Error: rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
File:                     J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft (raw, json)
Hash identifier:          vLOUXdr+fb3FshftdSuz4CpC0ZEXGEC+awZv78LyaTQ=
Subject key identifier:   FE:07:D8:BC:91:13:09:A4:98:0D:63:FC:58:F1:09:DF:71:B8:37:28
Authority key identifier: 27:D3:56:42:EC:54:30:E9:53:76:A5:7D:53:1C:20:CA:BA:38:4C:CC
Certificate issuer:       /CN=F364E2C5AF/serialNumber=27D35642EC5430E95376A57D531C20CABA384CCC
Certificate serial:       069A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
Manifest number:          0697
Signing time:             Tue 27 Oct 2026 02:40:04 +0000
Manifest this update:     Tue 27 Oct 2026 02:40:03 +0000
Manifest next update:     Thu 29 Oct 2026 02:40:03 +0000
Files and hashes:         1: J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl (hash: TQyotf4rUdL3dQJ0t4AagsYSjjT9IIr4yOByRWiXlCw=)
                          2: 3F92F9488D8411F19BB2F2F2CE1D38B0.roa (hash: bJjoyi5Zc6lW8GW/nq2sPtGTz23gihRvLCOBF9bpm6A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 02:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E2C5AF, serialNumber=27D35642EC5430E95376A57D531C20CABA384CCC
        Validity
            Not Before: Oct 27 02:40:03 2026 GMT
            Not After : Oct 29 02:40:03 2026 GMT
        Subject: CN=6ae00f04-79c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:33:e6:39:66:56:cb:18:64:3f:bf:c7:c7:39:
                    1b:a2:61:fb:f9:bd:f9:f7:59:4e:be:62:b9:9f:58:
                    60:c8:fa:a8:7c:b5:f1:3b:9b:9c:aa:a6:40:75:72:
                    51:b4:7f:f1:f0:94:e3:6c:a0:4a:f1:9e:36:28:00:
                    05:df:59:91:d8:08:8a:45:0a:bf:65:b9:59:72:35:
                    e2:b5:80:c1:84:2e:19:60:d5:1a:22:9b:0e:bc:da:
                    9c:92:29:c0:4e:89:18:5d:a4:6b:95:0c:f9:e9:27:
                    c1:bf:e6:d3:89:8a:b9:af:57:ca:56:74:76:02:00:
                    d2:2c:1d:73:5d:2e:fa:46:b5:82:23:4a:37:89:95:
                    67:b5:66:92:29:88:a4:b7:27:4e:72:2c:8f:b8:2e:
                    6f:7f:d0:31:89:7b:e1:47:41:e9:7c:85:41:1b:88:
                    c6:96:f9:8f:b7:3c:18:a3:dc:79:96:3e:f2:94:8d:
                    c5:e8:c2:7e:94:3f:f6:b8:71:8c:cb:bd:ad:5c:22:
                    60:dc:06:dd:c6:bb:9e:43:f6:33:35:6a:76:fe:24:
                    6a:de:02:80:78:80:dd:6a:5f:51:9f:df:6d:5c:e1:
                    d1:ae:5d:87:e6:68:e8:5f:c1:8f:eb:78:b0:fe:fd:
                    40:6f:13:79:5d:ad:70:ca:e4:d4:3b:c4:7d:7f:f3:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:07:D8:BC:91:13:09:A4:98:0D:63:FC:58:F1:09:DF:71:B8:37:28
            X509v3 Authority Key Identifier:
                keyid:27:D3:56:42:EC:54:30:E9:53:76:A5:7D:53:1C:20:CA:BA:38:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d3:58:90:18:fc:b2:0d:f4:4b:0d:6c:d7:6b:8c:dc:f9:10:
         6b:78:20:8b:43:d3:fc:e3:e3:3f:66:4b:61:c8:74:7d:92:86:
         f6:c6:6e:55:09:4e:5a:e0:e6:2e:67:8b:c7:1a:2b:9f:e8:7c:
         89:cc:72:70:ff:0f:24:7b:1c:03:c1:4d:14:b7:90:09:3b:b8:
         67:2a:0b:35:2f:aa:26:da:34:4d:29:e4:e9:f0:97:80:c6:e3:
         70:2b:67:36:82:2c:0d:ce:a2:f0:e9:12:65:89:40:fb:df:04:
         c3:a2:44:9f:46:ad:26:53:7b:78:62:f6:50:91:93:cc:a9:d3:
         17:06:15:c8:1b:d6:ae:b1:31:82:37:02:5c:4f:b2:a2:34:b7:
         74:8b:b7:67:93:b3:54:2e:51:f8:2c:8e:94:30:eb:56:48:5d:
         3d:fa:ad:51:bb:32:bb:09:98:15:ac:ea:0f:65:20:c0:0e:8f:
         a2:c1:29:0a:62:38:49:d9:80:1a:2e:65:11:50:9b:01:7a:eb:
         3b:3c:0c:46:74:81:38:3e:b9:12:2d:b4:e5:b7:83:c1:5d:d3:
         48:2b:02:a6:05:5e:10:db:42:0f:7c:9a:38:57:ad:21:a6:93:
         0d:d3:db:6c:12:11:43:cf:7f:9e:18:30:00:c9:ac:ed:5a:d7:
         a3:57:d1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:07:07 2026 by rpki-client