Error: rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
File:                     rvs0nSNMbGbEJJJb7hApnarwubw.mft (raw, json)
Hash identifier:          lTT/v2X5rydQmZXJK6eOEf7U+ixAN6j+DLxP/gjGGbU=
Subject key identifier:   93:15:BA:39:B9:8B:16:CC:1D:EF:33:28:AE:8B:7A:CE:33:DF:5D:69
Authority key identifier: AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC
Certificate issuer:       /CN=F368B07FAR/serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
Certificate serial:       0D29
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
Manifest number:          0D20
Signing time:             Sun 11 Oct 2026 01:09:54 +0000
Manifest this update:     Sun 11 Oct 2026 01:09:53 +0000
Manifest next update:     Tue 13 Oct 2026 01:09:53 +0000
Files and hashes:         1: rvs0nSNMbGbEJJJb7hApnarwubw.crl (hash: BKnmROgF/pb0Ae2Bqc+ODnX2vb+iB0U1ICWzdkFPMHY=)
                          2: 7D59CC5CB2B011F09C79E0CBDAE4EC9C.roa (hash: ciMAnSRFb1RAh00SyY2+AZRm5zIar3kt01Ckcd7m8rU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
                          rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3369 (0xd29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B07FAR, serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
        Validity
            Not Before: Oct 11 01:09:53 2026 GMT
            Not After : Oct 13 01:09:53 2026 GMT
        Subject: CN=6acae1e2-0531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:2f:72:33:bc:f1:1a:27:57:d7:6f:09:01:
                    07:e2:6c:b2:87:9f:f8:50:f1:47:75:28:be:81:9f:
                    74:9b:6c:58:c7:9b:e9:ac:9c:7e:76:84:20:bf:5a:
                    33:43:cb:98:56:de:80:b6:5b:09:6a:ac:e1:28:50:
                    9e:16:cf:c1:eb:62:30:50:94:ef:5e:3b:38:a2:ae:
                    5f:4f:dd:9a:61:76:59:4f:c1:ab:1b:cf:cd:79:34:
                    62:55:24:c0:f4:11:85:49:f9:f6:5b:10:1d:8a:04:
                    95:ea:03:1e:ba:fd:30:5e:a3:ca:7f:1b:79:9d:87:
                    40:a4:2f:7a:a0:27:60:c9:7e:79:f6:75:43:82:5f:
                    d4:be:b7:6d:97:c4:a2:e2:fa:e5:fc:f1:23:59:3b:
                    9d:cb:09:05:a6:8e:60:e7:a1:47:de:b9:27:85:7d:
                    db:bf:9b:ac:01:c1:15:bb:bc:06:41:99:24:5a:c0:
                    42:48:32:5e:2d:45:40:f2:00:d8:44:5a:69:5c:2b:
                    85:70:fc:bb:62:c7:19:5f:a3:cd:05:fe:57:7c:2b:
                    54:a1:4a:d8:ff:5e:d5:8f:5c:dd:fb:7d:e5:13:01:
                    e6:0c:27:8c:50:ba:d5:7c:9e:44:5d:62:b1:67:c2:
                    af:55:1f:ea:0a:81:6e:a7:8f:45:61:48:9d:80:5d:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:BA:39:B9:8B:16:CC:1D:EF:33:28:AE:8B:7A:CE:33:DF:5D:69
            X509v3 Authority Key Identifier:
                keyid:AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:ff:0a:08:5b:a8:b5:b6:9f:f2:f3:bf:fc:60:dc:9b:f6:
         f0:5b:d8:cf:b5:52:66:24:c2:2c:d3:0b:d1:b5:e8:59:3c:da:
         42:2b:c4:54:96:21:9c:d9:e6:9e:ef:6a:e5:e6:1b:2d:c6:19:
         44:e7:f0:b1:6c:c8:16:b2:2e:60:f8:f2:a0:46:7f:42:7c:d5:
         8f:5f:03:ac:6e:3c:42:38:84:bb:a6:a5:54:3d:9e:e6:d9:10:
         a5:01:a7:0a:e7:17:e9:fe:fd:14:19:36:c9:de:18:09:3a:b4:
         46:ae:a4:32:fe:c6:f0:f7:11:ac:b2:c4:12:83:b5:f9:1e:f7:
         d4:e1:15:a8:87:52:38:ea:e4:f3:0c:cd:c5:f5:c6:06:8b:5a:
         55:7b:15:a0:f7:f3:08:00:81:5e:fe:86:69:4b:29:93:49:b0:
         41:34:00:11:02:43:b9:9b:40:ce:fb:0f:e7:35:74:37:79:0e:
         32:99:b7:d7:77:1d:32:11:27:25:5a:51:03:ae:8b:88:90:a9:
         96:9f:43:88:7d:35:ce:5e:45:32:1e:4e:80:88:31:a8:ee:e3:
         2c:f1:30:1b:74:61:71:76:fe:ac:12:40:a1:a3:44:e7:36:49:
         6b:ad:7a:0b:bb:2b:25:f0:0a:94:fc:15:ec:41:aa:a4:1a:bf:
         87:9a:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:29:37 2026 by rpki-client