Error: rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft
File:                     m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft (raw, json)
Hash identifier:          WnFsVAQqvS9UTjOZewyFAldEnCR+MprqDPROCh/s1qY=
Subject key identifier:   62:FA:B3:BB:7A:FB:8C:68:BD:A5:F2:18:3E:B2:72:B9:37:BF:62:C2
Authority key identifier: 9B:FC:BA:69:8B:26:DD:34:61:0C:4A:FD:47:1E:24:1A:D7:94:51:A3
Certificate issuer:       /CN=F363BB47AF/serialNumber=9BFCBA698B26DD34610C4AFD471E241AD79451A3
Certificate serial:       05AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft
Manifest number:          05A9
Signing time:             Tue 27 Oct 2026 03:05:21 +0000
Manifest this update:     Tue 27 Oct 2026 03:05:20 +0000
Manifest next update:     Thu 29 Oct 2026 03:05:20 +0000
Files and hashes:         1: m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl (hash: 60HFQS8O5fmBIvUKoEhVHSZx33q/Wb5rAj+kfnyCuno=)
                          2: DEAEE6708D8611F1ADB24903CF1D38B0.roa (hash: xEhpgK8WpYB9KamuSCLRAETU2oMp2zJ+vScsaBIsWrY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BB47AF, serialNumber=9BFCBA698B26DD34610C4AFD471E241AD79451A3
        Validity
            Not Before: Oct 27 03:05:20 2026 GMT
            Not After : Oct 29 03:05:20 2026 GMT
        Subject: CN=6ae014f1-01a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:87:3f:2d:66:89:b8:4b:3c:db:6f:7d:f1:
                    f0:5c:e4:f6:b7:4c:9b:47:bb:3c:4b:be:ff:01:5e:
                    58:cc:e0:29:ae:e2:c2:b5:ed:bd:fc:f4:a1:f7:73:
                    6a:56:47:d4:68:ee:c0:d2:ee:6a:ed:0a:79:2f:e5:
                    a4:0c:00:e6:0b:91:46:18:e0:9c:44:c6:f3:50:f5:
                    eb:38:cd:e7:7d:c9:b9:81:c4:27:81:2c:bb:6f:60:
                    96:64:8a:13:d6:a4:9b:7f:a8:42:1d:be:84:d5:44:
                    3a:34:ab:b8:f2:88:9f:38:8d:f3:14:e2:9c:8f:2d:
                    d1:3d:cb:02:2e:2f:d6:29:df:4c:9d:69:81:6e:81:
                    e7:56:5f:44:0f:86:7b:2f:dd:48:ba:68:4e:e8:38:
                    0c:bd:bc:a0:02:69:ce:76:b3:ff:25:bf:e4:6a:6e:
                    b6:95:5a:c3:33:f0:4f:f0:07:7f:11:3a:2d:4a:3b:
                    75:51:c7:b2:c0:8d:05:30:fd:3b:a1:89:d9:ed:4e:
                    a0:5f:27:a1:2f:f4:6c:3a:55:d4:c9:66:0d:16:71:
                    06:15:61:ef:27:80:a8:8a:43:a2:83:b1:32:a4:61:
                    d6:c2:9e:91:32:18:b1:ce:e8:36:f2:ce:2a:ba:98:
                    ab:32:a6:bb:c3:03:97:f9:00:bb:9e:16:62:5f:d3:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FA:B3:BB:7A:FB:8C:68:BD:A5:F2:18:3E:B2:72:B9:37:BF:62:C2
            X509v3 Authority Key Identifier:
                keyid:9B:FC:BA:69:8B:26:DD:34:61:0C:4A:FD:47:1E:24:1A:D7:94:51:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e4:eb:34:68:8c:80:a0:e9:03:10:32:d0:26:54:32:23:25:
         29:52:9b:d1:c9:7c:08:90:6f:6a:59:3e:58:1b:e9:88:73:bd:
         c9:e6:06:a2:75:cb:a0:6a:08:c8:b5:aa:b9:49:60:bf:59:e3:
         51:55:02:32:45:37:4d:46:95:5d:de:23:54:57:5f:80:f0:4e:
         f4:a9:17:84:aa:8c:ae:e5:60:aa:f1:f2:1a:d8:4d:1f:51:c4:
         9a:37:ab:b0:e5:c5:79:76:5a:e0:a5:0a:a0:96:b4:fe:b8:1c:
         e7:46:70:a7:aa:92:e3:83:cf:16:db:3e:a4:38:6d:dd:9d:1b:
         51:ca:55:a0:cf:fe:b9:43:2e:24:35:c3:bc:52:b0:2e:5f:74:
         89:6e:87:f6:4c:54:f3:12:9d:e7:b7:d3:77:3b:6f:0e:7b:ce:
         37:47:23:a7:f5:94:f7:11:c6:5b:1f:62:5d:2f:f3:b5:c7:1f:
         c9:c0:85:e9:c9:89:c8:d8:63:0f:d1:31:e3:e9:e1:51:41:43:
         fe:84:96:db:91:27:aa:c6:77:a4:6c:e4:96:ed:ee:4f:22:cd:
         10:9b:98:9d:f3:21:27:e4:7f:07:14:e4:a1:6a:20:80:32:19:
         5d:e3:de:e3:a8:61:e4:de:85:f2:d6:82:eb:9b:3b:00:0c:e5:
         12:62:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:53:33 2026 by rpki-client