Error: rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
File:                     KSWEoez-KvMJMi1y5i2NXGpe968.mft (raw, json)
Hash identifier:          Qx17Ks/GDkM9RZ+PY42E5qHG82V0zu6JuANPvEgGpTI=
Subject key identifier:   C4:5F:28:BD:05:09:56:4C:E3:F4:E9:64:7A:31:4A:D8:B9:D7:68:66
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Certificate issuer:       /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial:       04CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
Manifest number:          04C6
Signing time:             Sun 25 Oct 2026 03:36:14 +0000
Manifest this update:     Sun 25 Oct 2026 03:36:13 +0000
Manifest next update:     Tue 27 Oct 2026 03:36:13 +0000
Files and hashes:         1: KSWEoez-KvMJMi1y5i2NXGpe968.crl (hash: nyDBqcbuW9zOpTwofw3nRuod/neLp+rejtMCEyqPxG8=)
                          2: 6E495492CED111F1A94F6CA6CE1D38B0.roa (hash: dIWjPvRKiehQKxDUj8gRSvjROiH3/wtBSyOJq6c5Y58=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364791EAF, serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
        Validity
            Not Before: Oct 25 03:36:13 2026 GMT
            Not After : Oct 27 03:36:13 2026 GMT
        Subject: CN=6add792e-eb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1e:7d:d4:a9:fa:1c:ce:67:2d:75:74:26:a2:
                    9a:87:11:23:b3:a9:f2:fc:f3:e8:00:d6:42:f3:59:
                    8c:69:82:d9:e4:06:cf:97:4b:71:e6:51:66:69:d7:
                    78:ac:8a:f5:6f:41:c4:2c:55:64:08:ec:5a:35:f5:
                    fe:09:66:95:8c:e2:4a:60:27:86:d2:c4:b8:a1:5f:
                    d8:2d:93:fb:48:cd:d1:12:90:38:c4:00:a1:5f:dc:
                    46:f9:cd:46:1b:3c:bc:43:ed:8a:76:76:94:9d:7c:
                    6c:00:fe:fa:e4:f0:3c:b6:08:59:2c:7a:3a:98:3e:
                    ab:6a:67:ee:ec:5a:50:5e:26:63:6b:ba:34:b4:ed:
                    9b:3a:04:6d:54:f5:1e:8f:11:8d:2c:71:08:56:8d:
                    cc:95:80:c6:61:1b:47:b8:ea:1f:23:21:0f:33:40:
                    9b:0a:6d:f7:96:b2:1a:f2:a1:19:7b:76:cc:ee:3e:
                    87:cd:3b:fe:c8:79:c8:10:46:12:3e:50:92:d1:d5:
                    9a:9d:a1:2c:bc:be:d7:cb:0d:95:72:b8:7d:80:74:
                    51:a4:60:7c:97:df:33:61:64:cf:00:52:7d:96:ea:
                    99:cf:6e:22:92:62:db:4d:ae:9a:92:7d:99:8d:96:
                    5e:b8:c1:72:cc:b3:88:c0:f6:9f:ac:7b:33:d2:ec:
                    a6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5F:28:BD:05:09:56:4C:E3:F4:E9:64:7A:31:4A:D8:B9:D7:68:66
            X509v3 Authority Key Identifier:
                keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:c2:57:5b:09:41:05:b9:a4:01:c1:62:ee:63:84:e9:f6:
         d3:b8:d4:5f:46:fe:37:8d:c0:5a:d0:6d:05:6c:30:0b:df:94:
         41:5d:e2:60:c3:1b:6d:2f:10:d1:31:07:b8:78:16:f2:c1:3d:
         89:50:a7:ea:37:e4:31:94:8d:74:ea:e5:6d:a1:29:95:58:57:
         9b:d0:ad:7b:82:43:50:08:73:0f:9b:9b:c5:f4:ef:cf:f6:37:
         b5:88:e6:6e:13:ba:4f:01:56:08:09:96:b1:97:18:af:4a:de:
         a5:67:fe:f0:f2:1c:5e:71:58:5e:89:12:74:82:45:f7:5b:1c:
         a4:57:f2:a4:71:b4:2c:0a:b3:60:67:68:fb:e8:59:41:fb:b7:
         1c:5f:09:a4:38:30:9e:49:59:46:54:57:00:c5:cf:66:d5:f4:
         78:fe:6c:91:e2:60:cd:94:26:a9:43:63:51:5b:d5:47:87:e3:
         d2:c2:f5:5f:6a:d8:2d:44:09:0b:81:59:26:e1:eb:5f:d5:ea:
         fc:dc:51:c5:e5:c3:76:75:3c:bf:8c:79:83:69:aa:57:fe:d1:
         28:20:a3:2b:55:09:7d:2f:27:0d:12:b7:c8:2d:53:f3:74:07:
         3c:65:71:18:ca:1e:65:bb:4a:b2:d8:8b:24:06:34:d6:77:aa:
         cb:9b:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:50 2026 by rpki-client