Error: rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
File:                     JEaS2sYhhOTIg1elJqucZvlKTH4.mft (raw, json)
Hash identifier:          c29GZZa0g0qLE5pmQrhlwRTg04V8AiUo702T0KNsj+g=
Subject key identifier:   6B:8F:B8:CA:79:6C:D0:B6:08:EC:F4:ED:E8:F7:2A:A3:0E:75:21:7E
Authority key identifier: 24:46:92:DA:C6:21:84:E4:C8:83:57:A5:26:AB:9C:66:F9:4A:4C:7E
Certificate issuer:       /CN=F363DCF2AF/serialNumber=244692DAC62184E4C88357A526AB9C66F94A4C7E
Certificate serial:       028B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
Manifest number:          0287
Signing time:             Sat 24 Oct 2026 04:46:25 +0000
Manifest this update:     Sat 24 Oct 2026 04:46:24 +0000
Manifest next update:     Mon 26 Oct 2026 04:46:24 +0000
Files and hashes:         1: JEaS2sYhhOTIg1elJqucZvlKTH4.crl (hash: 5x7LuhXEpdUPqHkSOhNu0BU8+024Hzw0QMyccCy/JaM=)
                          2: 7E8AB1F2210D11F0BF867894DAE4EC9C.roa (hash: DjV7nCg+4hB07UZMYzd0xmACSMYBPBQfqRJs7j2MoEM=)
                          3: 201348D2210D11F0ABE7E991DAE4EC9C.roa (hash: LUo+fZ8ICythu7NN9JfJV1LkDsZAEGtwMfGmobKx8es=)
                          4: D6E208F6210C11F0A4C7E78FDAE4EC9C.roa (hash: UTbJHvdCycZUQvLa3nWOWV1moJ9jZms3ZBFk0hjIuSc=)
                          5: E21E90EE210D11F0934A7996DAE4EC9C.roa (hash: iUS+8IiwQWTC3KosgvVLrgeHR5LzZ/YYi+HkfN+5rAw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DCF2AF, serialNumber=244692DAC62184E4C88357A526AB9C66F94A4C7E
        Validity
            Not Before: Oct 24 04:46:24 2026 GMT
            Not After : Oct 26 04:46:24 2026 GMT
        Subject: CN=6adc3821-d7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:75:ec:97:cc:75:ec:1d:fc:bd:2f:71:dd:
                    4f:8d:53:0f:67:ea:9e:43:7b:88:47:99:6f:63:ea:
                    4a:e2:30:a0:ad:c6:49:62:97:c0:bd:48:04:c5:0f:
                    ea:90:34:1e:2a:4d:61:c4:48:c5:3d:54:52:9d:f9:
                    9d:ab:49:78:d7:a3:f1:ba:11:83:40:d1:6f:d4:1b:
                    e9:6e:34:5c:80:eb:e5:4a:9b:1b:b1:1d:40:f2:5f:
                    cb:bd:e0:3c:68:7f:14:5e:49:62:c2:fd:f1:71:86:
                    19:fd:ae:cf:13:e2:00:ec:02:55:e9:82:93:c0:ff:
                    48:e1:dc:20:2a:5d:86:ab:66:0d:bd:34:d3:19:6c:
                    9b:4a:b2:1a:9f:97:9a:78:00:1a:6d:1f:eb:53:21:
                    cc:b0:da:1d:02:4e:55:e0:64:4c:50:b1:38:26:f0:
                    d6:4a:09:87:7a:86:49:a4:b8:bd:a4:e9:87:a7:4b:
                    93:6e:c2:67:70:7e:41:16:64:8f:af:60:86:55:d6:
                    af:63:e5:73:6b:42:a3:a4:3a:a3:6a:92:6c:df:16:
                    2c:a1:69:6c:db:0c:f6:a5:0d:76:1b:74:74:ce:e3:
                    d9:ad:f1:1e:7b:6a:7c:bb:00:50:54:40:db:69:94:
                    12:58:46:ff:6e:fd:b2:ed:21:13:87:91:ff:d9:53:
                    9f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8F:B8:CA:79:6C:D0:B6:08:EC:F4:ED:E8:F7:2A:A3:0E:75:21:7E
            X509v3 Authority Key Identifier:
                keyid:24:46:92:DA:C6:21:84:E4:C8:83:57:A5:26:AB:9C:66:F9:4A:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1c:73:b1:52:ee:11:e9:0e:a6:ac:fe:64:76:a3:c6:6b:a8:
         68:f8:1a:03:19:5e:c3:93:00:7e:c5:22:31:05:cb:37:0f:2f:
         ca:16:85:90:8c:42:85:ff:5d:60:f9:c1:1f:e0:2c:19:ce:33:
         59:5b:c8:6b:3d:7f:c6:5f:31:89:7b:de:38:82:c6:9b:5f:65:
         51:d8:d8:26:d4:ec:37:5b:8c:c6:30:ef:81:b4:b0:cb:11:c6:
         d1:d4:28:a5:0b:7d:47:d1:3c:39:f4:a9:66:d5:37:e0:2e:8f:
         f5:6d:3b:c4:f2:03:4d:e5:80:f1:88:1d:29:74:a1:43:9d:f2:
         d7:28:19:66:cc:c5:4a:1e:38:73:3b:02:d8:5c:73:6f:26:14:
         d5:45:2c:97:63:90:5d:28:9c:a1:9b:02:24:02:44:42:af:2c:
         ec:57:1d:4f:8f:36:1e:5f:5b:b8:d2:5b:b1:a9:1e:4c:25:8b:
         aa:36:75:41:ca:22:52:19:cb:ce:34:11:98:72:8c:fb:8b:c6:
         4a:8e:35:74:c1:2a:28:9b:1f:5d:ee:db:80:f4:41:dc:ad:81:
         a1:8e:f7:9d:3d:1f:8e:3e:8d:bd:00:0b:c6:81:d3:79:dd:76:
         28:74:c5:1e:db:73:10:f6:d8:57:7d:83:c3:1d:11:08:30:b0:
         13:40:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 19:06:13 2026 by rpki-client