Error: rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
File:                     N783y2Va9seOuogIKpvt0b5AScQ.mft (raw, json)
Hash identifier:          PXOliO3V7pat7c7evnn8/IB0P0Ox5lGWlvHzkSC7Mkw=
Subject key identifier:   E6:2D:A3:22:12:91:B5:9D:78:F3:D7:5E:6C:30:6A:9A:BC:03:25:D2
Authority key identifier: 37:BF:37:CB:65:5A:F6:C7:8E:BA:88:08:2A:9B:ED:D1:BE:40:49:C4
Certificate issuer:       /CN=F368788DAF/serialNumber=37BF37CB655AF6C78EBA88082A9BEDD1BE4049C4
Certificate serial:       0666
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
Manifest number:          0660
Signing time:             Sun 25 Oct 2026 02:48:59 +0000
Manifest this update:     Sun 25 Oct 2026 02:48:58 +0000
Manifest next update:     Tue 27 Oct 2026 02:48:58 +0000
Files and hashes:         1: N783y2Va9seOuogIKpvt0b5AScQ.crl (hash: z5joV+Tf4ddF6SUxGNc5khIgD96axh/tza8JYLb5p6U=)
                          2: 667CDDBA7AF311F1AC8CD6BACE1D38B0.roa (hash: Aws43tDmv42wrFB5wN7Bq3Dh0w+cVdZJeidreAVaC4Q=)
                          3: 4FA146B8A26D11EF8615AF63762E951A.roa (hash: 1lWOSLXoKapO4xyywLf2L4cW6uZX3BBDfChH/GRyj0g=)
                          4: 7D242F2063AB11EFA5073EA9762E951A.roa (hash: j6s7+D+sOoor2rnPY/jLlNXmijWZQCCdk4aJ0Yczhkw=)
                          5: 054F4B7C63BC11EFA8EF188F762E951A.roa (hash: sLm+VxrF0gqIYYWrMeaPyCiKXVb8QRFJvY1rOOeuSj4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368788DAF, serialNumber=37BF37CB655AF6C78EBA88082A9BEDD1BE4049C4
        Validity
            Not Before: Oct 25 02:48:58 2026 GMT
            Not After : Oct 27 02:48:58 2026 GMT
        Subject: CN=6add6e1b-686e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:0c:6b:d5:3f:1a:c0:58:d6:3c:68:02:e5:
                    17:57:ac:a1:7f:57:b0:24:a9:4c:03:b8:77:4b:91:
                    a4:52:7e:5d:f9:4f:c0:60:62:f1:69:59:75:4b:b7:
                    48:f2:38:f5:85:87:43:d8:ef:44:69:eb:3a:e9:09:
                    b0:a7:ba:79:91:8b:36:61:11:0b:38:a1:69:64:97:
                    23:1e:4d:bd:8d:9c:43:13:d5:17:3f:2e:00:7b:75:
                    88:ca:44:a7:3f:61:a3:57:e1:2e:16:cb:60:c8:dd:
                    47:7c:4b:ed:78:ff:73:db:03:c4:79:0f:5b:b9:f6:
                    7b:2a:ec:3a:c5:8e:c9:3d:1a:a6:7f:a1:20:17:0a:
                    38:7d:06:e1:44:58:e4:bf:e4:89:2f:5b:a8:f8:b0:
                    e1:02:4b:a0:7a:47:16:9a:1d:0e:d9:52:ee:19:0c:
                    dd:c2:33:78:0d:c4:2d:45:03:3f:fc:30:31:b5:87:
                    df:98:f3:f1:03:1d:da:41:cd:2f:6e:5f:77:3c:45:
                    37:aa:fd:29:dc:d8:99:ec:98:b7:e4:cd:06:21:db:
                    5d:36:4d:0f:f2:a9:de:42:de:8b:10:54:cc:f9:36:
                    43:27:af:3f:0f:e6:5c:c2:d0:27:93:b8:46:31:9e:
                    e9:2c:e0:2a:d7:d3:44:46:9d:77:1d:f6:bf:ec:71:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2D:A3:22:12:91:B5:9D:78:F3:D7:5E:6C:30:6A:9A:BC:03:25:D2
            X509v3 Authority Key Identifier:
                keyid:37:BF:37:CB:65:5A:F6:C7:8E:BA:88:08:2A:9B:ED:D1:BE:40:49:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:3a:20:3c:f4:83:40:e8:bf:1b:e9:38:3c:28:f7:ab:d3:
         08:2f:39:50:8b:b0:44:0d:b6:b2:38:04:17:f5:11:a3:93:6c:
         57:0d:38:1c:1e:42:a3:4e:fb:9d:59:cd:0d:2f:f6:a7:0a:24:
         9e:b8:b3:95:e5:ad:0a:32:48:cd:62:22:15:db:af:f6:c2:fd:
         22:f6:cd:5a:75:39:48:7c:dc:98:09:1d:d2:69:e0:48:59:a9:
         de:43:e9:0a:e9:18:de:69:bc:23:73:39:7e:78:12:8f:bc:f4:
         08:f3:de:e7:85:73:2b:92:fc:ed:7b:e8:73:79:5b:17:e9:bf:
         d3:66:e2:1e:f6:df:e2:d2:12:ad:17:7f:ed:e2:0f:00:20:83:
         75:11:36:5b:ca:63:f6:ae:b5:89:68:ce:2f:fe:39:3a:f0:b6:
         03:7c:23:9a:a4:98:74:f2:8a:55:90:0b:fe:2a:18:f7:90:bf:
         c7:61:35:80:db:64:d8:74:09:bf:54:c3:50:04:40:5d:09:9e:
         ce:b9:83:96:0a:5c:51:e2:64:c7:e8:72:e1:b7:f8:b4:e7:ca:
         5e:ee:8d:45:4f:71:25:14:16:8f:8f:4c:7d:e2:c9:dd:bd:13:
         32:3a:05:51:8d:36:07:a4:5b:39:5c:16:22:60:cc:4c:38:27:
         30:0f:8d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:37:28 2026 by rpki-client