Error: rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
File:                     QabtdYD_4RTJIrivEHMnCV4AVbo.mft (raw, json)
Hash identifier:          2RHTa27b9gtuF8wKxV56XZPs9pd1FfpsUbElPEjWDpY=
Subject key identifier:   A7:31:52:16:DA:B1:F3:AF:26:BE:BD:CA:32:D5:63:1F:FA:69:32:C9
Authority key identifier: 41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA
Certificate issuer:       /CN=F3633204AF/serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
Certificate serial:       0755
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
Manifest number:          0752
Signing time:             Mon 28 Sep 2026 02:25:51 +0000
Manifest this update:     Mon 28 Sep 2026 02:25:50 +0000
Manifest next update:     Wed 30 Sep 2026 02:25:50 +0000
Files and hashes:         1: QabtdYD_4RTJIrivEHMnCV4AVbo.crl (hash: K6Ify9cMBkCc4o9UAJ2iClSAP6rIq4wWDcs3xYRHQGw=)
                          2: 8961C8808CF111F18A83BEECCE1D38B0.roa (hash: QljAnFSb/QBMhFaqF0/T5YKBD3OTqbRzJH5A+zTfq1g=)
                          3: B904AFAE405211F0AECBAA98DAE4EC9C.roa (hash: EPkgdYP45sUjC5MQQ8eIhXPc3ynifHxMQiyi4EpsgAM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633204AF, serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
        Validity
            Not Before: Sep 28 02:25:50 2026 GMT
            Not After : Sep 30 02:25:50 2026 GMT
        Subject: CN=6ab9d02e-14e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:e0:46:e2:5d:b4:b8:e4:6f:51:30:63:1e:
                    12:86:af:34:6e:d2:b6:bf:3b:05:3e:91:41:06:a1:
                    e2:e5:86:a7:53:3f:ac:3d:33:75:c4:e1:af:e5:1f:
                    52:8c:40:7f:d9:63:ef:2e:40:7e:9b:e2:41:bd:0e:
                    b4:a0:3d:5d:6b:b1:af:cb:7c:e7:f5:89:e9:93:64:
                    eb:52:1f:a2:21:7a:ca:ff:93:fb:bd:e9:a0:92:a3:
                    6a:3e:a2:f1:aa:96:ce:ea:22:67:e1:36:9a:bd:82:
                    12:c3:da:5f:e4:9d:3c:b7:b2:09:6a:66:ef:49:56:
                    be:99:48:f4:f1:a4:53:ab:3e:77:d5:9c:96:fe:e9:
                    64:df:a0:80:81:d7:cb:cb:e8:d5:dd:9d:e0:df:a9:
                    3d:3e:7a:f7:d3:84:46:10:e2:3e:74:aa:72:0b:31:
                    07:9d:d0:43:f7:e2:dc:b0:c8:29:f0:37:aa:04:83:
                    a0:3a:b5:b7:b0:5c:fe:71:0d:de:f8:88:cc:58:28:
                    60:fa:c2:26:c8:df:b9:a6:90:86:33:d7:d4:e7:5f:
                    40:db:d9:c2:d5:ec:10:5e:8d:91:92:59:26:4d:53:
                    47:40:fd:a6:f1:48:a3:90:cf:da:7a:a5:64:61:6d:
                    6b:5b:99:cb:45:b6:2d:67:ef:12:5b:9d:f1:52:dd:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:31:52:16:DA:B1:F3:AF:26:BE:BD:CA:32:D5:63:1F:FA:69:32:C9
            X509v3 Authority Key Identifier:
                keyid:41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:06:de:d6:52:8e:3a:86:c4:d4:1f:e4:cd:98:9e:8d:49:61:
         76:28:ae:1e:ec:2b:ba:41:f5:13:31:44:89:9e:72:df:92:fd:
         a6:5f:dc:76:18:90:ec:b3:4f:e7:88:f7:31:48:1f:04:d6:2d:
         ce:0d:f7:54:78:71:9e:6a:27:95:c3:12:50:49:e6:79:e6:38:
         1a:a9:81:80:c5:a1:3a:9b:cc:dd:0c:d2:45:b4:de:a5:15:d0:
         da:f3:0f:ff:1b:76:c7:13:b9:76:dc:7f:8b:7c:ff:05:61:c8:
         16:15:a0:76:26:ce:c6:80:15:47:95:ec:36:9a:95:aa:83:2f:
         61:8b:ef:9e:f1:83:83:f2:e1:f3:fa:c0:42:96:db:ad:fd:eb:
         ff:e9:27:a0:d2:0b:80:cf:a7:98:4d:d0:7d:2d:f6:a8:16:d9:
         09:17:fa:63:ff:9e:d6:2e:f3:6a:e1:63:0e:02:36:f6:60:83:
         24:e6:d3:2c:59:42:ba:f1:06:14:8f:d4:65:f2:4a:f9:e6:c0:
         e7:7c:22:46:f7:a6:7e:fc:e3:ef:23:a5:ca:a3:f1:3c:3f:d5:
         46:53:aa:28:55:11:85:79:17:76:b3:51:40:b4:97:32:d9:99:
         08:22:11:16:de:76:c3:d1:f1:79:84:0b:a1:f4:0f:cf:db:f5:
         ae:48:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:47 2026 by rpki-client