Error: rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
File:                     6vTkF_QNHJDUbdlViOspDev7ius.mft (raw, json)
Hash identifier:          owVNBHUvil4IctaFW53dE1YAadzi+z97dhduFy8jZ7M=
Subject key identifier:   64:BE:EF:58:D1:AD:57:31:90:90:ED:53:64:5A:E2:FB:B5:E4:7E:E0
Authority key identifier: EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
Certificate issuer:       /CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Certificate serial:       04EA
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
Manifest number:          04E8
Signing time:             Tue 27 Oct 2026 03:31:06 +0000
Manifest this update:     Tue 27 Oct 2026 03:31:05 +0000
Manifest next update:     Thu 29 Oct 2026 03:31:05 +0000
Files and hashes:         1: 6vTkF_QNHJDUbdlViOspDev7ius.crl (hash: ZuEqvbIoEFKEGuPRkFq6yIp8rLbBrVOMz3I7eoz7imY=)
                          2: D505C1903E8F11EFAE9EEE8B762E951A.roa (hash: NwidDV20CYZEDHZ6t+ZNN3IKmoqOlGtHrBQtSGaeJsg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                          rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC8BRI, serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
        Validity
            Not Before: Oct 27 03:31:05 2026 GMT
            Not After : Oct 29 03:31:05 2026 GMT
        Subject: CN=6ae01afa-651f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:23:62:ac:fa:9d:fe:06:e6:64:94:0f:d8:
                    a4:6c:55:11:15:c7:c3:2c:12:f5:5d:9c:35:40:1b:
                    5b:57:1a:a6:a2:ef:aa:ca:15:b2:f7:f3:58:ef:ac:
                    30:8c:ad:9a:6a:fc:a2:19:26:82:0a:52:fc:64:92:
                    66:d3:30:48:4b:85:e4:9d:09:88:77:9c:f7:15:ee:
                    3f:f8:8b:da:a6:77:1f:57:98:54:07:61:6a:92:34:
                    da:45:09:cb:5f:34:2e:cc:7f:cb:e8:b4:e5:35:bd:
                    5c:f5:82:b3:39:38:b3:dc:ec:33:cf:26:f3:c3:07:
                    43:30:ea:7c:57:90:e7:99:02:01:4f:e5:24:16:ba:
                    15:43:05:cc:d6:95:aa:b9:c8:8e:d0:cc:57:23:89:
                    89:29:4e:a8:8d:06:8b:8d:2f:e3:87:fd:c9:27:0c:
                    35:f1:aa:1a:e8:6e:a2:f3:98:21:ed:a4:39:c0:8f:
                    79:30:00:69:4a:89:34:f2:51:3c:c4:7b:bd:92:34:
                    40:50:fd:3f:b7:45:78:ea:d5:e7:0b:53:5f:4c:70:
                    3e:e1:87:bc:00:90:61:91:3e:c1:63:a0:76:48:c1:
                    f9:cb:43:70:cd:a8:fe:80:23:89:a1:85:0a:27:c5:
                    ce:3a:75:77:20:a8:2e:b5:ca:6c:f1:98:d6:76:84:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BE:EF:58:D1:AD:57:31:90:90:ED:53:64:5A:E2:FB:B5:E4:7E:E0
            X509v3 Authority Key Identifier:
                keyid:EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f8:45:b6:52:3d:c7:ba:67:f1:b6:3c:16:0c:0e:31:ce:c5:
         37:f5:3d:a6:32:5d:ba:76:de:81:69:61:77:09:d4:fb:9c:84:
         bf:3e:a6:e3:6c:7c:68:70:1b:e3:87:a9:77:7e:2d:33:66:d3:
         01:9e:7b:8c:98:2e:89:4b:84:d5:15:6b:44:4d:3f:d2:10:29:
         47:b3:0e:77:07:5f:24:28:56:25:51:d7:97:ff:a3:76:1e:59:
         ce:89:0d:d8:3d:f9:9b:c0:2e:f2:97:20:0a:05:2e:83:03:16:
         55:39:fe:eb:7a:76:bd:43:88:9d:f9:7f:38:89:f7:b6:71:4e:
         6d:f3:ea:48:48:a1:61:4e:0c:23:a4:17:db:e4:30:9a:7e:f8:
         9b:f3:8c:49:62:eb:4c:de:29:f2:b1:e7:7f:76:25:82:5b:3c:
         a4:19:ce:02:4a:41:7b:4b:b8:f2:81:a8:7c:98:b8:3c:b9:6b:
         28:bb:eb:2d:3c:2e:92:b3:ff:f4:26:b0:9a:8f:7c:79:f0:80:
         4f:03:23:99:44:95:9e:8f:b4:53:ad:78:2a:a4:6c:3e:47:42:
         32:12:1f:4e:6e:17:40:c6:03:7e:33:3d:8a:6d:e4:4c:5a:17:
         c4:59:04:64:c0:b3:e7:b5:5a:8f:4d:05:fb:d1:48:55:6f:20:
         fe:6d:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:49:26 2026 by rpki-client