Error: rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
File:                     7CqGNogipH8Tl9jc5XNMUwJyyWU.mft (raw, json)
Hash identifier:          AEvTZHBd5KK0eQhV/Dg8NmhGvTmyR1mGXyAWpU/Y9wc=
Subject key identifier:   44:8C:56:17:92:92:23:B5:C2:67:4F:2C:DA:29:9D:23:A4:81:1E:DA
Authority key identifier: EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65
Certificate issuer:       /CN=F366DC11AF/serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
Certificate serial:       0981
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
Manifest number:          0977
Signing time:             Mon 26 Oct 2026 01:48:34 +0000
Manifest this update:     Mon 26 Oct 2026 01:48:33 +0000
Manifest next update:     Wed 28 Oct 2026 01:48:33 +0000
Files and hashes:         1: 7CqGNogipH8Tl9jc5XNMUwJyyWU.crl (hash: jii0o6xGPC5UbchdT53buMhwE4bP3VuhzRXw8h9G+hE=)
                          2: CDF267EC962A11F1AB7D3EE4CE1D38B0.roa (hash: zg4XInn5ZQ7pmwsSgpxt4x0fVKl2OnqlLN2rg8imuTQ=)
                          3: 6500DE068A6511F1B08DB3DFCE1D38B0.roa (hash: 29MXciPH3Gu1aj7UAPI2yNVj/TEMvdY5Ea0HCVpZx8U=)
                          4: F2BE981A967811EA8430035BF8AEA228.roa (hash: dllLDZtxzSgyYd/WqilpdpG05+LSe4K0PZ7Qf+hqmSQ=)
                          5: 341C8B76E6A811EAB16AE924F8AEA228.roa (hash: n6dIOaYQglTdS7hxNkLDiY5bWezfODiv8ADCJeufuHM=)
                          6: 9AAE541C962B11F1804FAEE8CE1D38B0.roa (hash: riwA4TgoDLmktylC5BL11hz6/LujdhFjN4PMwkUkvcc=)
                          7: 21EBF2FA808E11EFA13738B8762E951A.roa (hash: lyLTmMKZ2ESJbQ4/CGDElnvp4KAGPEgfFJbkcYzjAzw=)
                          8: 91B3C2A696FE11F1A55481EDCE1D38B0.roa (hash: wViezgn3zihY7XOFaUx0wP080kC6nNBg/ZnQQ9dh0pE=)
                          9: ECD9C68A96FE11F1B071A5EDCE1D38B0.roa (hash: hOsh3Ee+3Hcy2mA/n2V5pl9ECsGPo5cO1HSfr+TCQcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 01:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2433 (0x981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AF, serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
        Validity
            Not Before: Oct 26 01:48:33 2026 GMT
            Not After : Oct 28 01:48:33 2026 GMT
        Subject: CN=6adeb172-9771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:44:77:91:2a:ec:77:ad:d1:f5:41:85:d4:
                    93:86:93:46:97:b9:ec:33:2b:31:aa:0d:a8:59:5a:
                    e3:7e:3c:9d:53:fb:b8:34:ce:39:38:53:00:71:6c:
                    5f:93:2e:d9:45:4b:1c:38:4d:fa:80:bb:00:c5:9e:
                    6f:f2:9b:76:82:61:04:68:33:15:c0:09:af:8e:4e:
                    9d:b9:cc:a8:9f:0f:50:2a:aa:dc:09:3a:01:23:25:
                    d0:56:4e:45:a4:0d:67:25:10:9b:f6:66:7e:a8:0f:
                    a0:2d:34:33:f3:be:22:ae:1e:5e:fb:c6:79:c3:52:
                    24:4d:54:6f:1e:13:d8:36:d9:7f:16:7d:1c:a7:60:
                    9e:eb:8d:81:40:32:38:b5:71:35:66:fc:27:b9:cd:
                    13:89:5d:8e:68:40:7b:17:61:9c:05:02:be:bd:7f:
                    d8:b7:7d:7d:47:50:e9:44:70:2e:73:e3:fe:aa:0a:
                    a3:25:ca:62:98:e4:af:18:dc:6b:c6:4d:71:1f:18:
                    ec:26:a2:09:91:92:36:5c:1b:35:45:a2:64:76:6f:
                    63:df:be:ad:73:f5:94:47:ab:68:ec:cf:3f:38:97:
                    2c:60:52:3c:66:c8:cf:5f:6f:2c:43:78:27:30:b5:
                    0b:8e:70:5f:b3:89:f2:7a:1b:a3:c2:c3:57:05:10:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8C:56:17:92:92:23:B5:C2:67:4F:2C:DA:29:9D:23:A4:81:1E:DA
            X509v3 Authority Key Identifier:
                keyid:EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8d:76:71:5b:e6:6b:cb:d6:e1:07:db:34:6d:1f:e9:69:e1:
         5a:5c:c0:cc:2b:51:96:5c:8c:9b:c2:20:81:49:aa:0d:42:13:
         ef:6c:05:01:7a:8e:24:cc:b8:46:a1:28:66:8a:01:b1:25:09:
         dc:af:3d:cd:30:d9:24:a3:93:c2:2c:76:54:fd:f8:d0:ed:a5:
         bc:44:3f:7a:79:de:16:c6:c7:9a:08:5a:65:15:4f:d7:be:3f:
         6f:1f:b6:28:2f:8f:40:d9:0d:45:c4:0d:97:f1:ee:e0:3d:04:
         94:e1:74:fc:4c:d2:9e:7c:c2:bf:fe:09:8b:a9:51:2b:8c:26:
         0e:fc:1f:a0:7c:a6:fa:5e:ce:22:ac:85:87:68:e1:08:6b:28:
         ee:91:11:96:28:3d:10:b1:97:d8:98:7f:88:6e:c1:e4:94:33:
         f8:af:90:59:6a:28:d4:93:5c:0e:a5:a9:d9:2e:12:3f:ac:36:
         a7:6f:25:ee:05:f5:08:e4:90:de:20:cc:e3:9d:2e:34:70:e3:
         5d:55:90:e1:af:1c:f1:25:26:ec:db:db:1f:37:7f:c6:80:7e:
         b1:bc:dc:e4:86:eb:b0:5e:e2:17:eb:b5:e0:08:bd:2f:35:94:
         7d:d9:44:f4:d1:72:77:b3:19:04:b0:25:20:74:f8:39:49:d0:
         4e:f9:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:31:22 2026 by rpki-client