Error: rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
File:                     7LPP-0CimvoX8H5dSzxCY0E2ukA.mft (raw, json)
Hash identifier:          mPOSi2TzmknrXMg7Gi2cwEG42yEjZ04iIEhkGXwZoKk=
Subject key identifier:   62:C1:17:D9:14:72:32:9D:4B:2D:9B:06:B8:25:B6:DA:35:1C:A8:88
Authority key identifier: EC:B3:CF:FB:40:A2:9A:FA:17:F0:7E:5D:4B:3C:42:63:41:36:BA:40
Certificate issuer:       /CN=F3614C03AF/serialNumber=ECB3CFFB40A29AFA17F07E5D4B3C42634136BA40
Certificate serial:       0A2A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
Manifest number:          0A27
Signing time:             Sat 24 Oct 2026 01:38:43 +0000
Manifest this update:     Sat 24 Oct 2026 01:38:42 +0000
Manifest next update:     Mon 26 Oct 2026 01:38:42 +0000
Files and hashes:         1: 7LPP-0CimvoX8H5dSzxCY0E2ukA.crl (hash: d6RkIqxQV92ULvDv8FyCrpHsFHlpr7ZXJDyvmwBSwD8=)
                          2: 0636F15A898711F1BE979A10CF1D38B0.roa (hash: uXRE4MYJypYecPWIt2nhK7I0w3ERb1vCTX5Ha7buUdA=)
                          3: 53913FE406B411EAA1EA0549F8AEA228.roa (hash: XJEJSGpw335NcuwS3+6oYV5fIuyzKIEqyyHHkBG3bgI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602 (0xa2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614C03AF, serialNumber=ECB3CFFB40A29AFA17F07E5D4B3C42634136BA40
        Validity
            Not Before: Oct 24 01:38:42 2026 GMT
            Not After : Oct 26 01:38:42 2026 GMT
        Subject: CN=6adc0c23-dbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:05:18:0e:67:43:53:e1:7c:df:cb:d1:4c:ed:
                    db:0c:d9:c5:66:d0:bd:9c:64:7b:2b:69:c2:80:5f:
                    7e:90:4e:7e:6d:b3:a6:35:59:ae:93:4a:31:13:65:
                    dc:11:65:94:b0:1c:8e:09:86:43:60:03:dd:b6:56:
                    e4:2d:b1:1e:4b:68:28:35:07:be:1b:6a:cd:87:58:
                    2d:32:2b:e8:9d:43:e3:84:5a:9d:74:f7:cf:db:5b:
                    c4:e0:b7:db:cc:4a:8a:49:01:ff:34:f4:a7:8c:50:
                    26:94:39:b1:47:7c:59:1e:d2:af:cd:5e:f1:ec:38:
                    3e:e2:0e:e7:4c:ce:1f:8b:50:33:6f:d7:8e:f7:67:
                    7e:1c:de:3c:d3:c5:30:ba:43:56:a1:01:a4:c4:ec:
                    c7:3c:2e:ce:a8:80:f1:93:2a:dd:01:61:47:5e:ac:
                    7a:96:c4:a3:17:82:8f:83:ee:0f:5f:79:fd:04:23:
                    03:45:89:1b:9f:eb:e3:b0:0e:16:41:c9:12:f5:77:
                    c2:28:21:c6:8f:a3:f5:29:58:e8:3c:11:f1:9d:2e:
                    e8:37:9d:69:e5:90:16:26:d5:95:32:3c:88:63:f6:
                    6c:50:fb:38:e3:57:9d:d5:bc:f1:7c:c8:08:31:c6:
                    11:72:da:61:e6:fc:35:6a:47:f7:21:7b:44:0d:86:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C1:17:D9:14:72:32:9D:4B:2D:9B:06:B8:25:B6:DA:35:1C:A8:88
            X509v3 Authority Key Identifier:
                keyid:EC:B3:CF:FB:40:A2:9A:FA:17:F0:7E:5D:4B:3C:42:63:41:36:BA:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e7:31:b9:03:d8:10:34:02:cf:ea:34:7e:c5:9a:db:a4:d7:
         d6:a4:96:7f:64:f6:f0:1e:f5:70:6e:cb:75:1b:52:eb:ce:2b:
         64:7a:54:8e:0d:ab:19:04:20:4d:1d:c6:96:94:02:61:cc:a7:
         82:9b:4c:7d:dd:ae:c1:39:db:86:55:ae:6f:d7:00:d1:27:e0:
         60:84:c8:81:c9:db:ce:b0:cb:c6:5d:d8:29:70:05:4a:b9:8b:
         b6:27:ba:25:21:2f:f8:1b:36:2e:ea:d4:c5:a0:c1:8b:18:30:
         f5:64:2f:25:3f:b9:a3:e2:98:bd:0d:e2:9f:79:0b:60:90:75:
         2d:33:dd:86:fe:32:05:54:30:e4:e9:7f:e9:ce:cf:9f:3e:27:
         b3:e6:39:f8:ab:29:23:07:48:29:be:3b:ac:14:1d:b9:da:1f:
         9d:c2:82:a1:9d:5c:1f:73:e3:24:d2:bf:7d:8a:22:d7:01:b1:
         3c:e8:4c:fc:7f:31:b4:9c:33:05:ce:69:f0:a3:db:cb:3e:41:
         4d:31:55:4f:fa:30:0c:b2:0f:42:64:0d:ae:4e:e6:56:3b:e6:
         83:b7:40:89:e1:d5:eb:46:99:5c:fc:5b:95:28:f1:41:9d:2e:
         47:38:8c:d2:23:d5:9d:bf:fa:c5:13:dc:ad:f1:2e:3a:32:4a:
         bb:80:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:09:15 2026 by rpki-client