Error: rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
File:                     SiVNJMpKR_MJflNc67lFFN3kGvc.mft (raw, json)
Hash identifier:          8ApTrDOWCDGBURG6UB1nGhUP2nus/CvhCYEEKYjNfqQ=
Subject key identifier:   B1:28:F3:7E:2B:99:74:BA:06:48:DA:A4:1D:BC:DB:49:49:00:0B:3D
Authority key identifier: 4A:25:4D:24:CA:4A:47:F3:09:7E:53:5C:EB:B9:45:14:DD:E4:1A:F7
Certificate issuer:       /CN=F366628AAF/serialNumber=4A254D24CA4A47F3097E535CEBB94514DDE41AF7
Certificate serial:       010F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
Manifest number:          010D
Signing time:             Sun 25 Oct 2026 05:25:45 +0000
Manifest this update:     Sun 25 Oct 2026 05:25:44 +0000
Manifest next update:     Tue 27 Oct 2026 05:25:44 +0000
Files and hashes:         1: SiVNJMpKR_MJflNc67lFFN3kGvc.crl (hash: DcAwxnKP9bUpY46PnCw619MjgXDcTBqFE61PRqA4tgI=)
                          2: 4131DF64010A11F1B0D566F5DAE4EC9C.roa (hash: Rsivq+fHXDUBU8/LxssiLCoPmxJgnPOYnoomwdzu8Q8=)
                          3: 7CA19D6E010A11F1B33B93F5DAE4EC9C.roa (hash: eBGoqpMded71txXxv9Heybn7AQTKDKjxLftIRu9jW6g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366628AAF, serialNumber=4A254D24CA4A47F3097E535CEBB94514DDE41AF7
        Validity
            Not Before: Oct 25 05:25:44 2026 GMT
            Not After : Oct 27 05:25:44 2026 GMT
        Subject: CN=6add92d8-5a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:0c:d7:13:64:d5:8e:21:0c:57:83:48:ff:
                    73:aa:be:39:78:e0:2b:39:e9:6d:17:b4:f4:33:ed:
                    ae:8e:b3:31:24:ef:2c:4c:46:13:fb:39:cf:6f:31:
                    36:ff:9b:90:37:c8:59:e2:37:e7:f4:e4:a8:89:a5:
                    7d:53:b2:14:1b:90:85:46:78:29:01:56:1a:b0:12:
                    b2:bc:e4:c0:26:eb:f6:7e:cf:91:90:9e:ed:86:42:
                    3f:7c:55:c3:d3:4a:1a:9a:70:c3:47:a6:0c:07:6b:
                    ae:69:62:fa:eb:81:85:a2:54:5c:c9:cd:4d:be:18:
                    7c:0f:40:58:61:47:74:5d:91:20:8e:fd:5e:cf:ab:
                    51:e3:1e:72:c2:4b:a2:ac:6d:8f:36:ee:3f:f8:70:
                    8f:3b:00:63:d5:68:76:ce:85:2e:c8:56:c1:7b:82:
                    59:d2:e4:a1:2c:bd:32:fb:d8:42:48:56:7c:26:9b:
                    ee:92:33:54:39:b6:60:a7:d9:d9:a6:ae:ee:1a:96:
                    84:13:19:b4:8f:b3:cd:80:9d:4c:f8:5d:61:14:1f:
                    5f:cf:e7:ee:88:3a:ca:12:db:d5:f3:7b:3f:d6:bb:
                    fe:ce:7c:c4:c1:35:2f:32:03:46:b2:b2:05:43:64:
                    9a:4e:1a:ca:71:53:b9:ac:6d:31:15:bb:85:0e:8b:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:28:F3:7E:2B:99:74:BA:06:48:DA:A4:1D:BC:DB:49:49:00:0B:3D
            X509v3 Authority Key Identifier:
                keyid:4A:25:4D:24:CA:4A:47:F3:09:7E:53:5C:EB:B9:45:14:DD:E4:1A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:98:7c:e5:0b:94:e9:67:47:0c:6a:2d:df:8d:cf:a2:ee:16:
         39:0c:a7:ca:f3:8f:c2:17:29:75:6e:57:ca:0c:99:43:29:e2:
         35:18:ad:09:ca:1f:b8:6b:84:9d:6c:e8:54:4a:b1:c5:0b:93:
         a8:d2:fa:ef:a8:d4:15:27:50:35:67:d6:8a:5a:d9:8e:6b:f4:
         73:f1:20:37:8e:a7:28:53:95:98:ab:1f:6c:5a:a2:9f:e3:7f:
         04:c5:74:2e:ee:a7:42:cc:64:22:94:a9:5a:be:af:89:05:03:
         67:6e:1e:df:cc:21:bc:b2:c3:54:44:88:bc:ea:ec:4e:c5:3c:
         0a:a4:d6:93:af:9a:0a:f1:f3:73:5b:10:34:de:5a:a1:b6:9b:
         f5:92:c6:42:c9:c2:19:92:cc:b7:89:99:58:9f:bd:3c:2e:e1:
         6e:ba:39:58:61:ce:2f:2d:a4:b6:91:54:74:68:c4:2c:12:ff:
         0c:60:7c:2e:73:66:b5:5b:14:3a:7a:47:73:9f:e9:c6:7c:0a:
         5e:6a:f8:80:65:39:8a:3b:d3:44:90:11:b7:5f:70:b8:b8:54:
         68:9e:32:1f:cc:92:e0:03:70:2e:d4:77:c3:76:8c:95:02:52:
         e9:04:ba:9a:07:b4:66:b4:a3:8e:c3:a1:b2:32:49:d0:ff:a7:
         e1:fb:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:48:38 2026 by rpki-client