Error: rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
File:                     YCmqMiQ3H_80BW6mdrX5npQG208.mft (raw, json)
Hash identifier:          Dq1dkfWLgc60BxlzKw2+iQ8ElBZd0eA6RDI/ad/F3as=
Subject key identifier:   80:DA:02:1A:6F:8F:9A:8F:AD:1A:55:68:A3:DC:3F:6F:9E:A1:C6:E4
Authority key identifier: 60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F
Certificate issuer:       /CN=F362BDD7AF/serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
Certificate serial:       02F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
Manifest number:          02F9
Signing time:             Mon 26 Oct 2026 04:35:39 +0000
Manifest this update:     Mon 26 Oct 2026 04:35:38 +0000
Manifest next update:     Wed 28 Oct 2026 04:35:38 +0000
Files and hashes:         1: YCmqMiQ3H_80BW6mdrX5npQG208.crl (hash: Y1GjwxgnvgNZpIB0glR1JG0Ycj/QkY9+Yc3FYEb3MUQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362BDD7AF, serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
        Validity
            Not Before: Oct 26 04:35:38 2026 GMT
            Not After : Oct 28 04:35:38 2026 GMT
        Subject: CN=6aded89b-78a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:1b:ce:cd:b3:83:6c:2b:1a:77:6b:ad:89:
                    d8:42:9e:f6:c1:76:8c:fe:2e:c4:c2:92:67:c0:ea:
                    aa:c7:0d:99:a5:e1:16:79:af:ce:8d:63:90:a4:24:
                    76:7a:f9:6a:0d:58:49:04:e4:fc:1a:14:88:44:a0:
                    fa:e2:65:3b:18:68:ea:54:ab:82:7d:ff:74:67:b8:
                    6e:b9:f6:9d:38:61:76:ef:c6:76:e7:2d:58:80:59:
                    ac:0e:b5:1b:3d:8d:f3:9c:b9:0c:65:a4:d5:a4:17:
                    18:3e:a7:96:2b:15:34:11:d8:7f:b0:9b:55:6d:b8:
                    7b:0c:0a:bd:74:96:ff:23:8b:ee:0d:a0:ff:84:3c:
                    b3:52:6b:86:1b:78:40:e1:ae:cf:de:2d:ac:36:81:
                    ae:05:21:25:50:6a:93:06:f6:7e:4b:23:d5:3c:0a:
                    ca:24:ff:c3:92:bc:61:2d:6d:f0:db:8e:10:4a:24:
                    27:bf:36:47:b3:ac:e2:62:e9:eb:fa:ad:d0:71:c1:
                    ed:75:bd:fa:ab:f1:56:a2:80:6e:db:21:e6:fa:f9:
                    da:82:90:c0:de:0d:a1:5e:77:d7:3d:88:ab:f6:08:
                    40:d3:30:62:a0:a7:0c:e8:ca:cb:ed:e9:4f:99:ef:
                    fd:b2:ec:65:93:6a:f6:16:e5:5b:62:fb:4a:f1:41:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DA:02:1A:6F:8F:9A:8F:AD:1A:55:68:A3:DC:3F:6F:9E:A1:C6:E4
            X509v3 Authority Key Identifier:
                keyid:60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:13:c6:08:5b:10:41:ef:6e:fb:8a:17:be:a8:b4:d6:99:c5:
         75:df:f1:b2:50:db:0b:40:33:1d:05:a9:44:08:ba:e1:28:8a:
         34:ce:56:76:1a:6b:92:16:2a:be:61:dc:8c:b7:9a:77:29:bf:
         e3:94:d6:10:c8:50:25:b7:ff:09:b5:3c:dd:f5:b7:d8:7f:9a:
         f3:c6:59:e6:e2:2d:25:fb:12:c1:3b:26:6a:f0:a4:ba:5a:1d:
         00:52:5f:d2:94:e3:86:9c:dd:ff:69:ac:00:dd:31:ac:2e:58:
         40:f4:7c:0a:9e:da:dd:ca:88:d1:74:d9:29:09:9c:c9:ae:c9:
         c9:0a:db:56:f6:bf:b5:9d:de:95:3a:df:e3:23:82:40:05:a1:
         d5:a4:ea:d2:93:44:61:b7:e5:f9:e9:ae:93:86:16:5c:fb:8c:
         1d:b3:2e:3f:de:6e:cc:d3:d5:d0:4c:c1:45:8f:5e:6d:46:c8:
         cf:41:bf:8f:db:a3:86:58:5e:e5:18:c1:41:b2:01:e4:ad:10:
         d4:b8:cc:db:3f:b5:bd:d6:11:92:e6:b9:44:ad:5b:8b:53:be:
         06:a8:37:92:dd:53:83:b0:85:94:dd:5a:8a:46:9c:e9:c3:be:
         be:95:95:a5:ca:0e:db:65:db:ed:75:8b:89:07:2f:55:cc:6b:
         36:70:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:12:35 2026 by rpki-client