Error: rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
File:                     JV9qID5NQpmXaROm9i3oxI7sk70.mft (raw, json)
Hash identifier:          /eVtv6XWDpurDnLHiFCnrXC8m+2/jB/+xR5bBQslD5s=
Subject key identifier:   32:64:08:0D:FF:2C:AE:B5:BE:24:35:86:76:BB:C7:19:C0:69:B6:3C
Authority key identifier: 25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD
Certificate issuer:       /CN=F363460FAF/serialNumber=255F6A203E4D4299976913A6F62DE8C48EEC93BD
Certificate serial:       02E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
Manifest number:          02E2
Signing time:             Sun 25 Oct 2026 04:37:02 +0000
Manifest this update:     Sun 25 Oct 2026 04:37:01 +0000
Manifest next update:     Tue 27 Oct 2026 04:37:01 +0000
Files and hashes:         1: JV9qID5NQpmXaROm9i3oxI7sk70.crl (hash: kR/kwai5zJBG6xJiv0YfOJGANFDi2aQl39ao89oWbsk=)
                          2: 81D2A93E986211EF8DC64A77762E951A.roa (hash: XCH2tO5kEYMyiAwzUo8LnwXXodXNXur00bVM7AU5ZV0=)
                          3: 26DC05C4986311EFBE63827B762E951A.roa (hash: 9xkZbyUzhuxbnuEDnds0Ogy4qS4HDRlvSKhOgozHOF4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 04:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363460FAF, serialNumber=255F6A203E4D4299976913A6F62DE8C48EEC93BD
        Validity
            Not Before: Oct 25 04:37:01 2026 GMT
            Not After : Oct 27 04:37:01 2026 GMT
        Subject: CN=6add876e-6061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:0e:6a:cd:f3:f8:20:f1:41:88:64:c5:87:
                    8c:30:3a:23:65:9b:dd:fe:c7:58:ef:34:e3:80:66:
                    72:6a:4a:f7:e6:13:cd:68:af:2c:4e:d7:9c:25:6a:
                    4c:71:51:d7:a7:92:e8:6a:b1:96:fd:d5:77:5b:f3:
                    ba:05:6f:07:3e:22:04:83:47:5e:43:75:c9:b9:0b:
                    a2:a2:49:a2:1c:9b:87:b1:ea:b9:e8:0d:44:6e:60:
                    57:1d:33:0f:85:f7:2e:de:86:dc:88:f8:a7:bf:2c:
                    32:23:12:d6:40:60:e0:c5:ce:14:da:f4:f9:a9:c7:
                    58:0e:23:b5:60:38:b0:31:8c:c4:d5:52:90:e2:2b:
                    f2:aa:bf:2c:8c:25:ff:d8:18:c3:ae:f6:c4:20:a4:
                    1d:f2:c0:54:57:4c:bd:05:97:15:dc:06:d0:66:c1:
                    39:b1:d6:a2:89:75:27:ad:58:09:20:de:72:ef:48:
                    b9:dc:8c:78:84:fb:52:81:ae:07:d2:98:ac:04:b0:
                    fe:1b:bf:71:78:d9:13:40:a0:23:9c:a7:76:7d:28:
                    b8:3f:17:7f:26:5e:e4:20:30:7e:d7:1b:f0:c3:e6:
                    92:47:3d:f4:3e:61:09:68:9f:09:6d:c4:b7:96:21:
                    bc:39:e3:03:4d:cb:7b:61:9c:e3:07:47:27:ab:b6:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:64:08:0D:FF:2C:AE:B5:BE:24:35:86:76:BB:C7:19:C0:69:B6:3C
            X509v3 Authority Key Identifier:
                keyid:25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:d2:b5:11:a0:be:97:9e:4a:2e:6d:1a:e1:a7:e7:c7:45:
         55:1e:22:bb:77:ac:d5:6c:74:d0:ae:af:49:83:d9:d2:30:df:
         f6:4d:1e:28:10:d3:49:56:e8:f3:83:a9:fb:02:3d:e7:75:47:
         50:6c:e3:ff:ad:a9:34:c9:cf:c2:f3:01:70:22:ba:b5:88:29:
         09:60:b9:0d:37:00:f7:fa:fe:8d:2a:73:06:c3:d4:1c:dc:b7:
         43:8e:d3:e2:93:7d:8d:ec:ff:bb:f4:5a:6e:a1:cb:84:25:c8:
         25:b1:6f:ba:b3:06:0e:9c:66:88:80:58:41:19:28:36:a7:65:
         87:86:46:31:ca:ad:d3:5c:db:9e:60:91:87:3d:ba:09:3b:55:
         c3:22:0e:b7:2e:c4:c6:1e:6f:0c:a8:82:16:c6:9a:c0:6b:bc:
         25:16:94:ea:ba:ba:2a:3b:01:46:b5:6f:4b:1b:7e:59:00:4b:
         89:c1:5e:4f:9c:fa:53:ac:9e:17:2a:4b:67:6b:33:81:8c:65:
         f5:e4:e4:cc:57:f0:5d:0c:4f:cd:5f:50:31:b5:fd:ad:62:6a:
         a5:46:ec:50:dd:a7:b5:63:76:ee:37:2e:bc:32:9d:c3:96:de:
         ac:5f:07:f6:61:71:93:44:ea:a0:f3:21:0a:da:dd:c1:fb:3c:
         80:2c:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:59:19 2026 by rpki-client