Error: rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
File:                     uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft (raw, json)
Hash identifier:          u2iB8sEH9lbx7gvi540avFmZdyEHQo9zlfmaPqf6MdY=
Subject key identifier:   30:6D:21:B6:D7:84:CC:CC:BA:0E:EC:61:80:65:E9:E6:0F:24:25:2D
Authority key identifier: B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
Certificate issuer:       /CN=F3686B65AF/serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
Certificate serial:       045C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
Manifest number:          044F
Signing time:             Tue 27 Oct 2026 03:52:57 +0000
Manifest this update:     Tue 27 Oct 2026 03:52:57 +0000
Manifest next update:     Thu 29 Oct 2026 03:52:57 +0000
Files and hashes:         1: uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl (hash: Jo4CI3gEk+jmwqCNJe0P0mDseN6TP/cpDF5t3wHCjp4=)
                          2: 1B6ECF12963411F094C170B5DAE4EC9C.roa (hash: fkvprPgx2NCjxUTzaYs2bjq8VWQ7gVUNH+w2V0QutVU=)
                          3: 41353ABCC22111EEB2919A95775412E6.roa (hash: oXcQymFlE/krOOEr4NVVaSaifs3aMH0vQz8dpJbk6Hw=)
                          4: 8E74FB4879B211EF8A6E278A762E951A.roa (hash: HVgCoNFWTE1lwq+yr47vjP6O5PwPrCMNfBORofraa3A=)
                          5: 548EE2AA1CD511F1A2B42BD4DAE4EC9C.roa (hash: yoh/GJQHHC/Yp+iLKILqdlE24xH889xlMfg6/Xq+Kf8=)
                          6: ED8441821CD311F186D350CCDAE4EC9C.roa (hash: U00F1apqaDfazo7nw14Ggj6u2TENyAd+c2vQwTXNwGY=)
                          7: 431E183C79EE11EFAA7EEE76762E951A.roa (hash: 7aSukpXTBzkjxwef0CwTrreS0uSqRQoE76LmOrIjIRE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686B65AF, serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
        Validity
            Not Before: Oct 27 03:52:57 2026 GMT
            Not After : Oct 29 03:52:57 2026 GMT
        Subject: CN=6ae02019-dbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:c5:06:ca:4a:6a:2a:9f:4f:fb:65:53:ab:
                    cf:a2:1a:37:f8:a7:72:99:44:5f:bf:03:c9:b4:2f:
                    83:bb:80:e9:a7:a8:93:56:db:e9:89:38:9f:b7:99:
                    31:d7:4a:15:db:60:93:94:57:29:3a:7f:b0:cc:bc:
                    53:a7:f6:25:00:97:c3:93:f0:21:c9:60:2a:4a:aa:
                    f3:fb:13:86:37:ec:a5:b0:9c:ee:43:f0:fc:e4:3f:
                    cb:98:cd:67:b2:d4:92:30:42:42:57:62:54:c4:61:
                    e9:b5:5c:37:4f:f8:2d:aa:a4:54:f5:22:5e:bd:97:
                    4b:bb:79:67:cf:63:32:c2:8e:0d:1e:bc:86:10:96:
                    f3:bc:54:55:f7:81:1f:53:f4:0f:ba:8c:8d:3b:c8:
                    b4:39:09:2e:32:1a:30:42:49:e3:86:75:b4:d1:b7:
                    34:76:48:e5:76:5b:3b:07:56:5b:a5:a6:9d:82:97:
                    7b:e8:ec:03:da:c4:6e:f8:99:5a:1c:73:08:57:fb:
                    53:97:6c:32:89:91:50:68:29:2d:80:be:39:39:2f:
                    e3:96:0c:05:1b:47:ff:23:eb:7d:10:6f:f0:03:2a:
                    61:c8:94:8d:f3:f1:4c:b5:81:3a:00:32:03:87:19:
                    b7:ee:a5:81:1c:90:f8:5a:c8:e5:b1:5b:ed:49:7e:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6D:21:B6:D7:84:CC:CC:BA:0E:EC:61:80:65:E9:E6:0F:24:25:2D
            X509v3 Authority Key Identifier:
                keyid:B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3f:4f:5b:fc:50:b0:0d:40:52:c3:e4:30:ae:35:df:bc:0a:
         46:19:43:8c:e9:12:80:7d:23:d1:78:c4:42:4f:73:4e:31:81:
         86:26:ed:5e:82:b3:e0:bf:69:ee:cb:5d:77:6c:e4:18:df:94:
         ff:77:a2:2b:88:3d:2d:c7:ee:20:3d:94:81:27:e6:21:e5:23:
         5f:0a:c6:d0:a6:66:34:ec:c5:0e:b5:f1:24:2c:c0:29:28:a8:
         12:71:e2:23:5a:9d:10:45:70:aa:2c:86:04:a9:8f:21:b5:fe:
         d1:3d:23:38:17:b3:67:09:04:b2:91:4d:0d:af:94:38:07:07:
         69:a6:0c:21:b3:1e:f3:a1:e0:81:a8:1e:f2:67:cc:9c:00:65:
         fe:52:da:c1:20:5c:a3:5a:91:c0:3a:76:02:19:3c:07:8c:f3:
         4b:c5:de:af:8f:7f:6b:5b:c0:a9:ce:4a:cc:9f:46:6c:b8:7c:
         5d:ac:dd:71:7d:a7:f4:d3:27:9e:7c:00:06:46:61:47:1c:9c:
         a1:a5:99:b4:b1:32:72:99:0f:f0:ad:2b:7b:a1:fd:e7:ad:2d:
         6f:f0:77:b4:db:77:7a:fb:ef:d3:33:ee:d1:6c:7b:e7:0a:19:
         01:83:ed:33:ff:00:7d:e9:77:0e:46:24:4c:fe:80:97:17:24:
         5a:ac:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:32:42 2026 by rpki-client