Error: rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
File:                     fsFNfEl2kNywyTPfM9amixuZKo8.mft (raw, json)
Hash identifier:          jvc1fL2+uBf3Cv2VGrDPi41gwc80Vk2Jb3ONOAPnBpw=
Subject key identifier:   82:F5:76:EA:B6:F3:91:35:67:F3:0E:61:5C:14:1A:A9:88:2C:4E:B6
Authority key identifier: 7E:C1:4D:7C:49:76:90:DC:B0:C9:33:DF:33:D6:A6:8B:1B:99:2A:8F
Certificate issuer:       /CN=F367E157AF/serialNumber=7EC14D7C497690DCB0C933DF33D6A68B1B992A8F
Certificate serial:       0107
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
Manifest number:          0104
Signing time:             Mon 26 Oct 2026 05:29:58 +0000
Manifest this update:     Mon 26 Oct 2026 05:29:57 +0000
Manifest next update:     Wed 28 Oct 2026 05:29:57 +0000
Files and hashes:         1: fsFNfEl2kNywyTPfM9amixuZKo8.crl (hash: 9V+i0kOBZFZq6X9DgMPa3rYgnGINIyDU9Kg5rue9weI=)
                          2: 6810F36643F111F1823505F8CE1D38B0.roa (hash: H49ZmE70fNlQMlXanVHzm7OfawxzBuMK6YRbx0bBsww=)
                          3: CE9FEAFC29E211F19A2F7E84DAE4EC9C.roa (hash: DFioY4TtccPGtKp1xwhCK0Fw8LMx+i//Mg7FbiPkadU=)
                          4: E2AB27880B3711F191969680DAE4EC9C.roa (hash: TV2HllXtBfZyxNjiNtlEzte8OfMxx+gLKAKoslmR1is=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367E157AF, serialNumber=7EC14D7C497690DCB0C933DF33D6A68B1B992A8F
        Validity
            Not Before: Oct 26 05:29:57 2026 GMT
            Not After : Oct 28 05:29:57 2026 GMT
        Subject: CN=6adee556-a493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:b0:dd:9d:81:83:79:2c:91:7f:43:11:cd:
                    f3:da:4b:82:6f:be:94:4f:a0:2d:e3:87:6d:ee:0e:
                    9f:eb:d8:9d:83:e5:5e:22:91:d5:9c:19:ac:70:88:
                    8e:30:ff:fb:3f:09:57:98:5f:8e:d3:a1:c6:36:d8:
                    ed:cc:31:c0:21:52:f6:d9:a1:75:9c:ad:dd:1d:e4:
                    4b:1d:75:be:24:33:22:06:20:c6:ba:76:1e:b9:b5:
                    8d:e8:9d:81:ab:d9:11:2a:55:34:83:fb:8c:da:13:
                    7d:f1:7e:cc:a8:d2:e2:b5:63:de:22:85:0d:0f:9f:
                    6e:f8:a3:f6:73:11:cb:3b:0b:a3:75:11:d3:32:70:
                    a4:3d:38:94:0f:3e:13:a7:f8:14:ee:8c:09:eb:05:
                    fb:d1:39:dc:52:dd:fb:f0:04:26:47:e9:e3:2b:cf:
                    97:22:ad:9c:c0:a7:9f:bf:da:ac:c0:fa:d8:6d:6b:
                    b2:bd:20:e5:3b:f3:a7:dc:1a:97:2d:a6:a2:73:0c:
                    b5:dc:ed:38:e8:c8:5b:56:96:a4:cb:e3:ac:f6:9d:
                    8f:23:b0:6f:7e:ac:68:66:33:4e:ef:b7:74:8d:0e:
                    37:de:41:fe:54:4f:dd:a8:8f:a9:4d:47:2d:97:36:
                    14:af:a4:9e:c3:a5:f8:83:d8:cf:1b:87:b2:3c:a8:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F5:76:EA:B6:F3:91:35:67:F3:0E:61:5C:14:1A:A9:88:2C:4E:B6
            X509v3 Authority Key Identifier:
                keyid:7E:C1:4D:7C:49:76:90:DC:B0:C9:33:DF:33:D6:A6:8B:1B:99:2A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:35:8e:f3:c9:91:3b:7f:00:17:bb:be:1a:56:76:f2:52:82:
         96:af:63:1d:c7:53:32:d5:df:20:56:8a:fc:18:b8:6d:62:9f:
         4f:fc:50:06:26:26:8c:e1:f6:cd:5e:eb:74:e6:1a:0e:f4:96:
         a6:1d:6f:66:d6:31:35:11:53:ba:f9:1a:6e:52:2e:bb:c9:56:
         83:2c:6b:50:17:f2:98:03:5b:90:64:04:27:77:55:5b:5d:c7:
         ff:e5:91:c0:03:ca:07:1d:0e:34:22:fa:4b:84:91:cc:68:11:
         8d:5e:49:35:ea:ab:6d:02:e5:55:e8:64:07:0c:02:1d:58:82:
         43:5a:cb:21:cc:5b:5f:4e:08:08:c5:b7:4e:ce:68:01:dc:d9:
         02:6d:55:83:f1:03:41:be:ad:b4:54:75:73:13:84:67:f0:76:
         93:de:2a:2f:8e:10:2f:19:87:a5:aa:0c:1c:b5:87:8a:d2:36:
         50:f3:a4:d1:11:44:2f:d6:20:a2:86:14:0d:7f:2e:7a:51:6c:
         7e:b0:be:ca:d6:f0:79:d5:bb:32:55:0a:09:76:6d:14:2f:57:
         e4:c6:12:fb:64:65:ef:2e:69:af:b3:ac:19:e1:cc:2f:4a:5f:
         dd:cf:70:13:04:c5:d6:35:a3:67:78:e7:5d:ac:a3:6e:80:52:
         c1:99:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:13:35 2026 by rpki-client