Error: rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
File:                     U1CfTDp0tZI7cnx9NJqBzzFftis.mft (raw, json)
Hash identifier:          3q+3QocleeuU5gPQBIwghpQ4IqPDXeqr0gdm9UO6F84=
Subject key identifier:   45:CD:FF:FF:73:BC:F1:7B:82:E3:52:B5:03:EE:79:0A:96:B1:23:CD
Authority key identifier: 53:50:9F:4C:3A:74:B5:92:3B:72:7C:7D:34:9A:81:CF:31:5F:B6:2B
Certificate issuer:       /CN=F36B7F24AF/serialNumber=53509F4C3A74B5923B727C7D349A81CF315FB62B
Certificate serial:       5C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
Manifest number:          5A
Signing time:             Tue 03 Nov 2026 05:50:02 +0000
Manifest this update:     Tue 03 Nov 2026 05:50:01 +0000
Manifest next update:     Thu 05 Nov 2026 05:50:01 +0000
Files and hashes:         1: U1CfTDp0tZI7cnx9NJqBzzFftis.crl (hash: /jpOjR2De9pj3BkBEPx7o/WDEikkDag0+qINjmk47B8=)
                          2: 12A1149A940C11F18B624505CF1D38B0.roa (hash: 8mLLCndnzMbQ2nyrvyzBRBW70YFateeTW3IJydAjH4k=)
                          3: FCC8A5EEAF6711F1A22EAA0BCF1D38B0.roa (hash: H9dfCQysmouTEaUEeYveL3U37VaeWoFn81c3+Rr0znk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 05:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B7F24AF, serialNumber=53509F4C3A74B5923B727C7D349A81CF315FB62B
        Validity
            Not Before: Nov  3 05:50:01 2026 GMT
            Not After : Nov  5 05:50:01 2026 GMT
        Subject: CN=6ae9760a-de3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:70:ef:c0:94:9c:1f:f3:23:c5:8b:8a:c2:
                    cc:50:a5:7d:b0:1c:d7:4a:7d:81:ed:6a:b4:29:c2:
                    ef:0e:de:8c:e7:7e:10:e0:85:c0:82:42:71:69:74:
                    f7:ed:eb:b3:75:7e:66:3f:e4:30:1a:c1:6d:be:5e:
                    3f:18:30:10:06:bb:7c:a5:6e:84:aa:33:b1:89:9b:
                    b9:3a:be:c1:26:72:00:84:a8:95:fa:e2:39:67:b7:
                    de:0e:00:0e:98:ab:f8:3c:b1:17:02:60:f8:28:18:
                    7f:df:81:be:e5:64:93:00:af:d3:c8:7d:f7:94:01:
                    69:0d:22:7f:ac:24:a1:26:05:5c:39:73:ec:f3:6d:
                    fd:42:8c:31:12:23:8c:28:ba:78:6b:c3:da:14:4f:
                    1c:22:66:7f:33:b3:8e:49:35:68:89:45:3b:27:fc:
                    0c:6d:f6:49:e5:2d:d0:6d:41:22:a8:a7:c2:7d:91:
                    e7:28:37:46:0f:cf:f4:6f:0d:e0:57:04:55:ad:fd:
                    56:8b:64:40:a9:c7:3c:2f:52:de:11:15:d5:51:f5:
                    2a:9b:af:92:d6:c1:b3:cc:00:5a:c3:99:87:98:29:
                    29:91:75:4a:97:27:39:35:c0:e4:b9:0f:5c:bd:73:
                    ce:f2:57:9f:60:2c:b0:eb:92:20:be:5d:3b:c3:14:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CD:FF:FF:73:BC:F1:7B:82:E3:52:B5:03:EE:79:0A:96:B1:23:CD
            X509v3 Authority Key Identifier:
                keyid:53:50:9F:4C:3A:74:B5:92:3B:72:7C:7D:34:9A:81:CF:31:5F:B6:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:99:4d:12:7e:89:5c:55:96:02:4a:08:e1:4f:c8:b1:77:
         73:ee:44:e0:e1:c3:5e:33:8c:b0:f5:52:4d:2b:af:51:3c:01:
         13:9f:78:e6:ac:f7:c8:1e:21:b1:e9:de:f7:ca:c0:b2:c3:c9:
         48:47:b9:fe:b8:af:ac:b9:26:13:ab:33:4f:ee:51:49:54:20:
         6a:14:9e:21:20:ef:d9:01:2c:6c:e2:1a:05:1a:f7:d7:d1:9e:
         f9:08:dc:35:85:d0:94:0c:f1:fa:11:87:99:84:63:08:57:74:
         8d:87:54:36:15:95:f2:b3:df:88:45:13:49:ba:f9:b8:68:0d:
         5a:f7:45:1f:3b:f4:35:d4:d8:33:97:0b:0e:2d:fd:b8:4f:dd:
         23:1a:79:5a:f4:22:7d:18:10:71:86:e3:e1:29:4e:ea:7d:32:
         89:bd:4b:d2:9b:0b:35:94:9c:e8:78:57:c3:b7:f3:32:08:e1:
         06:1a:67:9e:1e:cb:e7:eb:6e:f2:e7:b8:db:76:5e:7c:5a:04:
         a0:34:05:01:16:fa:dc:5a:52:51:80:62:72:78:32:0c:43:bd:
         78:b1:c0:6b:b5:3f:29:72:6d:88:4d:d2:74:72:15:ed:3b:b9:
         db:2e:3f:c7:31:0a:a8:74:0d:39:78:44:6f:6d:84:6b:5f:0d:
         31:f8:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:48:12 2026 by rpki-client