Error: rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
File:                     wMDnGZy4QKJJjB47pWdvngwGKGg.mft (raw, json)
Hash identifier:          O/KLijOIUX0lu5Ht+WalllJEXI65dqld9oHJxvMhpIw=
Subject key identifier:   F7:0D:9F:FA:9D:E4:F4:8A:0F:15:FD:A0:E7:07:73:72:14:A8:29:41
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Certificate issuer:       /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial:       035B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
Manifest number:          0356
Signing time:             Thu 29 Oct 2026 04:19:41 +0000
Manifest this update:     Thu 29 Oct 2026 04:19:41 +0000
Manifest next update:     Sat 31 Oct 2026 04:19:41 +0000
Files and hashes:         1: wMDnGZy4QKJJjB47pWdvngwGKGg.crl (hash: CIeniL/Wb+CNZ8ELTDORKeCBurapPXSJinN3pR++f7g=)
                          2: 9005CECEAE5411F0853AF8CFDAE4EC9C.roa (hash: YWZz4QWlH0Bj3OOamSSjFcO7qun04dQhqkzbk6gKKqQ=)
                          3: D2876104AE5411F0AC152FD4DAE4EC9C.roa (hash: kpP94D+u8/tcFFiU+q6BH1AoYrF/Io2l+lqQI9CxNX4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 04:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859 (0x35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Validity
            Not Before: Oct 29 04:19:41 2026 GMT
            Not After : Oct 31 04:19:41 2026 GMT
        Subject: CN=6ae2c95d-3c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:c0:d4:be:13:27:38:34:27:00:0d:97:52:
                    67:d6:7b:6e:d9:d9:ed:5d:fd:59:a4:7c:15:d1:4c:
                    e8:cd:5c:e0:ac:4f:ec:94:58:7b:a8:a3:a6:0b:f7:
                    82:7e:e4:84:f4:8c:e7:9c:34:8e:10:a3:ef:d0:8d:
                    96:5d:0e:6b:d0:be:20:18:6a:4d:25:78:96:df:b6:
                    36:30:72:75:7a:e2:60:8f:fb:93:fb:b9:ac:42:f2:
                    2b:71:d7:63:12:e9:3b:81:1d:28:bd:0b:91:04:e3:
                    f3:42:f6:18:5b:52:d9:53:24:cb:eb:9a:88:d9:2d:
                    29:58:f0:85:3b:9a:4b:68:4f:ef:54:2f:91:ac:fe:
                    a3:72:84:65:b9:7c:7a:58:bd:d1:3a:22:28:7f:13:
                    16:13:17:38:88:5f:ef:fc:81:64:77:ce:79:5f:13:
                    eb:58:4b:b3:5b:9a:51:bc:b5:af:58:df:39:2a:ce:
                    0c:f3:65:5a:bb:50:a7:f4:7b:9d:5a:71:2f:f8:2b:
                    2d:de:6b:91:c2:86:55:fa:27:71:b6:30:36:53:29:
                    4e:08:ee:aa:9e:22:72:ea:61:5e:31:3e:f6:70:99:
                    88:7f:73:4c:93:ca:e0:6e:89:85:0d:0f:8b:a5:3e:
                    15:b8:08:99:89:8b:03:ac:e8:0c:10:ed:59:46:1a:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:9F:FA:9D:E4:F4:8A:0F:15:FD:A0:E7:07:73:72:14:A8:29:41
            X509v3 Authority Key Identifier:
                keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:4d:e8:ba:c0:2a:b7:0a:c1:e9:74:05:f3:7e:83:f6:7e:21:
         b8:e2:da:c4:5b:d7:2f:f8:94:a5:f3:c6:1e:63:97:ff:96:a7:
         ca:58:20:ba:45:2e:e1:69:bc:98:5a:68:ed:5b:75:5f:2c:5c:
         e5:e5:6d:ee:12:06:b1:f8:54:82:b5:47:97:a4:0b:40:c3:72:
         99:57:2b:05:d7:78:45:43:17:ec:f4:cf:c4:14:6e:fb:7c:34:
         2b:b0:bd:93:da:fa:e1:30:cb:18:a1:54:9b:6b:08:43:72:24:
         db:03:5f:52:a8:f9:e7:96:bd:75:2a:36:0e:3c:6f:39:8e:02:
         e3:df:4d:fe:69:4b:c2:36:0a:0a:f1:69:0e:0e:58:b9:78:06:
         35:1a:45:ca:d6:29:08:ae:64:a6:73:f6:b7:e0:dc:89:09:69:
         30:28:dc:8e:c9:ac:8d:2d:c0:72:e7:ef:a0:5b:3b:bf:72:90:
         01:a1:d7:57:ad:87:96:5a:37:34:b8:df:c7:0e:f8:9b:23:04:
         c9:82:52:06:cf:e0:c3:ae:ff:03:f0:76:d0:01:c7:35:d1:29:
         91:00:00:6c:17:a2:e7:ca:a9:89:e2:5e:70:de:08:d6:05:e3:
         61:ee:fd:a6:f3:27:31:de:39:35:0b:9e:c2:4f:90:34:1e:bc:
         08:54:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:35:56 2026 by rpki-client