Error: rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
File:                     dVGa9IvP07pGhRZS31S4t-uI7f8.mft (raw, json)
Hash identifier:          AysfjApJziFHETuBi+9WmgVqrlMf73waBDu6xRGlQO4=
Subject key identifier:   22:D7:AC:D2:A6:EE:D8:99:F1:A4:56:1D:6E:4A:36:EF:A3:4B:C7:43
Authority key identifier: 75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
Certificate issuer:       /CN=F3652210AF/serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
Certificate serial:       0123
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
Manifest number:          011D
Signing time:             Sat 24 Oct 2026 05:24:55 +0000
Manifest this update:     Sat 24 Oct 2026 05:24:54 +0000
Manifest next update:     Mon 26 Oct 2026 05:24:54 +0000
Files and hashes:         1: dVGa9IvP07pGhRZS31S4t-uI7f8.crl (hash: MbZRAcOUA0PkfRTKn3ejK/xIFV2qm8zpdDxoL8jjyyE=)
                          2: C41AF490F57211F0ADA5F4A4DAE4EC9C.roa (hash: QhmPWESnb1+/6WP9zrXz6AUR4g56o3n1zihMHHPrfJM=)
                          3: E46FAFCCF56F11F0827DCE92DAE4EC9C.roa (hash: a1ThNJz9d1adFsYYPdRNFgqHPUPC6XUR4XTr2I70j94=)
                          4: BDE8381464EC11F1B9F46B16CF1D38B0.roa (hash: dS50hNM0vgmUvFRZP+I95nVGs2EGX7v3v33q0mKTgXM=)
                          5: 0092A744850E11F1885F13C1CE1D38B0.roa (hash: M7RJY6bKu35PaT+OztRN5Pjv9OgE7mqyKvriAzsMfHE=)
                          6: 8042ECA664ED11F18B9C421CCF1D38B0.roa (hash: HoCxvJytOKvN4Wewmb/+ggiWn16JSa5j93hIBwVLwfo=)
                          7: 9DC9BF04F56F11F0B88EAF92DAE4EC9C.roa (hash: mqjll+6jQ1hijD2RV9xsy1IRzti4L3oaX/Vaj5z3Cyw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AF, serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
        Validity
            Not Before: Oct 24 05:24:54 2026 GMT
            Not After : Oct 26 05:24:54 2026 GMT
        Subject: CN=6adc4127-73aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:c6:e8:e9:32:6e:4f:e9:23:f2:29:2e:3c:
                    1c:20:45:2d:21:fd:a2:74:b7:f4:1b:12:1f:19:7f:
                    f6:6a:d3:3e:7a:ee:40:38:21:67:d4:73:30:f6:67:
                    ac:89:ef:97:16:19:fb:ff:5d:9a:07:eb:38:4b:f8:
                    66:0d:56:2c:95:ec:f3:eb:af:62:ac:b5:5e:1d:7c:
                    c9:23:69:e1:cd:4f:a9:4b:52:12:83:48:b6:c3:f4:
                    54:b9:f6:e6:e3:45:4e:0f:6a:5f:8a:2a:00:8b:48:
                    d0:9c:a5:30:9d:e6:a1:48:17:08:d4:3f:02:89:b9:
                    4f:89:2a:7f:de:57:7e:09:24:e6:76:1c:1c:86:92:
                    2b:1c:f1:f5:7c:ca:67:67:58:6b:63:86:dd:2b:2b:
                    4a:94:48:7f:30:9e:1d:cf:a1:43:58:34:79:81:d7:
                    e7:dd:68:d4:71:7d:33:12:aa:25:d4:bf:3c:01:8a:
                    87:96:b3:97:02:91:e9:fe:53:2b:32:88:62:24:95:
                    78:a5:f6:92:10:90:4f:77:d3:4c:55:63:9d:75:e2:
                    1f:1d:24:c3:c4:1d:ef:5e:3b:e3:1a:5b:fe:a5:b9:
                    c2:ea:4d:0a:f8:d5:66:ff:1d:86:32:13:81:41:69:
                    4a:ef:9e:cb:1b:a1:55:1c:05:52:0c:e0:31:79:af:
                    c0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D7:AC:D2:A6:EE:D8:99:F1:A4:56:1D:6E:4A:36:EF:A3:4B:C7:43
            X509v3 Authority Key Identifier:
                keyid:75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:df:3d:12:87:54:52:19:61:76:b5:88:54:9e:82:c4:05:b4:
         b8:3a:f3:96:1b:1e:b4:2c:31:63:7b:06:25:a9:80:3c:a6:bd:
         00:ae:af:45:99:fc:5c:83:b5:cd:58:86:18:21:3e:0e:1c:81:
         4c:e7:fb:ac:73:de:d3:e9:15:5b:58:b5:40:bc:88:94:db:16:
         bb:44:86:b1:b6:1e:a2:b3:ce:92:bb:71:45:86:42:ec:50:1a:
         fc:88:96:f6:43:9c:29:5e:01:41:5f:98:e5:85:4c:6e:ad:81:
         cc:93:c4:db:8c:f7:69:45:4a:df:f3:fd:46:7e:ef:b4:ce:42:
         94:da:0b:3c:27:c7:af:21:c7:75:42:81:cc:e6:1c:04:3e:90:
         44:62:0a:84:eb:6f:33:ec:96:58:21:50:c8:73:70:17:30:ef:
         3d:4a:ba:ac:66:3c:7f:36:f1:e1:7b:42:1c:5b:46:ed:c0:bd:
         a7:fc:e6:b8:05:fa:77:38:b5:47:00:28:8d:b2:e7:4d:63:0f:
         d7:9f:94:73:69:6e:17:f8:f4:6b:e8:55:e0:fa:bd:6d:d0:62:
         a6:81:ed:cd:ca:a7:74:69:df:10:97:2f:54:8c:05:72:b5:53:
         07:6b:bb:ad:48:88:a7:74:16:3e:f7:fd:49:71:20:e8:1e:e4:
         62:77:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:38:14 2026 by rpki-client