Error: rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
File:                     5VXdlA8xUBhdWRwtquKfKOrq9XU.mft (raw, json)
Hash identifier:          AKz2fFWKtLHhkbblUGRzsOKeBNtKeYnkoPy1Mdp/Cb0=
Subject key identifier:   8E:E5:FB:99:C5:79:43:00:D4:B2:CA:54:03:25:7E:4B:FA:2E:F0:D2
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Certificate issuer:       /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial:       0F84
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
Manifest number:          0F76
Signing time:             Mon 26 Oct 2026 01:01:02 +0000
Manifest this update:     Mon 26 Oct 2026 01:01:01 +0000
Manifest next update:     Wed 28 Oct 2026 01:01:01 +0000
Files and hashes:         1: 5VXdlA8xUBhdWRwtquKfKOrq9XU.crl (hash: /yAFfZJlJ5MJSKBcbbHaK3C0waWdiBbNB1DpuspgBSg=)
                          2: 6679CA665D8F11F1B99E3DDDCE1D38B0.roa (hash: vHvA5+wAtU3QNSpWi/AryTgMZzTm5r9z0oV1H9RPG64=)
                          3: 5F65470E5D9011F1B921FEE5CE1D38B0.roa (hash: 9Q0XmSuu1UaKSYQf/M8f2Ub3i6hPHGdh0SNSZM2N/cs=)
                          4: F51E9D565D8E11F1BF85BDDCCE1D38B0.roa (hash: Cq1X1pSuZq05T1uvF/WP9w2h8895z8HWN/Vt7STbcSg=)
                          5: 7D0D3AAC60A911F182B723B9CE1D38B0.roa (hash: SumW0WPjy0zEsZ0nPI58p9k65+uUSOjtjmGJyqmXNDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3972 (0xf84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651254AF, serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
        Validity
            Not Before: Oct 26 01:01:01 2026 GMT
            Not After : Oct 28 01:01:01 2026 GMT
        Subject: CN=6adea64e-fe9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:4d:0e:8e:b4:50:17:c2:2d:8b:91:62:d0:
                    8e:cc:1f:99:48:47:ba:92:6d:34:7d:2b:8d:a4:dc:
                    ee:7a:59:70:4f:15:cf:98:6d:1e:53:f8:cb:57:48:
                    28:3e:b1:47:c1:b5:23:e1:f8:d5:49:eb:05:28:06:
                    5d:9f:2a:11:d2:50:75:59:0f:ad:eb:23:62:3f:ce:
                    a6:84:7b:ea:05:bc:67:be:32:93:fe:a1:e7:39:d3:
                    17:81:ee:7d:a0:44:61:27:4b:9c:4a:96:16:0d:35:
                    1a:38:6f:c3:e2:b9:c7:95:e8:57:ee:65:eb:2e:b8:
                    50:e0:37:f8:56:c8:76:b8:96:2f:25:99:a1:1a:a4:
                    09:28:05:7a:0b:10:07:6d:55:e7:eb:77:47:86:81:
                    b9:e7:66:d9:9f:a6:73:15:e8:a6:a2:16:23:58:e9:
                    50:81:c6:46:c2:19:9b:3b:95:05:de:3b:ce:d7:4f:
                    6a:b7:06:42:8c:77:3f:4f:b4:c9:83:cb:f0:3c:c7:
                    73:77:6e:69:33:a0:4f:1b:f3:19:72:3a:4f:0c:07:
                    e1:6b:e0:a5:66:2f:50:b3:e7:42:bd:0d:db:f9:17:
                    64:fc:fb:42:bd:71:52:ec:1a:eb:5a:a0:1c:36:e9:
                    9e:3f:36:a0:f7:33:03:1b:ac:c8:62:7b:1a:17:63:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E5:FB:99:C5:79:43:00:D4:B2:CA:54:03:25:7E:4B:FA:2E:F0:D2
            X509v3 Authority Key Identifier:
                keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:22:25:62:76:d2:8e:9d:89:54:3c:ee:3c:38:9a:6c:32:fb:
         c5:85:f3:8d:57:c9:7c:65:f7:83:e0:20:62:31:5b:73:62:df:
         9f:36:f4:f8:e7:b0:04:c1:68:9c:6a:11:e7:51:d0:8d:d5:6c:
         06:84:9b:1c:0f:66:28:69:77:1a:58:0c:82:62:6d:07:71:01:
         d3:5d:d0:3c:76:a5:a5:6a:1a:97:f6:0e:14:07:5c:69:18:ae:
         b2:fb:fe:1f:82:1f:bc:d9:d8:08:b7:1e:98:70:49:40:c9:6b:
         47:bf:68:0e:d8:67:64:40:cd:01:51:37:8d:e5:a1:32:7d:dd:
         a1:b7:52:50:79:38:25:81:25:01:b5:1e:7b:a1:47:0c:e4:01:
         ce:2f:e8:91:d6:f0:9d:41:d9:f9:20:f8:f2:5f:4c:97:78:5b:
         be:82:a0:3f:10:2d:53:9a:30:f2:0d:6e:9e:4b:01:7f:96:97:
         d5:2b:54:39:9e:95:8f:32:f6:02:81:64:56:20:20:97:bf:f2:
         48:23:80:c6:26:e1:f2:04:91:3b:8a:df:57:3c:51:78:f8:64:
         27:9b:52:22:8e:84:97:90:46:60:10:2f:82:8f:9f:bb:1c:b2:
         5d:12:67:63:1c:40:77:da:96:d4:b8:1b:b5:ac:56:71:e5:77:
         55:6c:5f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:37:26 2026 by rpki-client