Error: rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          aKm7aYxiH5UNFs0dsXeNvpeyRyDxyxqxUiRB+yUdwwc=
Subject key identifier:   FF:6A:E9:C4:DC:04:D8:AC:1A:D7:9A:23:E9:1E:FC:47:6D:89:2C:A7
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       06C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          06C2
Signing time:             Sat 05 Sep 2026 02:36:36 +0000
Manifest this update:     Sat 05 Sep 2026 02:36:35 +0000
Manifest next update:     Mon 07 Sep 2026 02:36:35 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: GqR1As3pDVzNjtcurrDK5MtII+s8pyyHwG4LN5pquck=)
                          2: 615F683284E611F1AB42B3D5CE1D38B0.roa (hash: Rwiymxl+gzzR6gzEBzteCvpbPYriPshX9t+Q/e9SKWc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: Sep  5 02:36:35 2026 GMT
            Not After : Sep  7 02:36:35 2026 GMT
        Subject: CN=6a9b8034-6715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:4e:3b:77:c6:42:31:17:b5:27:ab:82:ea:
                    50:c8:08:4b:0b:b8:f5:b3:d9:39:bd:8c:76:23:d7:
                    77:c9:ae:6d:de:45:2a:2c:e7:ef:f8:cb:92:8c:b7:
                    a4:8d:7e:7f:ff:a5:7a:cd:88:c0:73:f1:cc:19:85:
                    99:0b:63:77:95:44:3f:29:2b:1d:99:79:f1:ee:90:
                    3d:1e:9e:1c:44:9a:68:51:03:aa:9a:43:45:b8:be:
                    67:86:f3:92:d5:0b:50:03:78:a3:ab:8d:39:a8:e3:
                    dc:54:1b:a0:57:ba:3f:d6:e0:c1:f7:b8:4b:42:b1:
                    b2:24:26:55:1d:2c:ac:31:be:c3:81:a9:16:e8:a8:
                    7a:62:25:82:1a:c0:37:84:00:cd:44:31:87:dc:78:
                    0e:ff:f7:e5:2f:7e:07:7f:90:04:6b:d7:4f:64:38:
                    ee:06:4a:82:3a:6b:f4:28:09:02:32:19:a5:7e:43:
                    47:79:5a:e4:b7:e0:67:d1:a1:d1:ea:ab:9d:d3:3e:
                    62:b4:dd:2b:3c:e0:f3:13:a3:d7:ab:18:06:d4:57:
                    7d:d2:75:69:2f:ed:93:49:44:ef:79:5c:73:6a:f2:
                    97:15:69:c3:27:a3:16:87:20:f1:8c:1a:ed:fc:7f:
                    3d:3c:25:b8:8e:44:ba:1a:67:5c:c2:fd:90:f9:a8:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6A:E9:C4:DC:04:D8:AC:1A:D7:9A:23:E9:1E:FC:47:6D:89:2C:A7
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:33:aa:d6:da:2c:3d:df:28:e4:c6:80:bf:7c:ac:67:0f:6d:
         53:61:15:f6:5a:21:32:8f:45:18:b0:46:67:7f:26:fd:7c:21:
         66:65:b4:51:4e:e4:77:1c:fd:06:5d:80:bc:21:26:7e:dc:4d:
         7b:2f:6b:9c:37:c2:72:cf:09:c8:e7:ef:a7:72:a8:e7:27:32:
         de:b4:15:08:7d:11:48:66:6b:56:42:7c:e4:e2:dd:e6:05:83:
         4e:81:bc:b9:a6:7b:be:11:6f:1e:6e:d1:12:1c:b3:96:8f:58:
         9e:09:a0:ca:e3:5f:ee:d6:c0:cc:6d:7d:c8:05:ba:87:f6:13:
         fd:90:e2:aa:6a:9d:8e:4d:2b:79:1f:26:cb:57:9e:39:0d:f3:
         53:f5:e5:79:02:16:03:4f:35:f9:79:0d:6f:45:f0:fa:98:f6:
         38:c6:01:5b:32:e7:4d:31:61:45:b1:eb:16:7c:cc:f5:33:e2:
         2e:4a:91:8a:47:77:30:58:ac:ec:68:3a:01:a6:52:e6:3c:53:
         84:56:a2:42:40:df:7a:6c:13:a1:eb:04:80:c2:aa:b6:39:f6:
         0f:58:18:ba:e9:48:73:fc:c8:3f:9a:80:4c:66:5a:a4:1d:5a:
         69:e4:7b:84:d4:a4:e7:5e:27:55:c6:fd:41:00:71:3a:ca:c3:
         32:9a:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:25:44 2026 by rpki-client