Error: rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
File:                     kXMyk_xjUK7funWpFv_0G1Fez0w.mft (raw, json)
Hash identifier:          Mwe4vtlN/VtOdNeaSwtfDSkkhEuJ4Vs8c5jLU0vVliA=
Subject key identifier:   37:A1:C0:50:CD:41:66:58:B0:F2:6E:4A:03:F0:4F:25:BF:85:96:CE
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       0758
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
Manifest number:          0751
Signing time:             Sat 19 Sep 2026 06:42:28 +0000
Manifest this update:     Sat 19 Sep 2026 06:42:27 +0000
Manifest next update:     Mon 21 Sep 2026 06:42:27 +0000
Files and hashes:         1: kXMyk_xjUK7funWpFv_0G1Fez0w.crl (hash: NWGfG5Xs3dhAuswlqcaqafmNcgz9lh1O4ig3JLzuVdw=)
                          2: C1A5E32A873311F1818BD6E3CE1D38B0.roa (hash: MlaWz+iw8BJ1MUQeTJwhJ9d/vpySNP8qvYNISa9IMmY=)
                          3: 58977490B0DF11F1A1FBC1F1CE1D38B0.roa (hash: N11/bWdhvJMGtJ4/BrZKOXxSUZeKS0aLH8pXMLFi838=)
                          4: 8B40C2F2243A11F1A0BEB48ADAE4EC9C.roa (hash: 3620Wsxd/t0/oMKvGDVNw2kGd63Qxyzn+iydXrHbac4=)
                          5: 7EE185A6B21611EFA9BDF294762E951A.roa (hash: G6244Azl/uqe8/mj3zsQM21nztQl1zF4+5qvnRVhw/Q=)
                          6: 04D8EA84873411F192C0F7E3CE1D38B0.roa (hash: 0W5gaxdOwk+b6dfWlmRPJjKXBz2u49fbrmDgcDEqrHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Sep 19 06:42:27 2026 GMT
            Not After : Sep 21 06:42:27 2026 GMT
        Subject: CN=6aae2ed4-73ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:85:6e:1c:17:f9:90:6d:5e:ae:cf:c6:88:
                    d9:e7:7f:03:bf:9b:cd:c9:82:65:eb:19:d2:12:78:
                    e1:91:91:24:8b:8b:e5:b3:df:5a:9c:b8:49:90:e1:
                    6c:ad:b3:f4:f6:02:9c:c0:ba:be:98:78:bf:66:51:
                    be:bf:f7:69:6b:8f:52:50:47:4d:da:09:5f:e9:f8:
                    9f:83:5f:9d:c0:64:86:0b:68:9a:47:64:5e:3b:0d:
                    71:e9:20:4c:6b:46:f3:f7:b6:a3:ba:60:f9:30:51:
                    85:8a:df:cb:0c:b2:ae:20:6d:47:0d:8b:ea:b7:15:
                    62:32:9a:ba:c3:94:06:cb:d7:26:4b:d4:e1:47:81:
                    4f:7f:28:16:8f:d7:da:dd:95:2c:dd:08:a0:74:28:
                    c7:75:58:89:4c:0d:28:6e:b6:e7:af:b6:88:b5:35:
                    03:0e:36:0a:30:01:b2:c6:9a:b4:a5:89:e8:0d:9a:
                    98:93:51:11:eb:2c:48:74:8a:b5:60:6e:bb:ba:22:
                    29:90:8d:16:2f:11:68:09:90:13:6b:de:92:57:6b:
                    1d:5c:a6:15:a8:c6:a7:8d:63:36:8a:8d:ea:ea:5b:
                    dd:1b:7a:de:3b:59:5d:9d:e5:63:a8:33:c6:0b:77:
                    8e:0c:ba:75:a9:bc:eb:21:e1:a8:12:a6:d4:63:c6:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A1:C0:50:CD:41:66:58:B0:F2:6E:4A:03:F0:4F:25:BF:85:96:CE
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:e8:b8:90:0d:f2:91:2a:dc:a2:f4:ed:9f:b9:eb:6b:13:
         ed:78:b3:63:30:63:07:e8:bb:08:92:db:4a:4a:e3:a4:37:a5:
         36:0b:67:b6:0f:9e:8d:fa:40:66:89:08:0f:3c:72:d5:50:d2:
         02:09:5c:fa:da:26:c2:e8:0a:58:c6:b8:7f:c8:cd:d9:12:0a:
         a9:fe:79:57:49:ee:ca:73:27:95:70:24:4f:c2:ea:0c:f4:1c:
         55:45:3f:d4:ec:c0:cf:ff:ce:1b:e9:d5:59:bb:26:d5:b4:73:
         a1:5a:06:f4:3e:79:7f:fe:c6:52:c2:5d:e1:e3:63:2e:5c:94:
         d8:98:6e:d2:aa:2a:80:1a:25:7a:53:14:bb:d7:42:8c:80:91:
         b2:57:8a:9a:c7:74:62:9d:f9:be:ca:a2:17:b4:c6:f7:8a:ba:
         67:a3:0c:11:8b:2e:fe:67:b7:86:26:e7:18:83:bb:5d:99:43:
         41:45:d5:86:e6:5f:c2:30:01:90:3f:c8:80:b6:10:20:98:56:
         68:33:b8:27:48:75:74:86:ca:77:ec:47:18:d4:73:dc:2e:55:
         e2:a3:0c:36:b1:fe:c6:6f:6f:10:6c:bb:89:40:80:5f:22:41:
         7b:eb:e6:99:af:c7:47:ff:55:bb:93:49:00:8e:42:db:88:7b:
         0c:e5:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:52 2026 by rpki-client