Error: rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          2aQoai4QZg53JIq4j8zYkXghxKefv+cs2OfIYci699g=
Subject key identifier:   DE:E2:A3:1C:16:35:03:4D:3F:E0:8B:E2:7A:6E:63:43:8A:83:1B:68
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       03A9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          03A4
Signing time:             Thu 15 Oct 2026 04:08:34 +0000
Manifest this update:     Thu 15 Oct 2026 04:08:33 +0000
Manifest next update:     Sat 17 Oct 2026 04:08:33 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: fKkUJ4DEioNt7JFf9tfLsW+Yj1oQdcyLyeKDcwQwITQ=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Oct 15 04:08:33 2026 GMT
            Not After : Oct 17 04:08:33 2026 GMT
        Subject: CN=6ad051c2-c16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:79:4d:7f:14:1d:c5:bb:1b:4f:46:e7:36:
                    05:b3:f6:09:6c:09:f7:40:90:89:78:0c:0d:e5:b8:
                    d3:1d:e3:85:2b:5e:6b:16:32:10:77:cb:b0:c5:dc:
                    d1:7d:86:f7:42:b6:5e:75:25:d9:a6:4e:70:1a:4d:
                    6d:b5:8f:64:43:69:1f:19:59:a5:fc:82:f0:26:e4:
                    26:cd:94:e2:99:b3:15:2e:56:60:f3:de:80:76:b4:
                    80:0c:d8:7e:60:23:57:93:8a:b1:77:99:3d:a1:d5:
                    2d:3b:af:0b:e7:5c:a5:28:89:57:07:d2:a6:39:ca:
                    a0:bb:f8:8b:fa:8c:3f:4b:57:15:3f:29:46:c2:fe:
                    80:fa:85:24:13:e3:13:de:33:e1:27:c6:4d:ee:80:
                    52:c2:32:c8:47:68:d9:6f:f3:6d:fb:7f:fc:1f:db:
                    29:92:3f:14:a6:23:f7:b4:03:14:4b:6c:81:5a:ea:
                    ff:98:bf:d9:9f:54:66:95:5f:d1:ee:04:93:65:56:
                    68:6a:71:27:0a:ca:56:a1:54:02:48:f7:59:36:59:
                    a6:bb:1c:e7:ed:1c:0e:b7:b8:83:53:d7:50:32:90:
                    3f:2d:ac:00:da:fa:3e:f9:56:fa:55:77:b7:5b:aa:
                    f3:2c:ac:0f:cc:39:05:da:eb:15:24:24:43:9a:2a:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E2:A3:1C:16:35:03:4D:3F:E0:8B:E2:7A:6E:63:43:8A:83:1B:68
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:53:3b:8e:53:5d:1f:ca:bc:ed:67:39:79:0d:38:73:ef:50:
         f0:d4:36:42:a0:01:94:b7:8f:5d:d1:e0:e0:4c:33:7b:5a:cf:
         1e:5d:5e:7f:28:52:df:0b:2f:63:6e:99:6c:43:2a:4f:d4:f1:
         5f:2b:cb:96:64:40:0f:a5:2d:e6:00:72:e4:e3:d8:67:28:bb:
         c1:21:0e:49:a1:3c:40:5f:e4:3a:b0:fd:a1:0a:1b:b2:02:72:
         41:0b:20:c3:1b:2a:d1:f4:8c:44:69:ab:03:56:8c:7a:c1:4c:
         65:8a:ca:31:2a:0c:fd:d6:40:f8:04:29:25:52:cc:42:9e:b3:
         cc:14:99:b5:84:40:28:9c:10:d3:2d:eb:2c:32:17:78:89:e2:
         51:5d:8c:b6:ec:96:0c:31:c1:b9:13:7a:8e:03:6a:b8:e9:d5:
         d3:2f:06:13:37:33:07:bb:0a:13:75:f3:0e:fc:b2:19:47:c9:
         dc:53:21:65:52:4e:6a:c3:8c:7f:5c:43:99:be:91:49:3b:9d:
         e3:5d:df:c7:92:7c:9b:81:71:27:93:5b:1a:f0:1f:5e:24:44:
         62:35:a6:4e:c1:c9:2e:e2:07:51:43:83:60:e3:35:3f:c1:78:
         31:98:c4:0a:86:f9:7e:4b:5f:56:08:82:cf:44:03:7f:6f:a0:
         64:34:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:49:13 2026 by rpki-client