Error: rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
File:                     XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft (raw, json)
Hash identifier:          UtMQJ1V8sD41Ok5k3Eke7qKk3QM9MldPPc4bZ4sGK0k=
Subject key identifier:   CF:7A:88:1B:B2:A5:06:84:A9:42:09:69:65:E8:6C:0E:72:9F:3E:A6
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Certificate issuer:       /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial:       0621
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
Manifest number:          061E
Signing time:             Mon 26 Oct 2026 02:54:28 +0000
Manifest this update:     Mon 26 Oct 2026 02:54:27 +0000
Manifest next update:     Wed 28 Oct 2026 02:54:27 +0000
Files and hashes:         1: XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl (hash: OoJFNCTDNJLVqa0O5VEKiRSknAP5fgQXkJDp7lzYqLc=)
                          2: BF7C71D2253511F1A2DF32BADAE4EC9C.roa (hash: xDxj7jLAbLHTvk85XMXUrzpTx4HuVnCWuPgoavUsJzg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682615AF, serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
        Validity
            Not Before: Oct 26 02:54:27 2026 GMT
            Not After : Oct 28 02:54:27 2026 GMT
        Subject: CN=6adec0e4-d5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:ad:2a:93:69:6c:93:63:30:0e:c2:a1:2b:
                    ad:d1:97:84:56:eb:16:b5:ff:f2:a0:06:0e:b9:93:
                    ec:f3:fa:64:7a:b5:c3:d8:a4:61:25:59:1e:5a:ba:
                    6b:c0:ff:b7:c5:a9:82:a9:b5:43:57:5e:d6:6e:b9:
                    c8:8c:14:0e:46:e5:0e:30:45:aa:8c:40:6c:87:92:
                    c1:22:a1:5d:70:74:f2:ca:04:0c:0a:49:0b:82:d8:
                    ee:66:bb:9d:76:ae:c7:2f:8d:4a:2f:1f:d7:00:64:
                    12:a1:65:76:c9:cb:89:5a:94:e0:e3:ae:4e:da:a9:
                    fd:ec:bb:26:a7:70:04:1b:c7:80:8b:42:51:17:6e:
                    4b:77:86:ab:9b:17:91:f2:80:d4:8a:d6:08:c7:41:
                    08:ef:4c:3b:d5:32:b1:f5:6e:aa:32:47:18:09:cf:
                    30:4f:5f:14:a6:62:a6:ad:a1:73:02:4b:84:12:9e:
                    20:1c:51:62:7b:92:24:61:57:d7:fc:fd:2e:12:f1:
                    ca:06:e0:85:5f:2f:a9:48:c9:ed:1d:99:94:d2:24:
                    e2:de:df:04:1a:97:dc:a5:5d:81:ff:3d:8f:c9:95:
                    9b:56:4a:1e:16:08:94:65:85:50:7d:a2:dd:f4:ff:
                    c5:f7:47:c5:57:4e:2b:19:11:78:18:6f:c1:94:bb:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7A:88:1B:B2:A5:06:84:A9:42:09:69:65:E8:6C:0E:72:9F:3E:A6
            X509v3 Authority Key Identifier:
                keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:83:db:f2:d7:68:82:91:ce:1d:32:43:52:35:6b:9c:87:c1:
         64:03:56:00:91:4a:05:a3:e4:25:35:d0:fd:09:10:4c:09:95:
         da:6c:53:8a:4b:5b:d7:28:4c:ea:b1:e5:67:98:51:77:d1:6b:
         af:9b:c3:01:de:0c:fe:bf:75:83:43:72:33:42:e6:28:b5:9a:
         85:33:2e:0b:f1:85:c6:7e:69:65:f8:90:53:1d:03:c2:1f:f5:
         ea:b6:b4:03:07:15:77:7c:0c:23:ec:d3:3b:8d:4f:51:20:04:
         04:1c:df:52:36:bc:c5:62:72:7a:a7:64:93:82:ca:c7:62:b5:
         90:b6:1a:fc:70:ad:ae:fe:a5:95:8a:05:88:ee:df:f0:e2:df:
         dc:22:2a:cd:5b:4d:d2:83:b5:f8:d4:13:29:1c:1c:55:59:25:
         9e:45:0a:c7:46:0f:ae:8d:14:2a:07:4c:18:26:24:48:af:f2:
         6e:1e:a5:5d:b8:67:d1:f3:8b:ec:f3:95:6a:cf:b5:5b:15:2d:
         f1:8f:60:45:15:45:17:a4:82:28:2b:95:a1:28:5e:54:d4:13:
         c4:d4:93:61:19:ef:0c:34:35:04:4a:68:2f:4c:a0:02:bf:93:
         26:15:79:81:2f:ac:9e:43:c3:f7:68:bf:f7:b3:af:58:86:81:
         61:dd:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:04:07 2026 by rpki-client