Error: rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
File:                     cEamUnYMjpA1cB1qRNwnGg4zAVw.mft (raw, json)
Hash identifier:          kEcy8OroL8uJt0T3bnabLigItKL4tSvZXms+9uNeqnM=
Subject key identifier:   6E:52:E7:CF:4C:2D:33:6F:69:7D:37:C9:C9:4A:54:FE:99:99:3F:58
Authority key identifier: 70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C
Certificate issuer:       /CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
Certificate serial:       0ADF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
Manifest number:          0ADB
Signing time:             Wed 14 Oct 2026 01:19:35 +0000
Manifest this update:     Wed 14 Oct 2026 01:19:34 +0000
Manifest next update:     Fri 16 Oct 2026 01:19:34 +0000
Files and hashes:         1: cEamUnYMjpA1cB1qRNwnGg4zAVw.crl (hash: 8jDS5v9cxh/ySj/Utp5jzNbnSFIeASwkqVIfidG4PJU=)
                          2: 0530CDFC45F511F0B8D116B4DAE4EC9C.roa (hash: NAagYOuoz83gJBbc9yz2V2e+hj5eern7tDyLsDy4nYU=)
                          3: 83E8C882ABE211EAB75B5884F8AEA228.roa (hash: RmYidaSanSrUDIijG3Hos1aIo1Mry4vynEz6zaj5KdQ=)
                          4: 59A177F88DCF11EA93675420F8AEA228.roa (hash: iJ4bpcIMbfbrSSynUTnD1MYU3E3BFy11GDgoP7CyilU=)
                          5: ACCF80A0725A11E9A4F37F71F8AEA228.roa (hash: /cq3b3YEjHQKJ7r9oxTK2L2hH6NQ1gLsW5kWro4hp5c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 01:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2783 (0xadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610674AF, serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
        Validity
            Not Before: Oct 14 01:19:34 2026 GMT
            Not After : Oct 16 01:19:34 2026 GMT
        Subject: CN=6aced8a7-cc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:cb:43:f9:a3:97:55:50:98:35:bb:ed:c6:
                    d9:e9:51:9a:d4:e7:4c:4e:a8:29:5f:88:1d:10:f0:
                    1a:be:db:a8:88:1b:ca:fc:90:4c:ae:62:58:1c:ad:
                    76:8b:d4:1a:d8:ab:6b:a8:c6:90:b3:77:4b:ab:12:
                    9d:d5:18:25:4f:2b:6f:bd:cf:5c:5a:ba:80:5c:ec:
                    7e:21:81:4a:fe:c1:3e:98:5f:60:44:39:69:bc:50:
                    93:a2:b6:52:29:66:10:13:7a:7e:3a:2e:60:05:c2:
                    50:04:60:b6:4f:da:dd:7c:2a:28:47:2b:01:a9:32:
                    b7:c2:17:87:06:c6:5d:d0:b8:59:77:b7:ba:d3:a7:
                    4b:db:12:d4:85:8e:43:b9:72:82:f3:ad:cb:04:92:
                    5f:86:d9:e1:cf:f5:e1:82:73:c6:ee:a8:8a:bd:7d:
                    9a:87:d3:5d:0e:fe:47:ad:aa:8e:84:a2:87:ab:a0:
                    bb:91:ad:23:d8:0c:8e:b2:9c:f3:ca:fe:72:55:9e:
                    9d:55:1b:d2:fe:7a:23:5d:84:8c:d2:cf:cc:7f:c1:
                    ae:f8:fa:82:72:17:8c:e4:77:40:85:48:4f:de:d7:
                    91:49:46:4a:e5:31:b9:34:6a:9e:4e:1b:ef:a3:70:
                    82:28:82:32:8b:09:36:ae:de:81:2b:be:6c:ab:fd:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:52:E7:CF:4C:2D:33:6F:69:7D:37:C9:C9:4A:54:FE:99:99:3F:58
            X509v3 Authority Key Identifier:
                keyid:70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1f:1a:2d:e8:b9:25:07:36:97:3d:91:bf:a6:27:8f:98:2a:
         ec:20:a5:cf:21:ae:52:dc:6a:b7:04:b3:be:6d:64:9a:e5:ee:
         9b:48:cf:10:6d:66:74:11:31:30:c3:85:8b:e9:54:7f:82:95:
         e3:cd:39:6d:cc:31:ee:24:e0:d4:70:60:d4:90:b1:bc:3a:5e:
         14:30:56:0e:7a:19:78:47:ff:4c:9b:43:27:91:1d:ba:e3:b1:
         d4:7f:5a:73:21:ca:7e:f4:c4:76:16:cc:97:06:3b:8e:f4:a1:
         1e:3d:ce:04:ca:8c:6d:9e:3d:51:53:aa:82:61:79:34:d5:6d:
         c3:10:28:00:e8:69:f4:7e:89:58:86:05:de:1d:9a:ef:f0:e6:
         74:fb:67:dc:ba:fa:c6:27:9a:cd:81:94:ca:af:c9:5b:7e:cb:
         7b:70:d2:65:dd:b0:11:56:88:2b:a5:24:da:77:10:aa:85:19:
         1d:85:6d:55:8e:94:e4:ea:ea:3f:81:70:9b:19:43:58:2c:88:
         e8:3f:d9:b1:6d:71:be:ce:1d:fd:1d:38:32:d9:1d:94:fb:3e:
         08:7d:91:5e:9c:4c:05:cd:2b:eb:7f:df:03:87:3c:ae:ac:e1:
         e3:21:50:c7:2f:47:d0:e6:c4:7f:cd:05:33:18:42:2d:98:c5:
         3d:04:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:19:37 2026 by rpki-client