Error: rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
File:                     HZidq5_JTcsumLGO3tmPX49Zyuo.mft (raw, json)
Hash identifier:          yoqgedtAxwUV5UCW0OJYdbw98iq6bVHoUGJT0e4g+AQ=
Subject key identifier:   35:2D:56:3C:30:92:1F:4C:A6:C9:C1:04:71:AD:5C:75:4D:15:65:57
Authority key identifier: 1D:98:9D:AB:9F:C9:4D:CB:2E:98:B1:8E:DE:D9:8F:5F:8F:59:CA:EA
Certificate issuer:       /CN=F3693F0FAR/serialNumber=1D989DAB9FC94DCB2E98B18EDED98F5F8F59CAEA
Certificate serial:       7A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HZidq5_JTcsumLGO3tmPX49Zyuo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
Manifest number:          78
Signing time:             Thu 24 Sep 2026 05:39:32 +0000
Manifest this update:     Thu 24 Sep 2026 05:39:31 +0000
Manifest next update:     Sat 26 Sep 2026 05:39:31 +0000
Files and hashes:         1: HZidq5_JTcsumLGO3tmPX49Zyuo.crl (hash: qUL0o32/ZQjwNqCZIUwiDicV6EA/57xfN7vW5oEs3OQ=)
                          2: BD108C8C5FFD11F181D1EC1ECF1D38B0.roa (hash: 0RAAHj2DRHeGQw2/3zb6fZlhOfTZehAueYQXWNTpjEk=)
                          3: 1B7ED73A5FF211F1A5FB5EDACE1D38B0.roa (hash: tBsb3KoqmQYJZoFJrHv9Cghp2s7SewPhq2+i08NAc3U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
                          rsync://rpki.afrinic.net/repository/arin/HZidq5_JTcsumLGO3tmPX49Zyuo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693F0FAR, serialNumber=1D989DAB9FC94DCB2E98B18EDED98F5F8F59CAEA
        Validity
            Not Before: Sep 24 05:39:31 2026 GMT
            Not After : Sep 26 05:39:31 2026 GMT
        Subject: CN=6ab4b793-45a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:fc:7a:8b:7a:b3:a1:83:2d:02:e8:14:31:
                    6c:b9:01:4e:a1:ae:4c:28:1e:6f:be:b5:6c:63:02:
                    dd:a9:32:7b:39:1c:65:3d:99:f8:29:a9:f0:0c:94:
                    0d:b8:6a:84:7d:72:f2:74:a3:93:07:39:9c:75:b7:
                    c5:dc:68:73:e3:54:24:cb:51:99:45:a7:65:32:11:
                    38:27:c6:3b:75:5f:66:83:c4:2b:c3:22:be:fa:18:
                    b1:aa:c7:28:f9:ba:28:01:92:7f:d4:23:cb:9a:4b:
                    f6:78:4a:3d:e7:02:de:f0:06:fe:d1:93:cd:ac:40:
                    45:a7:ca:9d:2a:40:5f:f6:2a:46:52:a3:94:95:4d:
                    20:6e:14:6c:ad:cd:c6:cd:a8:7e:77:b0:dc:c6:7b:
                    34:3a:85:11:e0:b1:a7:7c:96:fc:6e:00:ec:09:a2:
                    ae:08:30:29:19:a8:68:5d:e2:24:27:23:13:50:31:
                    66:fe:0e:42:7e:53:c1:23:d9:69:3b:5d:05:70:fa:
                    62:b4:ce:11:90:12:3c:5c:2f:bc:ca:6e:38:17:ed:
                    8c:72:39:d7:61:75:94:41:9c:de:8d:ef:10:2a:0d:
                    3a:c0:61:05:c4:bf:1a:d2:8b:38:15:00:56:ef:7e:
                    df:53:d2:22:ff:64:b6:8d:54:6c:b1:40:6d:ac:28:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2D:56:3C:30:92:1F:4C:A6:C9:C1:04:71:AD:5C:75:4D:15:65:57
            X509v3 Authority Key Identifier:
                keyid:1D:98:9D:AB:9F:C9:4D:CB:2E:98:B1:8E:DE:D9:8F:5F:8F:59:CA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HZidq5_JTcsumLGO3tmPX49Zyuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ca:aa:68:fe:ac:16:79:63:25:b3:05:7c:bf:d1:45:a2:ce:
         2b:59:b0:1a:ed:f1:87:41:f0:5e:29:bb:ed:76:89:80:07:04:
         2e:2f:5c:0e:71:fa:cc:9c:3a:1e:3c:1b:3f:8b:c7:a9:f4:6e:
         d7:1c:0a:93:80:4b:26:08:4d:99:00:1b:8d:1c:b8:99:af:b2:
         d6:4d:93:1a:e5:ff:b5:05:71:2c:0f:9f:fd:19:fb:8e:2e:39:
         49:2d:cb:5e:99:07:77:a1:3b:49:37:12:98:17:5f:70:80:fb:
         40:d5:15:f3:5a:df:98:27:39:89:08:8c:b3:ab:bd:a7:89:1a:
         e1:9a:52:52:20:bc:ef:fe:a8:cf:c2:4f:88:48:c4:7b:5d:a7:
         c0:76:7d:eb:7e:5d:8c:68:0e:ce:35:86:1b:80:42:8d:fa:75:
         97:25:09:84:06:bc:1b:a3:9a:53:65:b7:72:da:35:9c:e5:c9:
         55:49:1c:80:29:c8:5d:38:c9:35:04:28:92:93:34:18:5b:d5:
         22:84:1b:d8:e6:cb:5b:7b:13:be:06:20:b8:24:20:9d:00:82:
         69:63:e6:59:76:0a:ce:22:48:4e:41:ff:f0:fb:20:c5:ab:14:
         46:2f:d0:fd:31:b5:ca:cb:8f:df:4b:33:25:f7:68:4d:01:75:
         a4:63:47:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:17:01 2026 by rpki-client