Error: rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          Y8cEdSEyF6onzvSa1Ig9LCRhaz9wYON5sP9oJXT9GHc=
Subject key identifier:   14:FA:94:A4:77:BB:26:2E:8A:F8:7C:CD:16:8D:D9:1C:3D:47:6A:9A
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       0A00
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          09F8
Signing time:             Tue 22 Sep 2026 01:41:17 +0000
Manifest this update:     Tue 22 Sep 2026 01:41:16 +0000
Manifest next update:     Thu 24 Sep 2026 01:41:16 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: Lr0wIxD8Ad35OTeemEn/AVd4uLFShVbaB33YGp9wEW4=)
                          2: AA4074F289D111F1A802EACFCE1D38B0.roa (hash: hem0zIKLtZeNSIWMoz0rSJx/832FRGAE3aQ/wjA206w=)
                          3: 8320A09089D111F1A546DECFCE1D38B0.roa (hash: DA5qK7fz+WovThN7j+XSUJLgfIJR5c0CH8vGrCi0D6g=)
                          4: 1E9ACD3A89D111F1AFF6CECBCE1D38B0.roa (hash: +Untrg0WK7+uUtVUE8OjSjSfZ2FmZtLhWuXYFkJyavw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2560 (0xa00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Sep 22 01:41:16 2026 GMT
            Not After : Sep 24 01:41:16 2026 GMT
        Subject: CN=6ab1dcbd-1533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:03:9f:79:3a:0b:da:78:9f:2f:08:0b:c6:
                    7f:b3:d3:17:4e:be:7e:1e:0f:eb:44:d8:f1:b3:56:
                    0c:05:fa:6c:d9:e3:68:50:10:27:f1:af:ae:0b:91:
                    e4:3b:22:9a:60:83:ea:6d:13:25:f2:1d:cb:a0:ae:
                    2f:11:9b:cf:4c:f9:5e:b0:e5:78:fe:6b:c6:e9:5d:
                    68:e5:50:ab:f3:a5:e6:66:0d:94:c9:a6:4c:ee:41:
                    63:60:8a:d1:e3:68:62:52:35:e2:71:e8:0e:4c:15:
                    24:70:8c:20:60:1d:aa:6b:6a:d7:e4:42:90:8a:c5:
                    da:88:ab:a2:34:7b:7b:94:eb:6b:63:d8:d6:a6:6b:
                    4f:a8:b7:20:62:c2:e2:14:29:c9:2a:53:34:02:76:
                    ad:b1:0e:22:75:c3:8b:70:a5:32:52:61:0f:df:9e:
                    e9:52:83:98:4e:89:11:e8:6b:33:76:6b:b9:25:35:
                    e0:01:19:da:15:66:e8:3e:a0:e0:65:53:92:1c:4a:
                    ad:d4:cb:96:e8:ab:e9:e9:40:6c:f5:8a:d7:86:6a:
                    5d:21:db:88:f0:48:27:7b:a7:07:bf:24:e7:b8:e1:
                    88:62:e2:1f:b5:5c:35:bb:73:b9:a6:f1:64:cd:d3:
                    27:fe:e0:5f:c5:8e:56:a7:84:43:0e:38:4f:44:57:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FA:94:A4:77:BB:26:2E:8A:F8:7C:CD:16:8D:D9:1C:3D:47:6A:9A
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:78:ea:83:0b:3c:9b:df:9a:c9:f3:c7:d4:97:d5:c8:b4:c4:
         0e:ba:61:14:31:35:0b:2f:96:f3:01:0b:84:27:04:b9:42:d1:
         9e:c4:59:04:02:f4:7c:65:a5:d2:87:d8:b8:02:a8:94:c4:0e:
         c7:19:f6:ec:0a:79:3c:5d:6a:2a:44:08:54:5d:fa:b0:d3:7f:
         55:7b:81:57:a5:03:91:d1:8d:30:75:13:59:12:1b:d9:d5:58:
         cc:84:c6:a4:20:d0:e5:3c:40:25:6e:60:7c:47:d0:40:9b:1e:
         f4:20:4f:64:c0:1c:27:c0:ee:80:3b:54:52:4a:9e:3a:1c:ad:
         34:a3:90:24:d3:ef:53:e2:87:3a:ca:4a:d4:fe:db:a4:d4:49:
         a5:c0:d5:cd:b7:fe:7d:bc:f8:26:e2:dd:40:1a:02:a4:ca:a4:
         05:ae:60:b8:52:00:e3:5b:3d:a9:9a:d0:f3:12:8e:3c:66:0a:
         95:19:fa:06:f7:ac:ab:81:66:2e:e4:3b:06:70:67:f9:13:f6:
         ec:79:df:ae:31:d9:55:d5:92:ea:22:f2:6e:f1:e9:4b:b6:54:
         ca:37:99:44:d2:90:0f:94:7c:ff:a5:95:43:55:19:cc:60:ee:
         1c:9f:b9:4f:2f:62:26:fe:f4:5a:2c:fd:dd:a0:63:9d:f6:ed:
         2c:e9:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:15:56 2026 by rpki-client