Error: rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
File:                     dUDQUtEpERNWC6gtIyBCuZqopko.mft (raw, json)
Hash identifier:          r4pwXDTg6UvFhekFUx5JoPSXYrM9BFn2efXsDWaW4Qs=
Subject key identifier:   33:E4:57:4E:F4:CA:4F:34:19:E6:36:84:DE:75:9F:5B:FD:66:5F:E8
Authority key identifier: 75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A
Certificate issuer:       /CN=F366C124AF/serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
Certificate serial:       0A79
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
Manifest number:          0A75
Signing time:             Sat 24 Oct 2026 01:34:14 +0000
Manifest this update:     Sat 24 Oct 2026 01:34:13 +0000
Manifest next update:     Mon 26 Oct 2026 01:34:13 +0000
Files and hashes:         1: dUDQUtEpERNWC6gtIyBCuZqopko.crl (hash: NFUftU//DktARmo6fCKYWrwtFARzXRnF/yOgzf+IWhU=)
                          2: F2B47ECE67CF11F0A078F98BDAE4EC9C.roa (hash: P3LDJsnxMQwbvrXOtqRElx5hirBS3sM/lIPVBob33/w=)
                          3: C82D839403C511EBB1822323F8AEA228.roa (hash: BRU/+9vSJaKFXnQ7Cb8Og2eSBhtx9/MwNvCd1XqLbx0=)
                          4: 6707E92063FE11F18E4F77F5CE1D38B0.roa (hash: Mbiya0jc46golC3r0vHLc0oTgvNsMn+R43Ns9ZWPs90=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2681 (0xa79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C124AF, serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
        Validity
            Not Before: Oct 24 01:34:13 2026 GMT
            Not After : Oct 26 01:34:13 2026 GMT
        Subject: CN=6adc0b16-b662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:3d:a1:c4:02:e2:22:62:9a:83:51:4f:b9:
                    d8:b8:86:3f:46:7b:e4:80:0f:9c:46:c5:44:00:62:
                    52:70:a9:c8:ab:3d:83:dd:a0:b3:73:55:15:b8:3f:
                    ee:58:a8:64:86:8c:c9:27:2f:b3:1c:e6:df:0a:3e:
                    22:99:29:bf:46:77:57:55:73:1f:a9:e6:ca:4e:9a:
                    3e:cb:ec:32:7e:e6:f8:be:d9:e2:78:25:99:dd:94:
                    c0:7d:56:00:62:40:44:17:e0:b1:8a:ee:21:c7:0e:
                    22:e3:af:ae:ef:22:6d:1c:67:50:11:86:57:46:7e:
                    88:24:22:02:7b:bb:d6:43:d3:94:4a:54:0c:fb:90:
                    ad:9f:80:05:72:d1:83:96:e4:36:95:b3:5f:08:bd:
                    d7:02:78:ed:6d:49:a7:cd:1a:3b:31:e5:7f:dc:ec:
                    c7:88:4e:a7:aa:90:a1:b9:b9:68:5d:4a:68:34:92:
                    ff:01:49:bb:58:8b:53:22:e4:96:d6:08:cf:cb:49:
                    09:4e:d5:7c:23:51:83:4e:08:c6:3a:02:48:a3:e0:
                    18:a6:54:c4:ed:6b:6c:f3:be:4f:bf:27:76:8d:1a:
                    4d:f0:bb:21:7e:64:c8:c4:8b:72:26:66:0a:b5:c6:
                    d2:b7:f2:e2:79:14:e8:25:77:d0:68:52:97:e9:13:
                    41:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:57:4E:F4:CA:4F:34:19:E6:36:84:DE:75:9F:5B:FD:66:5F:E8
            X509v3 Authority Key Identifier:
                keyid:75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:db:b1:25:ce:e5:10:b8:8d:35:41:f2:84:1d:c6:57:75:65:
         90:8e:1a:d4:ec:3a:6d:e4:c5:44:74:a8:a4:5d:c1:32:e6:ae:
         67:95:17:a5:d8:35:0d:69:ad:c0:79:8e:cb:ee:89:a0:a9:c5:
         dc:54:71:60:05:a0:55:72:18:71:70:ea:4a:6f:7b:6f:5d:1c:
         44:f7:b4:26:94:21:92:af:be:13:a3:39:df:89:e8:49:97:91:
         e3:10:a0:5c:fd:67:fe:c0:68:33:bb:1e:83:6e:79:33:73:36:
         50:89:41:8b:18:f1:47:7f:ea:a3:b6:2c:55:17:3f:72:47:d6:
         06:a0:ce:41:11:34:60:d0:d5:c8:8e:9b:63:35:7c:a8:f5:7d:
         b4:94:3f:c9:d9:93:e5:c0:4d:d2:a3:59:ad:ee:24:bd:31:01:
         68:24:67:ad:7b:03:3b:3d:59:4d:fc:47:19:ca:e1:27:c0:3d:
         56:8a:1d:f0:04:b2:b2:40:91:ed:18:36:e4:36:dc:db:fe:4a:
         9e:64:a0:fd:1f:d1:24:8c:fb:b6:b1:f9:13:6a:f9:87:e6:c5:
         6c:61:c9:b2:92:e3:db:6a:d8:27:53:14:cc:0c:3a:d3:f1:96:
         bd:34:64:38:68:59:9e:a8:17:0d:31:c9:13:be:f4:87:4d:93:
         da:37:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:47 2026 by rpki-client