Error: rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft
File:                     3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft (raw, json)
Hash identifier:          lTPHVHjcFONoATkdySsQ/F/RpAVbeha0hUZKQJFFSGM=
Subject key identifier:   61:79:6D:64:09:0F:A1:8E:D6:3F:A4:04:37:F9:8B:35:86:9D:8A:D6
Authority key identifier: DE:EB:F5:D2:21:B1:C4:8D:05:9F:DF:89:4E:EA:18:66:B0:36:FC:B1
Certificate issuer:       /CN=F361D56AAF/serialNumber=DEEBF5D221B1C48D059FDF894EEA1866B036FCB1
Certificate serial:       03DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3uv10iGxxI0Fn9-JTuoYZrA2_LE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft
Manifest number:          03D9
Signing time:             Sun 25 Oct 2026 04:04:43 +0000
Manifest this update:     Sun 25 Oct 2026 04:04:42 +0000
Manifest next update:     Tue 27 Oct 2026 04:04:42 +0000
Files and hashes:         1: 3uv10iGxxI0Fn9-JTuoYZrA2_LE.crl (hash: vySWa4uJgya9XFdspgWAsbwxy0/X84YOXRDHFhxXDIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3uv10iGxxI0Fn9-JTuoYZrA2_LE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 04:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D56AAF, serialNumber=DEEBF5D221B1C48D059FDF894EEA1866B036FCB1
        Validity
            Not Before: Oct 25 04:04:42 2026 GMT
            Not After : Oct 27 04:04:42 2026 GMT
        Subject: CN=6add7fdb-49d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:ca:72:31:1c:4d:1a:00:51:c0:70:db:e4:
                    58:b2:86:16:e8:23:7f:c8:a4:74:55:52:20:19:7b:
                    b4:25:8e:ab:76:b7:e4:ca:39:c6:79:a4:e4:c4:89:
                    77:82:46:7e:9f:45:df:73:05:8e:de:d9:9b:0d:f3:
                    b3:0f:32:6c:28:a1:36:09:d0:9e:17:0b:4a:c0:4f:
                    39:5e:ae:ec:3d:4e:c2:f5:ae:27:b9:b4:5a:ac:56:
                    8d:a4:15:84:19:32:4c:95:e7:00:3c:f9:08:ff:1a:
                    8d:16:56:6f:62:c4:67:21:d3:a2:91:41:21:5d:48:
                    df:05:d7:be:a8:71:e7:c4:a5:ed:5b:75:05:c5:e9:
                    79:a9:ed:00:3b:30:ef:3c:da:54:b0:86:94:af:56:
                    da:0f:e0:bf:ac:7d:b7:4c:64:65:8a:5a:57:48:6d:
                    29:c7:79:65:85:6c:12:04:c4:50:1f:b6:64:5e:45:
                    36:a6:e1:7c:53:5a:92:fa:0f:93:8b:c2:f4:a6:f6:
                    ae:49:2d:ad:ec:14:f9:bb:5f:96:0b:a0:b4:c4:87:
                    41:30:e6:6b:e8:01:af:c8:11:9b:69:d6:c0:a0:c1:
                    2a:4d:48:44:19:ec:03:bb:5f:20:4f:a7:32:b6:fb:
                    11:51:5e:3c:23:55:f5:90:2b:e7:63:f1:bd:ba:dd:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:79:6D:64:09:0F:A1:8E:D6:3F:A4:04:37:F9:8B:35:86:9D:8A:D6
            X509v3 Authority Key Identifier:
                keyid:DE:EB:F5:D2:21:B1:C4:8D:05:9F:DF:89:4E:EA:18:66:B0:36:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3uv10iGxxI0Fn9-JTuoYZrA2_LE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D56A/918952F8DABF11EE9E12439B775412E6/3uv10iGxxI0Fn9-JTuoYZrA2_LE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:86:74:ae:86:c4:d0:77:35:13:46:31:e4:6c:54:42:1b:6d:
         44:e2:80:51:82:93:e1:4b:6e:ac:62:6e:55:5a:1f:d6:66:d8:
         19:6c:dc:ca:a2:f5:95:f5:59:ec:7e:a0:37:6b:e7:9e:71:65:
         ba:b5:ab:0b:12:ac:0d:9b:1d:f4:c6:62:b0:8d:5d:23:38:32:
         dd:b8:2d:97:3a:93:3b:64:60:27:02:a2:b9:20:7b:1d:ba:21:
         45:ce:fa:59:4e:8b:f0:88:19:75:1b:f4:54:b8:17:80:ed:b7:
         e7:06:26:0f:e1:28:87:fc:75:d5:51:56:76:a7:21:82:a4:50:
         4e:dc:c6:b2:7a:84:14:d1:2b:b5:f5:f7:64:3e:04:c6:bd:ee:
         38:22:6b:81:7a:82:c7:25:e4:56:d3:ac:ee:cf:8a:8e:d1:60:
         fa:1a:d3:9b:30:56:d7:03:52:93:ba:23:75:87:43:b1:cd:07:
         0d:9d:36:27:1b:1e:65:7b:b2:6f:c7:3a:71:95:3d:2f:e4:d5:
         57:c4:91:f3:45:43:58:29:9b:17:75:8d:62:8f:53:b0:36:ad:
         42:e7:41:b5:d1:40:ce:06:84:09:37:01:36:64:2a:dc:ac:16:
         ad:32:f7:34:ab:d7:6d:a4:48:fd:18:92:21:43:3f:a8:2c:d0:
         1f:f7:d8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:52:54 2026 by rpki-client