Error: rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
File:                     iXuXO6A-uTTexeB2EobT3XyBo7c.mft (raw, json)
Hash identifier:          VpkhDwxQIBxsGHDu7Bn/EF0tUTD9AklC8J4LRNc93Ho=
Subject key identifier:   F4:E9:F9:7E:60:20:A3:76:83:08:6C:75:C8:72:F4:92:2A:9F:3D:DB
Authority key identifier: 89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7
Certificate issuer:       /CN=F36D3DBFAR/serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
Certificate serial:       01F6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
Manifest number:          01F3
Signing time:             Mon 21 Sep 2026 04:53:05 +0000
Manifest this update:     Mon 21 Sep 2026 04:53:05 +0000
Manifest next update:     Wed 23 Sep 2026 04:53:05 +0000
Files and hashes:         1: iXuXO6A-uTTexeB2EobT3XyBo7c.crl (hash: r9Ns8xik6ZgNigEhgLqK1qMlkRSPtICpCZO5GVDC0yU=)
                          2: 754FDAB02D8F11F193C4B7B5DAE4EC9C.roa (hash: fct50P7fbketjS3C+7ySeYCZCzp4FKWcw+jHMqXh/7g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
                          rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3DBFAR, serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
        Validity
            Not Before: Sep 21 04:53:05 2026 GMT
            Not After : Sep 23 04:53:05 2026 GMT
        Subject: CN=6ab0b831-35e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:b8:1a:87:f7:7e:67:c2:86:7f:ca:f9:33:
                    16:09:52:17:43:31:87:0d:e3:98:4b:7c:cd:d2:cd:
                    af:d6:fd:45:16:4a:e2:bc:0c:5d:cc:e1:d6:ed:fe:
                    4a:c1:10:27:1e:71:5c:bf:83:55:d9:29:a3:40:b4:
                    84:72:41:64:fe:ca:2e:f4:2c:00:41:54:68:91:d0:
                    23:21:9f:8d:66:51:93:fc:ec:d2:1c:37:07:12:5a:
                    8e:c7:36:db:1b:af:34:fd:3e:58:ad:b5:90:44:8d:
                    95:65:40:f0:43:9e:f3:31:32:29:b8:76:94:f4:c1:
                    39:c4:1a:8a:37:88:1c:88:45:e6:9b:c2:c1:91:88:
                    f7:28:7f:e2:6c:f7:75:9c:89:aa:aa:83:37:c1:76:
                    34:b3:9c:26:10:5b:eb:1a:98:12:2d:1a:0d:9b:6c:
                    9d:0a:3b:c0:8c:f8:72:a1:cb:2a:14:ee:ac:cd:cd:
                    58:df:8b:81:2c:4c:b3:96:2a:bf:2f:98:ae:56:c6:
                    83:62:65:c6:db:df:50:46:08:58:3e:2d:67:cb:bb:
                    5a:b5:8b:88:01:c3:8c:e2:15:ea:b2:0a:0d:f9:00:
                    e5:da:89:61:a9:ba:6f:a8:2a:77:f8:51:5d:e8:87:
                    27:cb:83:38:e7:bd:f3:a7:88:9d:16:70:38:59:be:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E9:F9:7E:60:20:A3:76:83:08:6C:75:C8:72:F4:92:2A:9F:3D:DB
            X509v3 Authority Key Identifier:
                keyid:89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:1a:0b:2f:a0:1b:45:38:7b:3d:6e:e6:40:c6:d5:b2:fe:a1:
         ad:02:9f:6a:12:cf:46:9b:c2:c1:17:98:64:b4:08:34:b5:37:
         bb:3c:c4:d1:6a:54:7a:cd:e1:e1:ec:68:b1:b9:06:b2:35:32:
         45:fa:a7:d5:67:f2:7c:d9:6d:d8:74:26:b9:43:58:b0:04:0e:
         b6:96:56:d6:3d:78:40:34:93:7f:61:cc:8e:e3:6e:f3:66:5c:
         da:d6:95:c3:bb:c0:6e:f8:11:60:de:5d:fb:e5:f3:80:92:65:
         d0:e2:33:66:cc:50:9c:52:29:9e:a0:03:69:d9:34:9c:7e:30:
         a3:84:42:5d:51:66:94:7f:1c:ec:d6:32:c2:f6:3a:44:36:18:
         9d:79:c7:af:53:ae:e4:e0:7f:cc:d2:fe:52:97:4b:b4:5a:b6:
         21:b2:b6:65:b4:da:d7:c5:5c:6d:5b:af:a3:0f:e6:b4:c7:a7:
         d1:09:a6:39:ee:83:23:fb:9c:4a:cd:ea:95:c5:1a:53:f8:0c:
         f8:dc:f2:29:fa:ba:f5:49:76:4e:91:f1:1a:c5:bf:15:6f:bb:
         74:5a:e9:34:0c:a5:e4:5d:ea:bc:44:ab:3c:f4:d3:22:37:3f:
         55:7c:5f:73:53:10:ff:38:04:ae:72:ef:c4:b3:98:45:20:7e:
         87:21:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:49:41 2026 by rpki-client