Error: rpki.afrinic.net/repository/member_repository/F3682C09/A543F2ACBC6E11EBB372737BF8AEA228/1EdDEyer6LamYDCEj_0NlpxXCr0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682C09/A543F2ACBC6E11EBB372737BF8AEA228/1EdDEyer6LamYDCEj_0NlpxXCr0.mft
File:                     1EdDEyer6LamYDCEj_0NlpxXCr0.mft (raw, json)
Hash identifier:          RRGGxwGRI/KTysWpVcsQdHtiVm7Kn1luPxFy8S/YNr8=
Subject key identifier:   53:ED:B0:33:B8:DE:8E:E7:82:21:5E:9F:AF:8D:7F:AA:DC:90:16:B4
Authority key identifier: D4:47:43:13:27:AB:E8:B6:A6:60:30:84:8F:FD:0D:96:9C:57:0A:BD
Certificate issuer:       /CN=F3682C09AF/serialNumber=D447431327ABE8B6A66030848FFD0D969C570ABD
Certificate serial:       07F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1EdDEyer6LamYDCEj_0NlpxXCr0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682C09/A543F2ACBC6E11EBB372737BF8AEA228/1EdDEyer6LamYDCEj_0NlpxXCr0.mft
Manifest number:          07F2
Signing time:             Tue 27 Oct 2026 02:07:39 +0000
Manifest this update:     Tue 27 Oct 2026 02:07:38 +0000
Manifest next update:     Thu 29 Oct 2026 02:07:38 +0000
Files and hashes:         1: 1EdDEyer6LamYDCEj_0NlpxXCr0.crl (hash: qxIjdGM8xRU6O2Da7fXjHM8rOMwXw68A7/yjlbeJAew=)
                          2: E650AE52BC6E11EB847FD07BF8AEA228.roa (hash: +eTs78HQO+yiKtBXlE3VIEeGG4NvrxOlCXp0GiPHoR8=)
                          3: 00B7F584BC6F11EBA8E6F87BF8AEA228.roa (hash: oRUitkfYnOVYrWm7gAhhJm5N84mBlmPx2xGVbvpcz1g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682C09/A543F2ACBC6E11EBB372737BF8AEA228/1EdDEyer6LamYDCEj_0NlpxXCr0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682C09/A543F2ACBC6E11EBB372737BF8AEA228/1EdDEyer6LamYDCEj_0NlpxXCr0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1EdDEyer6LamYDCEj_0NlpxXCr0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 02:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2036 (0x7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682C09AF, serialNumber=D447431327ABE8B6A66030848FFD0D969C570ABD
        Validity
            Not Before: Oct 27 02:07:38 2026 GMT
            Not After : Oct 29 02:07:38 2026 GMT
        Subject: CN=6ae0076b-e965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:78:48:b8:55:52:c1:78:0b:38:6c:7f:ef:
                    ba:d0:df:d6:54:9b:b8:04:44:cc:22:d9:5d:1f:8f:
                    7c:b7:93:ac:df:43:49:b2:8d:cc:6f:83:bc:ed:01:
                    ab:50:59:18:92:2a:2b:48:b9:8d:31:51:74:46:fe:
                    b9:a5:95:1a:c9:17:43:b7:7c:11:3b:d6:b3:03:ee:
                    20:b7:68:3f:56:b8:0b:73:38:5d:67:2f:3a:24:fa:
                    fb:15:05:40:b0:33:41:33:8f:79:26:6b:ca:9d:03:
                    72:3c:f5:b2:11:c6:5f:ab:f5:9f:1a:93:fe:84:5e:
                    bb:58:a5:86:4c:b2:ff:46:56:d6:93:51:0a:a7:53:
                    f0:ba:b7:0d:58:18:be:44:15:47:4e:d1:35:c4:c6:
                    ef:62:46:ce:93:65:75:1d:ab:e9:45:64:9b:07:76:
                    29:fe:74:a2:cf:b0:0b:48:f9:4a:4b:e1:1c:70:d3:
                    83:39:03:ed:f5:89:57:d1:44:66:e7:6f:80:bd:f0:
                    dd:f8:c9:a0:ee:f8:ba:33:08:e2:3e:2a:b8:5e:69:
                    52:ec:8c:3d:a2:87:e2:b9:88:3e:22:54:94:9f:00:
                    35:6a:a8:ee:cf:7c:aa:8d:b3:5b:b5:10:65:37:c6:
                    26:a0:2b:56:44:cd:74:63:1c:43:b6:68:8c:14:44:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:ED:B0:33:B8:DE:8E:E7:82:21:5E:9F:AF:8D:7F:AA:DC:90:16:B4
            X509v3 Authority Key Identifier:
                keyid:D4:47:43:13:27:AB:E8:B6:A6:60:30:84:8F:FD:0D:96:9C:57:0A:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682C09/A543F2ACBC6E11EBB372737BF8AEA228/1EdDEyer6LamYDCEj_0NlpxXCr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1EdDEyer6LamYDCEj_0NlpxXCr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682C09/A543F2ACBC6E11EBB372737BF8AEA228/1EdDEyer6LamYDCEj_0NlpxXCr0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:37:a9:43:c9:01:ee:38:96:cd:38:0f:4c:97:0c:f5:1a:84:
         b1:fa:a2:07:0a:fd:14:95:40:a9:33:a1:d7:ed:69:f6:fe:19:
         83:2a:72:cf:cc:53:1f:bb:07:1c:04:45:b1:26:c4:43:0c:3d:
         f7:13:41:09:ca:b2:a8:c5:25:15:27:31:55:f0:fd:e2:89:43:
         53:d0:67:3f:79:80:1f:82:77:78:b6:cc:59:bd:60:77:bf:b3:
         be:a9:c4:d8:04:b9:44:aa:0f:ec:0d:2c:b4:b8:c9:ac:97:ed:
         35:25:7e:74:04:68:7b:eb:61:83:e3:55:ca:fa:e0:57:9a:0f:
         55:bc:70:a2:7e:28:77:74:67:b4:d1:2e:e5:54:b0:5b:3f:f4:
         54:0e:78:08:da:8e:50:b7:60:37:d0:88:9a:cb:e6:42:61:de:
         38:8d:15:d3:27:ba:0b:bf:6c:8c:f6:fc:a0:f2:01:d2:8f:40:
         12:f4:f9:f1:92:97:52:89:27:e4:9a:3d:15:4f:3e:ec:31:a5:
         22:5e:73:fb:80:7a:10:a0:34:32:df:43:c5:b0:1a:d5:56:65:
         fc:01:36:f0:7f:a2:51:ac:4f:3c:c5:00:f8:e7:ba:c7:e8:c1:
         59:16:68:65:c5:9e:1f:d4:40:15:50:07:b5:12:cf:a9:f3:78:
         de:85:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:21:51 2026 by rpki-client