Error: rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
File:                     IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft (raw, json)
Hash identifier:          Kd9ZHXuz51ufFavJ/otvS8AnyE+eOHj5L4kd/HBxy/E=
Subject key identifier:   19:3E:19:CA:45:2B:C8:FA:E0:8F:FB:96:E1:34:50:BE:7D:5B:A9:88
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Certificate issuer:       /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial:       068B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
Manifest number:          067D
Signing time:             Tue 27 Oct 2026 02:45:40 +0000
Manifest this update:     Tue 27 Oct 2026 02:45:39 +0000
Manifest next update:     Thu 29 Oct 2026 02:45:39 +0000
Files and hashes:         1: IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl (hash: N0n4yH5cV7r3yXfQOYt+kutkBWYPxA7vgZsdSoR5ea0=)
                          2: 7338398EA39111F1925398E7CE1D38B0.roa (hash: KklqFodPk024WmEeD9hmlTQAo902LvAfcUVbvASz7Uw=)
                          3: F132E838CDF411F19D9CC5CDCE1D38B0.roa (hash: c8GrqWn1qpZmWwSUaQr4JBEdH1cx/JZOGcp0AELBsM4=)
                          4: 7A8800C28A7111F180F127ABCE1D38B0.roa (hash: 2ehSc60zY3y4+5rl9i2l3o4/3/0osjXnhIwaZrI/PV4=)
                          5: 2D026B62CDF111F18D36C1B5CE1D38B0.roa (hash: eO5/PM2Arxyx1LSd9fhqBlKbSSjJVMQ1Z7zrM3cw4Mw=)
                          6: 3A47BBAA8A7211F1B70D4BAFCE1D38B0.roa (hash: 9YxCC6XFigvI59ReTL1/gq9EKcFYu9AFVIy5WOLkals=)
                          7: D34D76AAA39011F1B63C8FE3CE1D38B0.roa (hash: fnJY6qM/XgZeiDqjF9qeQjNp6VvA4rCuICciFhfFGCg=)
                          8: E12966E48A7211F1AE9266B3CE1D38B0.roa (hash: G3gOlfSioE5sHcHggulA4GQis9x4ecOeCpryWDgr1yw=)
                          9: 260F9184A39111F1AFE100E4CE1D38B0.roa (hash: FsYETWCLrSw7ouKsJazu2E2w8f6wEBerzl6J6tAxKMI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
        Validity
            Not Before: Oct 27 02:45:39 2026 GMT
            Not After : Oct 29 02:45:39 2026 GMT
        Subject: CN=6ae01054-8d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:01:27:63:d1:81:40:10:aa:c1:b7:82:e2:
                    0e:9b:79:42:b9:e7:da:a7:a3:c0:b4:09:99:00:da:
                    3c:d2:8e:0b:d7:5b:5c:8e:8e:81:69:3c:d6:c5:32:
                    bf:eb:bc:3e:79:57:f8:6f:43:6b:f0:b0:a0:e1:67:
                    28:5c:24:ac:94:34:3f:6a:57:ce:5f:68:16:b5:60:
                    f7:c3:42:68:32:23:f7:b0:67:be:08:ae:15:ab:a1:
                    c4:7c:41:c6:36:c2:8d:1a:65:dd:37:a5:d4:e6:f2:
                    7d:4d:7e:48:db:34:f5:0b:e0:01:f2:d7:3a:38:a7:
                    c4:4c:e1:af:af:7a:c4:fc:60:9a:8a:ad:5e:15:1a:
                    f0:94:54:51:70:d4:cc:a5:58:af:08:61:54:01:d6:
                    be:42:7e:51:1d:be:70:65:ae:23:e9:b1:89:22:f8:
                    60:72:7f:63:99:c3:8b:6d:9f:ea:06:ab:f0:c8:64:
                    fc:69:26:f5:19:08:53:2f:b8:85:b4:0a:a4:c2:4a:
                    98:cc:36:f6:a6:7c:08:a8:ea:aa:b3:7c:58:40:c7:
                    67:e5:37:8d:4b:d1:e3:48:de:d9:01:9b:50:2a:b2:
                    f2:ad:8d:f1:94:42:f6:75:6d:7b:4f:73:88:c8:dc:
                    14:0d:87:51:da:c7:a5:14:70:7e:44:df:03:c7:8b:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3E:19:CA:45:2B:C8:FA:E0:8F:FB:96:E1:34:50:BE:7D:5B:A9:88
            X509v3 Authority Key Identifier:
                keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:cc:1a:8a:9c:cb:f0:b0:91:9b:f8:99:b7:7f:3c:e9:70:e7:
         a1:4b:ee:ab:5e:18:0e:e3:8b:ff:6c:1b:f0:d8:88:68:a4:3e:
         cd:a3:b7:48:08:e8:1e:32:e1:8d:46:6d:df:be:1c:74:e4:b8:
         fe:94:55:f9:42:b4:74:e6:bd:b2:8d:ae:77:11:6e:12:ef:a9:
         ed:75:9f:5b:a7:87:15:0a:0c:58:f3:18:0c:9d:cf:34:4d:b4:
         fe:ae:ad:62:1c:27:c4:e0:87:e1:4d:10:f6:c2:af:f7:10:80:
         ef:e1:0f:25:84:64:34:e1:a7:fd:b6:d9:6e:3f:70:5f:6b:95:
         b8:8b:ab:e3:89:9d:75:ac:31:e2:e1:db:12:b4:92:07:eb:f0:
         c1:d5:f0:07:79:30:d7:c4:5c:57:0a:99:d3:7b:fe:3c:06:bc:
         76:c3:ec:13:ae:e3:b9:f5:be:34:51:73:ea:b2:58:af:06:3f:
         08:95:77:28:0d:50:a8:21:e1:ee:58:72:32:4d:f2:42:b0:a0:
         1f:a0:05:28:ee:e0:e8:df:3c:7c:df:93:b7:b4:ee:12:a1:75:
         d6:d5:d1:ee:47:6e:11:72:35:f5:9f:41:40:b4:06:e7:a8:c5:
         95:1f:3a:b9:77:a2:1c:86:37:da:a7:a6:d5:de:14:8a:9b:4f:
         8f:3d:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:14:42 2026 by rpki-client