Error: rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
File:                     cEamUnYMjpA1cB1qRNwnGg4zAVw.mft (raw, json)
Hash identifier:          j8s2oxvH0WFrUbuSkoAXAAPhBY7Ap3Qs7xbKsZMMMOk=
Subject key identifier:   D7:51:6C:1C:AC:15:F4:A7:18:5B:D5:14:91:39:A1:F4:E4:6F:A4:07
Authority key identifier: 70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C
Certificate issuer:       /CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
Certificate serial:       0AAD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
Manifest number:          0AA9
Signing time:             Tue 25 Aug 2026 01:19:43 +0000
Manifest this update:     Tue 25 Aug 2026 01:19:42 +0000
Manifest next update:     Thu 27 Aug 2026 01:19:42 +0000
Files and hashes:         1: cEamUnYMjpA1cB1qRNwnGg4zAVw.crl (hash: pgwHsf7gc3Upq3Zkv3p4wDEzGpX6585E2iBLyYhwftU=)
                          2: 0530CDFC45F511F0B8D116B4DAE4EC9C.roa (hash: NAagYOuoz83gJBbc9yz2V2e+hj5eern7tDyLsDy4nYU=)
                          3: 83E8C882ABE211EAB75B5884F8AEA228.roa (hash: RmYidaSanSrUDIijG3Hos1aIo1Mry4vynEz6zaj5KdQ=)
                          4: 59A177F88DCF11EA93675420F8AEA228.roa (hash: iJ4bpcIMbfbrSSynUTnD1MYU3E3BFy11GDgoP7CyilU=)
                          5: ACCF80A0725A11E9A4F37F71F8AEA228.roa (hash: /cq3b3YEjHQKJ7r9oxTK2L2hH6NQ1gLsW5kWro4hp5c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 27 Aug 2026 00:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2733 (0xaad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610674AF, serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
        Validity
            Not Before: Aug 25 01:19:42 2026 GMT
            Not After : Aug 27 01:19:42 2026 GMT
        Subject: CN=6a8cedaf-384e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:ea:3f:16:c0:da:a9:be:fc:2e:d8:fd:08:
                    0a:e7:8e:59:3b:2a:11:79:49:35:a7:39:c2:52:8d:
                    ad:bb:38:b9:47:6d:8a:1e:0c:91:54:4b:88:82:c4:
                    9e:60:6f:d1:0a:e6:5d:d6:38:7d:a4:e2:ee:b6:e4:
                    88:8e:ae:22:63:d3:0f:ec:6d:fc:fd:d2:0b:95:7b:
                    b3:87:38:8c:55:9f:1f:02:59:da:40:b7:cd:e4:a7:
                    31:24:e6:47:dd:86:50:11:16:d8:1e:dc:e9:d4:52:
                    d9:2b:6f:71:12:cf:24:fa:b4:ca:6a:6c:32:e4:56:
                    fd:76:ad:17:56:a6:73:68:5e:65:b7:5b:20:b7:73:
                    a9:06:fa:53:50:74:83:7e:3a:54:01:d1:b2:d7:cc:
                    4e:7e:81:3d:f7:55:bb:b9:06:d8:03:77:d3:da:39:
                    e9:91:21:9a:8b:8a:a6:e3:04:65:21:67:13:37:4b:
                    e0:6e:22:b9:f2:78:2b:a2:1b:45:1d:57:38:56:db:
                    18:76:14:60:56:81:66:c1:26:16:22:b0:dc:18:75:
                    79:69:3b:fd:c0:0e:bb:c0:37:56:05:2a:f6:76:24:
                    3a:9b:68:f2:49:0e:24:73:72:fe:96:b8:bd:66:36:
                    23:cc:4e:b2:8c:32:d6:74:90:1b:1b:8a:c9:1b:b5:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:51:6C:1C:AC:15:F4:A7:18:5B:D5:14:91:39:A1:F4:E4:6F:A4:07
            X509v3 Authority Key Identifier:
                keyid:70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:98:14:22:e2:97:a5:5e:ca:bc:2b:49:b6:53:a2:9d:92:
         bf:2e:0b:57:2d:2d:40:21:e6:d6:00:1e:d6:05:8d:6c:b8:c7:
         e2:d3:d1:84:35:96:d2:18:15:a1:ba:31:ce:1a:33:2e:64:d9:
         ea:68:b5:d3:5b:9b:52:ed:39:ac:09:dc:9d:53:0b:1c:fc:79:
         ec:68:8d:e8:50:83:26:fc:ad:5a:e4:35:82:90:2d:2d:ce:87:
         a2:50:e6:92:17:65:3d:ba:32:65:9b:54:fd:87:d0:b5:fa:43:
         cb:18:40:0f:cc:82:d8:e7:d4:71:27:1e:55:c4:97:2d:1f:14:
         95:0f:d1:62:fc:6c:6b:8b:b9:23:fa:44:b4:8a:a6:2b:80:88:
         a2:f5:11:7d:d7:60:64:b4:e9:be:a7:ec:42:5e:47:77:6f:93:
         62:85:a5:2a:a7:0f:b4:0e:6f:f3:af:61:f8:a1:12:7e:2b:70:
         42:8e:3b:f8:22:d7:09:1b:ec:ab:52:45:14:a4:39:53:fa:6d:
         7f:dc:1b:29:20:94:7b:d1:63:3c:f8:5f:ae:85:26:9e:37:e3:
         f6:ed:40:6b:e9:9e:99:56:d7:c4:df:cd:e4:d4:8c:a5:06:f2:
         87:7e:2d:92:42:3a:d9:33:37:ee:13:63:d4:ba:a8:35:29:3b:
         63:dc:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 03:42:45 2026 by rpki-client