Error: rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
File:                     IntrN-F-sAlMAwSTmy_FiOHmbpk.mft (raw, json)
Hash identifier:          kE8uLznosH8igRsHnsmQ82XXOV7Q7rwyGrF5acuO28E=
Subject key identifier:   67:5C:9A:B2:32:7C:F9:02:3A:49:C7:7D:11:40:A7:ED:3A:EC:71:A1
Authority key identifier: 22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99
Certificate issuer:       /CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
Certificate serial:       09D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
Manifest number:          09C3
Signing time:             Mon 26 Oct 2026 01:43:33 +0000
Manifest this update:     Mon 26 Oct 2026 01:43:33 +0000
Manifest next update:     Wed 28 Oct 2026 01:43:33 +0000
Files and hashes:         1: IntrN-F-sAlMAwSTmy_FiOHmbpk.crl (hash: ner4qSMlMZkbx0hfykUa+eYdRx/0557QdkyOWEBpBQ0=)
                          2: 1C274C668B6D11F1A7E638A7CE1D38B0.roa (hash: BYXcLc8yVJg0/PGauTq5hMJcoG2ciDZFyZOpgA5cgQ0=)
                          3: 58DAE6048B6D11F1B01651A7CE1D38B0.roa (hash: s+JuGZVDj1DTbu6gO2nCudM/RmHwFP1Ko5pF9KfUv7Q=)
                          4: D6315E4A8B6C11F1B8A7CDA6CE1D38B0.roa (hash: MBON5mNlc4C8WBGzLO6znSiU5zdAyzgoK2JCWib7WBw=)
                          5: 1AB19F168B6E11F1A1EB54ADCE1D38B0.roa (hash: R8Sbz6U/SzXNtZApqhf88rSoPdpiVfa6rtdX2EGlkKE=)
                          6: E515FA6E8B6D11F1A85176ABCE1D38B0.roa (hash: kybgrwqkh7P5iHV/1GZjSNx8J7YUz+idr2f7Ol8Enls=)
                          7: 99393F708B6D11F18CC467ABCE1D38B0.roa (hash: hpir94CZU2Kd6h0PXrKLBkVe6GVP5bjek09DAkpnzKg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 01:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2513 (0x9d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623193AF, serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
        Validity
            Not Before: Oct 26 01:43:33 2026 GMT
            Not After : Oct 28 01:43:33 2026 GMT
        Subject: CN=6adeb045-bfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:5e:ac:b5:e4:01:81:17:54:73:3b:ce:a9:
                    6c:77:9f:6f:ef:ef:13:e6:59:b2:81:0b:d2:a3:66:
                    1b:c8:84:9d:5c:e4:fa:c5:21:8a:7d:c0:ed:8b:23:
                    9f:d7:27:d0:e2:ad:3b:24:2d:ea:a1:0a:98:73:39:
                    ef:c8:ea:39:13:e7:1c:78:39:c1:bb:4c:b6:46:7a:
                    a9:c9:4b:58:a7:c8:1b:df:85:06:6e:c5:45:3a:1c:
                    9d:d7:e5:bd:82:5b:64:00:de:a4:e8:50:c5:26:87:
                    5b:f2:06:ac:7b:48:76:cb:82:de:54:b0:a0:36:da:
                    0f:6c:8a:89:dc:9f:15:78:91:4f:33:85:cc:55:d9:
                    cc:1b:d5:5d:1c:8d:57:e6:a2:11:f6:cc:a3:3c:92:
                    00:2f:5a:d1:d9:81:65:29:7a:eb:ce:5b:09:44:a1:
                    fb:0c:aa:1a:0c:f6:7a:8a:08:0d:d1:00:d7:6b:da:
                    ec:ad:2d:44:ca:b3:b3:69:9d:2a:eb:fa:4a:98:c1:
                    a5:43:3c:4d:e7:bb:ec:ce:0d:34:6f:c3:5a:bd:83:
                    e1:49:be:94:ed:90:a7:02:b7:29:f5:04:cc:8d:4f:
                    0f:41:3b:fb:15:79:01:70:35:69:c5:c4:c5:bf:d1:
                    da:68:a5:bf:7e:0c:86:74:c0:71:3d:db:44:b6:3c:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5C:9A:B2:32:7C:F9:02:3A:49:C7:7D:11:40:A7:ED:3A:EC:71:A1
            X509v3 Authority Key Identifier:
                keyid:22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:64:79:9a:40:39:cb:61:e2:2f:51:5d:77:65:33:ca:fa:
         6b:36:84:4a:62:c1:7c:2a:aa:92:49:66:e6:7c:fc:85:1a:25:
         72:1d:02:d0:4f:cc:5d:df:e3:2f:98:fc:b3:9d:1e:bf:5a:f4:
         28:b5:bc:93:96:15:41:ac:1a:60:8b:62:95:f6:3a:39:9f:2f:
         4b:a1:b4:c7:e8:9d:5f:4f:64:10:40:34:a4:40:78:f9:ab:d6:
         2e:69:67:5d:7d:8a:d2:df:ea:19:93:c6:38:60:94:b7:15:4b:
         2c:0c:45:21:2b:53:1b:0b:3c:9f:ec:b5:bb:d9:84:00:9e:d7:
         2c:eb:46:e9:ad:1b:05:44:ea:6d:be:08:7e:f9:95:71:c4:6c:
         99:07:97:c0:10:e0:9c:d3:cd:55:a9:f4:3d:29:b4:b2:dd:e2:
         59:1e:17:6f:d2:2a:27:74:02:53:66:4c:6e:59:16:fa:e4:f1:
         0c:3c:10:56:36:09:18:4b:86:dd:7e:12:9f:c5:f7:2a:54:54:
         bb:ad:76:ca:34:24:45:7f:90:11:6c:cc:c8:37:3a:c5:01:8a:
         3f:00:90:5e:4d:40:71:be:7a:64:60:28:21:2b:60:1e:ca:0e:
         cd:bc:d2:3f:98:93:da:62:cc:0f:d0:ff:cb:79:b1:e4:9c:c7:
         03:3d:58:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 15:23:40 2026 by rpki-client