Error: rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
File:                     oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft (raw, json)
Hash identifier:          S7aBzaMSotZJX96McrenAkhGR2WLZ67fnRwrUyQKi7w=
Subject key identifier:   25:EC:EF:4F:06:40:3E:53:27:C8:5A:F8:13:87:4F:C0:22:6E:9F:13
Authority key identifier: A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44
Certificate issuer:       /CN=F366C302AF/serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
Certificate serial:       03B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
Manifest number:          03AF
Signing time:             Sun 25 Oct 2026 04:08:21 +0000
Manifest this update:     Sun 25 Oct 2026 04:08:20 +0000
Manifest next update:     Tue 27 Oct 2026 04:08:20 +0000
Files and hashes:         1: oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl (hash: f9jPbOyZG7rzeLYuxwHIwnrUGFIYAPcwRj2uNqpj2nI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C302AF, serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
        Validity
            Not Before: Oct 25 04:08:20 2026 GMT
            Not After : Oct 27 04:08:20 2026 GMT
        Subject: CN=6add80b4-0399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:bc:ed:63:fd:b4:2c:02:50:25:d1:24:07:
                    67:db:65:75:d6:13:c1:6e:27:24:ff:bd:da:0a:38:
                    a0:76:0e:48:65:8a:d8:4b:cc:37:98:cd:24:5e:a6:
                    c2:d0:ef:4d:95:70:13:b0:ca:c0:6e:7a:2f:58:1a:
                    22:b5:9b:39:41:3a:66:b9:a7:89:71:57:dc:dd:69:
                    f3:6c:a0:30:4c:f6:ba:fa:4a:30:c5:c9:59:2f:dc:
                    b1:a3:1a:16:40:1b:e2:b8:67:0e:f6:12:78:ac:3e:
                    42:de:9e:f4:61:49:9e:ba:4f:38:d1:20:04:44:ae:
                    92:c2:e3:f1:23:01:54:92:1d:26:1b:af:42:23:6d:
                    b7:d1:d8:9e:8d:fb:93:0f:89:d7:89:90:26:ed:3e:
                    96:1a:ff:78:10:91:d7:85:27:b7:0b:91:60:f2:b9:
                    b4:d3:e0:1e:dd:e5:89:f2:ac:7f:12:bb:1b:55:89:
                    2c:93:ca:b5:c7:64:03:0b:35:0f:07:d6:08:73:c3:
                    f9:4d:8e:f0:29:51:d9:8b:64:66:75:ce:d8:91:d5:
                    c5:26:7e:0c:27:0f:7b:27:46:df:7b:55:9c:77:69:
                    a9:bd:94:56:0b:44:fc:a7:4c:80:2d:fb:04:38:a3:
                    69:67:4d:b7:c5:ec:af:5f:09:40:56:dc:b9:99:7b:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EC:EF:4F:06:40:3E:53:27:C8:5A:F8:13:87:4F:C0:22:6E:9F:13
            X509v3 Authority Key Identifier:
                keyid:A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d5:c5:7d:a4:81:87:0b:1b:44:c8:32:ba:28:8f:7c:a7:85:
         24:5f:cb:14:e4:99:66:c5:ac:87:c4:6a:a3:c6:c5:60:24:21:
         42:b7:26:ef:ce:2d:55:08:b9:2e:6e:70:1f:68:09:fe:bd:b2:
         dd:09:08:46:5c:8c:bd:f1:f4:99:3d:ff:95:7b:e2:0f:93:7f:
         bb:6d:af:58:69:96:8b:1d:b2:71:90:81:68:c6:74:41:5e:58:
         2d:29:c3:ee:47:52:29:39:cd:67:4b:c8:62:f8:00:7a:37:bf:
         82:66:39:fa:6d:ed:9b:89:6a:83:32:38:d9:7a:29:ce:38:37:
         a1:48:0d:f4:dd:52:05:ad:e0:e4:be:77:14:5d:38:0a:9a:56:
         8e:0f:39:f2:12:72:8e:ad:90:ad:b2:a7:0c:04:6c:58:86:e2:
         2d:d4:95:44:7a:9d:b9:3c:00:17:65:4d:b5:7a:7d:21:6e:a1:
         a3:0d:bf:cb:5f:ac:51:d6:d3:76:dc:92:82:dc:e2:e0:30:15:
         43:ea:84:d4:a1:ec:d6:81:9e:37:a4:4e:36:72:d9:b7:e9:4e:
         c8:c5:f3:86:29:2d:69:b7:bc:73:26:96:4c:21:d5:e8:d7:71:
         c2:0d:e9:ee:26:fd:93:f4:90:19:ba:26:76:c5:68:a0:36:64:
         e1:1a:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:49:43 2026 by rpki-client