Error: rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft
File:                     77eqjvlsE6qtyEdvvd6fMnf81W0.mft (raw, json)
Hash identifier:          zUj66qa57Ic5/gslZhGkJtRuZP85FURJVmsanRjvsFI=
Subject key identifier:   E5:6C:7C:50:9D:AB:A0:4E:B7:09:C9:B9:1B:9E:5A:DA:0B:80:DE:2F
Authority key identifier: EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
Certificate issuer:       /CN=F36251E0AF/serialNumber=EFB7AA8EF96C13AAADC8476FBDDE9F3277FCD56D
Certificate serial:       03D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft
Manifest number:          03D3
Signing time:             Sun 25 Oct 2026 04:05:43 +0000
Manifest this update:     Sun 25 Oct 2026 04:05:42 +0000
Manifest next update:     Tue 27 Oct 2026 04:05:42 +0000
Files and hashes:         1: 77eqjvlsE6qtyEdvvd6fMnf81W0.crl (hash: eU1vttKWhPfD38N1ALmyOhRTT2C+G9FhALBTIBzeYXg=)
                          2: E883F5DAFFAA11EEB452902D017001B1.roa (hash: DujQOR8lgqXuI7Ca5VeFBLLM9Nr1YJ2AU6XT7Vwygec=)
                          3: E5339BB6FE4B11EEBF03D6FE007001B1.roa (hash: clO1hTVCUiFR0kzwPDKqsSqfTZGuR9lBaBQYCVXfpFM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985 (0x3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36251E0AF, serialNumber=EFB7AA8EF96C13AAADC8476FBDDE9F3277FCD56D
        Validity
            Not Before: Oct 25 04:05:42 2026 GMT
            Not After : Oct 27 04:05:42 2026 GMT
        Subject: CN=6add8016-db42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:09:82:d8:49:7b:46:1d:f6:3a:92:a4:f4:
                    f9:15:03:3f:c0:09:54:c3:d2:92:72:ba:bb:07:d4:
                    eb:64:cc:7e:87:7e:5b:68:84:b2:4e:08:e4:bf:d4:
                    fe:36:b2:cc:63:7e:65:1e:8c:a8:eb:4a:83:80:cb:
                    ab:42:d1:9e:fc:9a:3c:d4:9e:42:d4:1f:a6:73:5f:
                    53:89:72:81:63:2c:ca:93:23:f5:d3:ed:ce:86:5f:
                    72:f1:3a:ea:db:8d:d5:dc:31:80:1e:ce:3d:23:bc:
                    08:26:26:76:28:06:44:2d:8b:79:c7:1c:f3:8a:30:
                    fc:e7:fd:4a:02:63:6e:53:f2:96:df:50:86:37:f3:
                    70:0f:b3:27:45:8d:f8:b7:85:78:2b:87:53:fe:f4:
                    03:84:56:fd:4c:76:6f:ee:42:14:ce:f4:56:6d:05:
                    f0:c7:82:17:de:6d:16:59:3a:4f:25:69:93:ca:1c:
                    01:b1:cc:00:10:f4:4e:1b:59:87:66:1e:f4:16:b9:
                    ee:be:47:8e:cd:e1:22:b1:b9:8e:87:d2:47:4c:51:
                    cf:2b:bd:e9:86:65:5e:da:eb:17:a1:8c:ab:f7:4a:
                    ed:30:5b:ee:0f:2e:f3:a3:69:65:9b:68:a4:d8:b4:
                    56:5f:9c:32:66:fc:5d:5b:c7:be:9e:ce:39:ac:02:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6C:7C:50:9D:AB:A0:4E:B7:09:C9:B9:1B:9E:5A:DA:0B:80:DE:2F
            X509v3 Authority Key Identifier:
                keyid:EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:80:e3:5d:7a:ca:04:44:fe:24:7b:72:44:85:6e:66:45:
         d4:8c:6b:7a:cd:ed:1c:83:0a:e0:f1:72:f6:3d:70:74:e0:40:
         f7:09:25:40:7d:a3:41:ff:33:42:eb:ac:9b:a0:03:8f:54:e3:
         3f:93:fa:b2:8f:eb:2a:ae:6e:bc:63:c5:89:91:9b:b6:7d:62:
         d8:2c:c4:1d:21:cd:4d:9b:0f:97:3b:7a:92:3c:30:73:e0:28:
         63:98:e6:ca:91:be:90:26:2c:cf:a4:64:31:59:ad:61:a9:b8:
         19:b9:b3:6d:ee:77:0d:5c:56:9c:0c:71:98:91:c4:a2:3c:f3:
         50:d7:29:3b:f6:4d:da:8c:f4:a6:b2:7a:92:a0:51:f4:03:f6:
         01:1f:26:78:65:ae:9b:0b:94:40:31:cb:83:d5:96:de:ca:25:
         c0:61:4d:8f:e1:90:8f:04:4d:99:ff:5c:02:ce:91:01:f2:1a:
         7d:93:28:61:b0:53:d1:4b:69:25:27:58:6b:38:47:6a:93:61:
         4e:43:21:d3:0a:d5:32:9b:a7:bd:62:b9:11:b1:f0:93:e6:66:
         e8:5e:26:c1:9a:fb:da:37:ac:f3:e5:1a:8c:20:0f:32:d5:a6:
         28:7a:04:44:ed:6c:a9:41:8b:fd:20:f6:4e:17:2a:35:b6:c1:
         36:57:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:34:13 2026 by rpki-client