Error: rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          YQfEcnUmrvVpqgIPlEevdaIS9rNBxgJVZC1QN9n4+tc=
Subject key identifier:   D0:74:09:54:29:A9:7F:18:BD:CC:0C:60:01:8F:5E:EC:FE:95:EE:CC
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0EDB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0ED7
Signing time:             Sun 11 Oct 2026 01:02:57 +0000
Manifest this update:     Sun 11 Oct 2026 01:02:56 +0000
Manifest next update:     Tue 13 Oct 2026 01:02:56 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: z53QhV3LfscoeM2wqxZxJlr/6aUrvVXIrtvEGoQekkg=)
                          2: 4AC87CE0B11911F0830CDBDFDAE4EC9C.roa (hash: BbmEW7gIRevtuQq0qmlAx+V5iEy5gjhSfXPW6vQnAiw=)
                          3: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3803 (0xedb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Oct 11 01:02:56 2026 GMT
            Not After : Oct 13 01:02:56 2026 GMT
        Subject: CN=6acae041-94af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:78:88:5f:d1:2f:94:94:e8:46:3e:1e:7c:
                    f5:45:eb:5e:9a:6a:36:5a:c3:35:da:38:19:53:d6:
                    94:a6:e5:b9:a6:89:4f:f4:e3:2f:df:6f:b7:44:7e:
                    40:4f:3d:f0:36:bc:a5:0d:c9:82:22:0e:a2:51:f8:
                    bd:b4:ae:51:f3:41:1d:c3:88:ee:62:f0:75:68:31:
                    89:89:7c:5a:7a:57:a2:14:e3:2e:6b:c3:af:fa:5d:
                    54:6d:e2:8a:0b:12:d1:f0:2e:03:34:a9:9c:c7:9f:
                    79:5e:f5:ee:87:da:8b:c4:81:75:e4:fd:b1:28:f7:
                    12:cd:46:a5:3f:32:59:b2:71:43:31:a8:dc:6a:4f:
                    47:68:66:57:d4:07:4b:b5:25:4c:70:c7:52:18:c1:
                    b4:31:3e:05:60:01:ce:5d:ee:92:c9:d2:b6:cd:ce:
                    d4:9a:85:ed:fe:5e:c3:d7:5d:c7:ca:db:04:d7:26:
                    67:81:8d:cc:8d:00:9b:8a:aa:d5:6a:46:88:f6:6e:
                    68:0a:6c:9f:e4:d5:63:9d:03:55:ae:7f:58:a0:41:
                    9a:1e:2a:da:08:1f:d5:c9:b6:a3:c7:db:67:c5:c4:
                    7a:18:21:63:a2:bd:78:46:50:b2:11:13:77:2c:8d:
                    b8:8d:af:7b:ff:0a:64:9e:a7:6d:2c:a8:19:e3:50:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:74:09:54:29:A9:7F:18:BD:CC:0C:60:01:8F:5E:EC:FE:95:EE:CC
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:14:c9:1c:e6:ad:82:e6:32:4a:5e:91:9b:57:95:86:24:2f:
         b2:33:84:c4:e9:fd:49:47:20:b4:61:49:51:53:70:3b:19:98:
         e3:0d:62:0b:3e:71:32:d5:52:5e:8d:15:6a:8d:c9:fc:f3:56:
         d3:68:c8:6f:e5:28:98:b5:8c:9c:d7:64:c7:d4:9f:09:65:c3:
         6f:82:e7:95:73:35:8d:91:6c:fb:9f:50:df:eb:48:e6:2d:e2:
         63:67:f1:e9:89:42:f2:72:fd:fd:4f:29:06:aa:fa:d8:ca:5b:
         cc:be:47:14:c3:c4:4f:57:e2:89:c7:42:27:88:12:3e:9b:57:
         95:92:e2:4c:38:0e:b0:68:15:8b:24:7f:6c:65:2e:4f:fc:15:
         60:ac:d5:be:35:5b:0a:57:46:f3:b4:0d:34:95:59:26:73:c0:
         e9:7e:a3:55:a5:b2:b7:eb:bb:d9:41:59:c2:72:1b:45:7f:36:
         1f:e6:98:4e:87:c2:45:ca:3a:8e:2d:a1:7f:9c:75:c9:9f:df:
         5e:1a:f1:10:3a:6d:bb:06:bd:2f:c4:fd:38:ef:15:ba:37:cd:
         60:2b:6a:55:4f:4d:56:d8:2d:ee:85:6b:bb:a4:07:43:68:a4:
         73:b1:fc:1f:a6:83:78:8c:f5:6a:5b:a5:7b:05:92:e8:c0:d4:
         e3:6f:48:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:19:54 2026 by rpki-client