Error: rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier:          4igax6t0RNpnkfXHldIoj/1QmZx4tY/pdsWe7tQp/vU=
Subject key identifier:   FF:2A:9E:F2:AE:1D:D9:5E:24:60:6A:B6:90:D9:F9:59:98:25:3B:22
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer:       /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial:       084D
Authority info access:    rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number:          084A
Signing time:             Tue 25 Aug 2026 02:02:41 +0000
Manifest this update:     Tue 25 Aug 2026 02:02:40 +0000
Manifest next update:     Thu 27 Aug 2026 02:02:40 +0000
Files and hashes:         1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: smu9WOjr0iuflAeF+QW7+pFeRtgt8ba4LMwdXqjUmbU=)
                          2: 3D93A998876811F18427031ECF1D38B0.roa (hash: ED++UQzskmFMrBOiAcPQY8inrGju/ayfk7tJLhTNd6I=)
                          3: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                          rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 27 Aug 2026 00:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
        Validity
            Not Before: Aug 25 02:02:40 2026 GMT
            Not After : Aug 27 02:02:40 2026 GMT
        Subject: CN=6a8cf7c1-2bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:97:2c:c9:2c:31:91:35:8b:6e:9c:81:95:
                    a0:05:16:f6:48:42:b3:2f:77:e8:a9:f5:cc:ea:04:
                    3d:8e:f6:63:3d:ef:6c:e7:c6:30:2c:6f:03:29:7b:
                    b6:dd:95:37:d4:91:b6:79:f7:27:0d:c0:fc:58:06:
                    fd:b0:08:7b:e9:7f:07:50:ba:80:9b:82:49:8d:79:
                    3d:53:b4:05:9b:83:ac:8c:c8:24:fc:7e:4c:24:51:
                    24:de:f2:bb:82:1d:8d:97:19:d1:21:d6:26:7d:1b:
                    16:ab:bb:c4:52:51:35:ff:a7:07:f4:2c:97:95:92:
                    14:a9:0e:c8:24:3c:c9:90:c1:7a:d7:e1:ec:01:d3:
                    77:6f:18:d8:49:15:7c:52:40:59:d5:af:ad:e2:fc:
                    c9:7c:c1:51:e3:a5:60:e5:a7:0a:08:20:d4:90:68:
                    53:f7:20:a8:18:24:18:f8:6e:79:a9:00:71:21:f1:
                    ff:37:c2:6d:3c:ea:18:ee:66:15:39:e4:53:a5:22:
                    2b:9c:22:4d:2e:fb:51:59:9c:87:d5:bc:f8:c2:f2:
                    4d:66:ec:b6:89:c2:79:cf:5b:15:23:3d:9c:08:6c:
                    4e:b4:5c:8a:22:fe:50:12:dd:78:0a:b1:de:e2:85:
                    2b:23:4a:f3:92:0c:9c:03:d1:cf:d8:ca:15:fa:fc:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2A:9E:F2:AE:1D:D9:5E:24:60:6A:B6:90:D9:F9:59:98:25:3B:22
            X509v3 Authority Key Identifier:
                keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5f:71:ae:7e:78:29:ea:f0:cc:15:42:c2:d5:f3:95:23:d4:
         4d:75:28:3d:54:9c:7b:3e:7c:90:7a:78:af:db:6f:a6:c3:a3:
         e3:22:ff:a3:58:c1:fa:81:21:5d:a8:f3:5b:84:ca:39:41:bf:
         de:c4:be:99:a1:4b:af:a4:79:d6:fe:f5:48:ed:7f:54:e6:63:
         97:88:52:59:43:6c:5c:ec:41:1d:eb:6c:4b:56:a5:e6:d7:32:
         14:fe:0d:e3:86:4c:27:90:de:76:71:70:3c:c1:b6:c1:cc:3e:
         21:72:38:63:ce:e2:74:24:ef:72:0e:3c:6f:d3:38:3d:98:aa:
         a5:f5:54:84:77:a3:b1:81:41:8b:dc:e6:a5:96:11:31:e3:dd:
         56:19:0a:7b:5d:d8:56:01:0d:24:ce:6e:2f:e4:be:30:96:69:
         c3:bc:a1:f7:7d:6e:ba:5e:3e:69:7f:0f:8e:45:1a:fe:86:84:
         8b:c1:e1:63:ec:33:4c:51:b9:bd:7c:e7:cc:e3:e8:de:f4:90:
         b9:04:8a:53:14:c6:6a:37:79:a8:11:8d:11:11:32:6e:d8:b0:
         6e:4c:21:35:47:47:36:37:9a:ef:79:29:7e:25:94:f2:35:a2:
         99:4f:fc:b6:8c:ec:8f:a5:10:5c:39:0d:0c:bd:d7:72:2d:e7:
         19:75:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:59:39 2026 by rpki-client