Error: rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
File:                     0unaaO71cIn0RVxxt8nHfu3iFmI.mft (raw, json)
Hash identifier:          Nezk0pkBXCGOZH9IISPxrzoYEAhxmsviBi/LfGRXVT8=
Subject key identifier:   34:29:CC:F2:12:43:DC:91:B1:F4:99:0F:B1:72:B7:28:5D:E3:C8:DB
Authority key identifier: D2:E9:DA:68:EE:F5:70:89:F4:45:5C:71:B7:C9:C7:7E:ED:E2:16:62
Certificate issuer:       /CN=F362E505AF/serialNumber=D2E9DA68EEF57089F4455C71B7C9C77EEDE21662
Certificate serial:       01F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
Manifest number:          01F0
Signing time:             Sun 25 Oct 2026 04:56:16 +0000
Manifest this update:     Sun 25 Oct 2026 04:56:14 +0000
Manifest next update:     Tue 27 Oct 2026 04:56:14 +0000
Files and hashes:         1: 0unaaO71cIn0RVxxt8nHfu3iFmI.crl (hash: 2YKbEkny1d6goNo5IP8hqloSKYSfvdVBJxMRzspvdyI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E505AF, serialNumber=D2E9DA68EEF57089F4455C71B7C9C77EEDE21662
        Validity
            Not Before: Oct 25 04:56:14 2026 GMT
            Not After : Oct 27 04:56:14 2026 GMT
        Subject: CN=6add8bef-1a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:b8:23:12:0b:16:5b:e6:16:f6:b0:00:50:
                    c1:e2:95:09:72:f5:4a:8f:71:95:ea:5f:15:f5:ed:
                    3c:72:a4:33:41:06:f8:f1:a9:90:dd:70:6e:d4:82:
                    a0:cc:2e:58:8c:e8:83:ba:9f:66:35:ac:ca:7a:55:
                    5e:39:c6:15:ba:c3:eb:9b:31:4f:e1:3b:f6:a7:23:
                    d2:0b:a7:e6:16:af:3b:f2:8a:39:a4:8c:6c:cf:b4:
                    24:44:1b:12:f4:c3:78:45:7e:ab:1b:89:72:5b:55:
                    30:74:42:df:84:d0:c5:10:3b:a9:0b:8f:03:8a:7f:
                    0f:05:17:91:8a:93:94:2d:28:29:df:8b:4e:6a:a8:
                    6b:91:ff:5c:27:57:75:3f:70:19:72:5a:ac:fe:ac:
                    b9:4f:d0:a8:0b:8e:3d:11:0d:e7:25:ff:a7:92:ac:
                    6f:2d:d2:22:fd:2c:33:40:d7:0c:36:f6:69:db:13:
                    1a:48:e1:aa:95:8c:83:f1:f3:ac:79:6d:d4:78:6c:
                    ab:ab:fa:cd:95:a1:6d:0e:76:f4:29:e1:f1:7d:77:
                    dc:e4:bd:7c:c5:e4:df:6c:35:bf:8c:ad:2b:bd:02:
                    f0:36:6a:eb:92:8c:5f:d3:06:41:17:84:f5:05:84:
                    29:6a:49:96:71:2f:10:f6:9e:19:2c:ab:d1:50:72:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:29:CC:F2:12:43:DC:91:B1:F4:99:0F:B1:72:B7:28:5D:E3:C8:DB
            X509v3 Authority Key Identifier:
                keyid:D2:E9:DA:68:EE:F5:70:89:F4:45:5C:71:B7:C9:C7:7E:ED:E2:16:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:df:9e:85:4c:96:70:5b:ea:f7:80:01:dc:9f:ac:a2:23:16:
         33:dd:ff:a0:0b:f9:03:3b:b9:46:b9:12:85:a6:4e:55:44:93:
         d0:d3:57:73:6d:74:03:ee:42:a6:44:1b:57:09:01:e1:65:7b:
         70:cd:7f:95:40:f6:a1:3e:5d:3e:cd:0e:39:f2:2f:78:a0:de:
         8a:ea:2e:09:2f:f2:86:fc:6f:de:46:5e:46:39:b5:95:88:08:
         02:82:4f:33:37:7e:26:21:62:69:61:51:91:01:ab:71:72:fd:
         5d:a4:5c:a0:44:8b:04:01:56:77:57:4c:32:4a:66:25:cf:95:
         c1:e4:52:08:fa:c0:70:e9:9f:51:fa:6f:ea:3b:c4:ff:8e:28:
         7e:37:c8:84:54:05:4d:a4:0f:02:be:30:df:7c:65:84:1c:85:
         3d:2f:7d:e0:55:e8:43:6c:b7:dc:6c:74:27:96:d8:6a:76:49:
         d1:6f:fb:d0:54:e8:d4:3c:bb:11:e9:3c:b7:34:aa:19:c9:93:
         ac:76:a0:60:a8:e4:fb:0d:8e:88:b6:33:06:2b:cc:3a:0c:d7:
         14:ad:fc:b5:d6:c8:08:6a:8c:b4:f6:8d:0b:94:c9:50:0d:e6:
         b6:d9:c7:20:e5:4f:77:84:81:69:31:1a:cf:35:f7:e3:ca:27:
         71:54:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 17:56:55 2026 by rpki-client