Error: rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
File:                     qjkCIoK-Ps773Fjln5ljk4Jku0I.mft (raw, json)
Hash identifier:          BR4vwgJU4hnuRlnh3OOP6vxm736IoNLzW6KwBnzPvOM=
Subject key identifier:   60:B5:E0:3B:7E:1D:6A:13:42:05:4A:D4:24:03:91:26:59:68:35:2F
Authority key identifier: AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42
Certificate issuer:       /CN=F369F058AR/serialNumber=AA39022282BE3ECEFBDC58E59F9963938264BB42
Certificate serial:       0B09
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
Manifest number:          0B06
Signing time:             Mon 19 Oct 2026 01:18:45 +0000
Manifest this update:     Mon 19 Oct 2026 01:18:45 +0000
Manifest next update:     Wed 21 Oct 2026 01:18:45 +0000
Files and hashes:         1: qjkCIoK-Ps773Fjln5ljk4Jku0I.crl (hash: u3XcUUPvgkJm/rFljJnHcZSHeZ9b2MbpmkuVZw/UzC0=)
                          2: 48619D24149E11EF81414965017001B1.roa (hash: 3GarqsJ4VJ1/CLoT1EAlZXSx5zt3151P9uVE5+wGgZ8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
                          rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2825 (0xb09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AR, serialNumber=AA39022282BE3ECEFBDC58E59F9963938264BB42
        Validity
            Not Before: Oct 19 01:18:45 2026 GMT
            Not After : Oct 21 01:18:45 2026 GMT
        Subject: CN=6ad56ff5-20f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:a0:1a:71:e6:4f:c0:69:eb:35:79:1f:eb:
                    2c:e0:e3:62:77:2b:84:f8:c8:75:86:27:7c:1e:89:
                    c0:71:17:1f:7a:11:7a:97:cc:89:a2:c4:b5:0c:f5:
                    76:82:14:2c:cf:d5:49:32:6d:5b:3a:38:89:76:96:
                    fc:90:96:71:41:da:1a:1d:d0:2f:f9:9d:0b:ae:07:
                    78:98:68:3b:ed:84:89:f0:b4:f5:b6:5e:c1:23:98:
                    01:b9:3d:ee:17:cf:2d:80:6e:f9:a8:7b:c4:f9:6d:
                    5c:c2:d9:83:d5:07:71:a3:2d:c4:3f:c2:98:41:3a:
                    99:9b:50:f8:6b:01:ed:8e:9c:43:b8:e6:53:75:ac:
                    aa:af:c0:89:46:5f:d2:67:5d:e8:b7:b7:63:b8:97:
                    28:59:45:c8:1e:39:79:82:0d:9b:62:ea:e2:66:d9:
                    b7:33:62:57:5f:4f:38:eb:6c:01:88:7a:66:df:21:
                    08:d7:72:50:b4:b3:69:4e:20:39:fc:d4:e3:ad:57:
                    68:a8:f3:75:cd:32:a7:3d:7e:3b:6c:a4:cb:4a:76:
                    14:f3:de:00:ee:3f:fc:a2:4c:b6:6a:08:93:42:50:
                    e8:00:51:3b:80:91:d7:f5:f5:19:4d:52:60:be:a4:
                    13:b1:76:87:7f:30:43:74:41:8e:a9:ed:25:2d:a0:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B5:E0:3B:7E:1D:6A:13:42:05:4A:D4:24:03:91:26:59:68:35:2F
            X509v3 Authority Key Identifier:
                keyid:AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:00:0d:04:59:52:b9:40:f6:02:74:3c:84:d6:e6:cf:ab:b8:
         25:89:5a:cf:cc:64:67:89:a1:85:ee:3b:d8:3d:74:59:d6:b4:
         b0:8c:11:6d:43:12:14:25:c1:f9:81:5b:fc:a5:3b:66:24:7e:
         0b:ea:c5:3f:6f:59:5d:f9:a5:77:e7:72:b9:91:cc:de:6d:95:
         5f:52:76:c8:be:5c:93:98:5a:f7:a9:a8:e6:f6:c8:78:d5:f1:
         d1:1f:04:1b:bd:ab:2c:b5:23:b0:6e:64:21:0b:2c:14:9c:30:
         60:1d:bf:f2:0b:38:f5:c9:90:3a:fb:3b:09:b2:33:2d:f0:92:
         86:60:39:b6:54:2e:ce:65:38:48:17:ab:a6:1f:ad:70:b4:af:
         b6:00:b2:1a:29:f6:0c:73:7a:20:b5:25:37:aa:68:14:cc:3d:
         9a:ca:a5:0e:cb:7e:67:d1:01:f5:4b:36:e1:8d:50:08:fa:b7:
         5c:89:dd:1c:14:e7:92:b9:05:7a:06:bc:bc:a2:a9:8c:05:cd:
         13:67:42:88:87:9d:69:ac:25:a7:c6:a4:69:42:f2:51:d7:0e:
         b5:df:67:b6:02:ff:4a:a1:47:be:d1:70:8a:08:9e:96:33:23:
         7b:5a:ed:85:bd:02:26:d1:c6:48:d3:a8:75:bf:b8:2a:7d:dc:
         0f:9e:71:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:21:22 2026 by rpki-client