Error: rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
File:                     v13ZvUEyHNq78daooOZkfm_v0uM.mft (raw, json)
Hash identifier:          fFgfZ5HFQpyXel5Wp1Lf7R1TRpsh85jx3nnnxvVRpjo=
Subject key identifier:   6C:18:98:B0:F3:DF:D9:4F:B4:B8:BD:20:C6:AD:30:22:5E:34:63:FA
Authority key identifier: BF:5D:D9:BD:41:32:1C:DA:BB:F1:D6:A8:A0:E6:64:7E:6F:EF:D2:E3
Certificate issuer:       /CN=F3634E70AF/serialNumber=BF5DD9BD41321CDABBF1D6A8A0E6647E6FEFD2E3
Certificate serial:       09C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v13ZvUEyHNq78daooOZkfm_v0uM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
Manifest number:          09C1
Signing time:             Sat 24 Oct 2026 01:43:00 +0000
Manifest this update:     Sat 24 Oct 2026 01:42:59 +0000
Manifest next update:     Mon 26 Oct 2026 01:42:59 +0000
Files and hashes:         1: v13ZvUEyHNq78daooOZkfm_v0uM.crl (hash: 6P9+skPtxywt/cIqTTVjy/s1eFE2qB3GfknQklTngsM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v13ZvUEyHNq78daooOZkfm_v0uM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503 (0x9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634E70AF, serialNumber=BF5DD9BD41321CDABBF1D6A8A0E6647E6FEFD2E3
        Validity
            Not Before: Oct 24 01:42:59 2026 GMT
            Not After : Oct 26 01:42:59 2026 GMT
        Subject: CN=6adc0d24-de7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:c5:31:32:e9:b8:c1:27:17:23:e3:05:d2:
                    9a:14:bb:a9:18:00:9f:78:67:98:a6:94:d6:ce:15:
                    85:5e:59:68:58:e5:90:8c:15:36:1a:34:b0:dc:c0:
                    34:f8:0b:bc:e5:a2:52:b6:8a:55:98:f9:a8:10:8e:
                    a4:e0:5e:63:5d:c4:28:83:e0:e3:db:5b:ce:34:02:
                    6f:88:f4:e9:a1:69:19:f2:a8:06:56:8b:e9:e7:0c:
                    af:9b:ae:23:f4:0c:bf:23:34:44:01:6b:bb:6b:02:
                    e3:91:6e:da:a3:af:eb:3d:fa:e2:a8:a0:de:7d:db:
                    1c:6e:82:e7:54:ad:94:86:7e:6b:cd:5b:3d:d2:f1:
                    23:b4:5c:e2:2f:6d:c3:b4:48:44:0c:22:f8:66:04:
                    f8:73:8a:e7:78:97:b4:89:ea:ae:05:a7:9b:d0:54:
                    7e:fc:a8:6a:87:c2:db:72:33:4b:ce:99:22:a1:3f:
                    4f:7c:95:41:b5:5b:73:3a:a4:a7:6a:a4:3a:31:99:
                    ba:9b:b6:df:e3:ee:b1:01:c3:96:33:91:17:7d:ee:
                    7f:f5:7f:ff:21:c4:33:eb:1c:f2:ab:5a:43:0a:2b:
                    32:ac:bf:67:8d:0c:dd:ef:7d:fd:75:f9:59:c7:37:
                    b6:fd:1e:e0:69:d1:ef:c2:6d:b6:75:3e:98:ec:59:
                    e5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:18:98:B0:F3:DF:D9:4F:B4:B8:BD:20:C6:AD:30:22:5E:34:63:FA
            X509v3 Authority Key Identifier:
                keyid:BF:5D:D9:BD:41:32:1C:DA:BB:F1:D6:A8:A0:E6:64:7E:6F:EF:D2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v13ZvUEyHNq78daooOZkfm_v0uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:0a:32:c3:65:20:20:1a:86:82:92:44:b3:6b:9e:03:af:c8:
         42:cc:aa:60:de:9a:cd:8b:ad:2f:fb:8a:d0:b7:ee:8b:ac:6d:
         9c:d7:bb:43:44:c4:d2:4b:8d:9c:30:97:3c:c6:ae:0d:ae:77:
         f0:6c:a2:85:3b:1e:72:11:b4:21:c8:03:34:dc:8c:ee:e3:32:
         10:22:e8:d5:7b:a2:be:49:f4:df:dc:39:29:c9:7c:fe:84:69:
         42:96:13:a6:70:97:00:7e:e1:0f:3c:ac:5c:f8:ff:23:47:b4:
         6d:3c:47:91:c3:1a:a6:b3:03:d5:9b:35:f4:98:0b:c2:a0:20:
         fb:b4:1b:95:7f:e1:e2:2a:01:22:11:be:9a:0f:05:15:27:2a:
         34:59:3c:f8:5a:48:2f:49:83:e1:b2:c0:ed:ee:1a:70:07:fa:
         e4:85:b3:1b:df:c8:dd:3f:86:8d:fb:43:97:bc:fb:c0:7c:da:
         30:f6:8c:a6:70:b9:27:07:41:e6:d1:4f:79:9c:ee:69:af:1d:
         8e:24:d4:50:bd:1a:2c:4c:f2:66:50:02:2f:f4:99:bc:27:21:
         6d:51:10:48:9f:6d:9e:8f:56:60:d9:03:ec:96:cc:70:9b:c0:
         b6:d7:26:e9:17:09:cf:a6:75:c9:00:1a:a9:8e:40:88:16:ef:
         41:77:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:06:18 2026 by rpki-client