Error: rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
File:                     2FLZY43gNj3YSH_gDch1vI-a080.mft (raw, json)
Hash identifier:          rQ1bjcExX6fMAL7r3exkS4hHiAn0DuQHfFgOHcPl/7Q=
Subject key identifier:   C5:6E:94:57:F9:08:26:9D:DD:ED:0F:68:8C:B6:81:9B:94:69:3C:21
Authority key identifier: D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD
Certificate issuer:       /CN=F3636791AF/serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
Certificate serial:       C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
Manifest number:          BE
Signing time:             Sat 10 Oct 2026 05:34:25 +0000
Manifest this update:     Sat 10 Oct 2026 05:34:24 +0000
Manifest next update:     Mon 12 Oct 2026 05:34:24 +0000
Files and hashes:         1: 2FLZY43gNj3YSH_gDch1vI-a080.crl (hash: 0WqH3jsPsVAC8k0pUMLLV4om/uKt0dGKIp8o86NOwvo=)
                          2: 74884CA4B9E711F180DACBCFCE1D38B0.roa (hash: LEXED7Nf6ftFCeGxmBOpAy9x/ctAN/C5+ND7nERpONs=)
                          3: 3CC30608340711F1AFB184CFCE1D38B0.roa (hash: I53gWi2CJOwoPI79Xfi6bjQo4aU2ORPkeD1ir1Rh7cI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 05:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AF, serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
        Validity
            Not Before: Oct 10 05:34:24 2026 GMT
            Not After : Oct 12 05:34:24 2026 GMT
        Subject: CN=6ac9ce61-edd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:58:6f:1e:75:35:30:bc:a0:6b:b8:40:26:
                    b7:31:b7:4c:b4:9f:17:c4:f5:e3:25:a8:3b:79:f4:
                    78:a5:9f:94:de:be:0d:3a:96:c3:a0:67:3e:c7:f0:
                    72:05:ce:59:3d:0d:f8:ee:52:ed:60:a2:13:a7:b5:
                    63:22:58:9a:36:93:bf:36:5b:70:e3:78:34:23:cc:
                    56:34:86:87:cb:63:0f:a0:df:55:6a:81:00:70:43:
                    9d:28:44:59:82:47:79:c7:53:8a:68:6f:2f:11:dc:
                    db:9e:0d:aa:c1:b6:87:92:d9:cf:db:da:a0:94:cf:
                    0b:9e:57:f8:c3:c7:65:53:7f:4e:db:a2:02:9d:33:
                    db:ac:c6:2b:ee:58:13:38:68:94:c2:0c:16:ac:18:
                    a4:7b:aa:de:f8:e4:f0:88:89:18:3e:b0:a7:15:36:
                    ad:a3:bb:b6:c0:29:df:48:c0:1e:f8:02:08:58:7c:
                    6e:35:2f:d2:37:e3:fd:be:c5:22:a6:30:88:1e:0b:
                    c0:34:8a:8e:0b:21:3d:ae:6d:9d:34:55:1c:16:ca:
                    91:ea:ab:ce:98:74:9c:03:cb:9e:4b:fa:0c:17:e9:
                    31:1a:13:5a:29:66:cb:3e:d4:ff:4b:58:b6:c4:3f:
                    6e:4c:90:57:cb:d1:ba:f6:08:5f:7f:e1:55:92:c2:
                    09:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6E:94:57:F9:08:26:9D:DD:ED:0F:68:8C:B6:81:9B:94:69:3C:21
            X509v3 Authority Key Identifier:
                keyid:D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ee:96:59:19:d8:24:60:82:74:aa:0a:6a:7c:2b:12:59:21:
         66:26:10:51:f2:08:34:ff:27:c7:0e:15:23:08:8c:10:73:ab:
         0f:88:46:63:8c:81:67:1d:b5:b9:2c:28:56:f6:ce:4b:13:40:
         b7:56:f4:ec:03:fa:b2:9f:11:39:63:26:a4:ec:8c:bb:28:5e:
         09:ad:71:20:50:0e:e0:ff:63:ae:6e:6c:28:df:c5:31:d3:fe:
         23:26:c0:48:39:59:46:b5:a0:a7:fa:0e:fc:7e:2d:f4:93:cf:
         76:7e:c4:87:4d:d2:55:9b:19:0c:2a:fe:3a:09:56:12:87:0e:
         90:cf:ac:00:45:0f:ac:5e:d6:71:42:e1:a5:0b:58:86:d5:ed:
         25:30:8f:20:ac:b1:f2:2e:f8:29:1a:4e:3d:be:b4:f4:9d:59:
         dd:72:aa:96:2b:fb:52:f0:75:14:1d:1d:c7:2e:79:02:66:f6:
         e5:45:0d:0a:80:9f:7f:5a:9a:e8:ee:17:16:6c:48:05:5c:2c:
         44:da:c8:8b:6b:fb:d3:ef:fa:ba:c7:ea:e5:93:07:26:d0:5d:
         ec:99:92:05:bb:06:b6:74:a9:32:88:fe:55:fe:ce:de:fe:19:
         6f:9b:72:ca:fc:b2:7d:a2:6e:35:b8:26:5e:e8:10:67:06:21:
         c2:82:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:20:37 2026 by rpki-client