d:21:26:de:8c:38:19:51:d0:4d:c3:b4:45:
                    cf:06:1c:bd:aa:86:12:93:f4:c0:d1:58:4d:14:6f:
                    8c:1d:4e:45:4f:c7:b8:e3:c3:ef:15:99:bd:ac:95:
                    38:db:c2:9a:7a:ea:38:d0:aa:1f:e5:87:6f:f1:92:
                    f3:b5:1d:d4:b1:8d:06:b1:ec:b3:30:9f:3a:83:ab:
                    b2:2d:26:32:14:7c:95:02:1d:61:d9:db:8a:44:92:
                    b9:0f:95:61:b3:d3:50:4e:1c:7e:50:b2:f3:6f:cb:
                    0f:93:7b:3d:49:ed:d2:c0:45:2b:27:63:dd:20:50:
                    ad:b1:42:da:30:08:d1:a4:42:5f:54:f6:fb:e6:e1:
                    a0:62:40:ff:b6:e4:83:f1:6f:07:36:da:54:f4:fa:
                    51:9e:49:ed:9b:ed:08:76:eb:d6:27:19:1e:7e:7c:
                    53:32:b1:5f:4e:7f:b4:b2:04:a4:1d:65:5b:e8:74:
                    77:c9:c9:c6:7f:31:85:53:d4:6f:e7:df:6c:6f:5e:
                    02:c5:01:09:21:24:6c:19:0b:9c:68:39:e5:0e:66:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:63:1D:FC:20:A3:41:78:66:0C:A9:0E:7F:6F:C4:2A:F4:0B:18:1E
            X509v3 Authority Key Identifier:
                keyid:15:3D:C0:11:51:20:E2:40:A0:4A:AB:9A:E0:4F:AD:64:79:26:B1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:2f:82:4f:07:2e:02:9c:23:60:75:fa:38:44:7e:f5:b8:
         fc:a4:fc:3d:89:04:87:40:85:13:dd:9e:fe:b7:aa:f3:ce:44:
         39:9b:f8:5e:e2:cd:f6:ee:78:80:d2:10:0f:c5:c1:73:38:c6:
         0b:8f:48:49:a7:04:73:a7:72:c8:1e:93:f8:bf:55:b3:9f:4e:
         39:e4:da:ae:96:c9:77:1d:c7:c2:ec:3f:4c:6f:0c:0d:ae:f8:
         d7:61:88:10:61:39:45:08:e4:79:89:f0:59:c1:db:72:81:e4:
         0d:ed:5e:34:82:f5:ac:86:15:5b:df:71:2a:fa:b8:bf:03:df:
         b4:25:48:9f:94:07:fd:a6:14:32:33:d0:c2:92:e4:c3:60:1e:
         6d:49:e4:78:2a:4d:50:5b:09:9a:46:13:8f:b2:81:0d:1f:a4:
         00:cc:c1:a3:b7:db:a8:3a:94:61:cc:f1:d1:36:33:e7:19:b3:
         ca:81:c2:5e:78:6c:a2:25:90:69:6c:b7:c8:78:b1:ef:09:ce:
         7b:df:a2:df:97:58:ab:e6:79:af:42:a5:e9:e1:98:9e:33:9e:
         9c:e2:3a:f3:9f:c3:66:9c:42:d7:ed:71:0a:81:be:d2:54:7e:
         60:42:ab:58:26:79:88:50:ce:2b:c8:ed:03:3d:86:07:e7:5b:
         a4:8e:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:22:23 2026 by rpki-client