Error: rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
File:                     rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft (raw, json)
Hash identifier:          iA3XgpghY7uy9M+OVTm3FO4ahqRDp/iZrNUEy1yicKc=
Subject key identifier:   6C:7B:A5:93:A1:E3:F6:C3:93:48:3E:4D:0F:A6:22:6A:0A:80:9F:6B
Authority key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
Certificate issuer:       /CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Certificate serial:       0863
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
Manifest number:          085A
Signing time:             Sun 25 Oct 2026 02:01:10 +0000
Manifest this update:     Sun 25 Oct 2026 02:01:09 +0000
Manifest next update:     Tue 27 Oct 2026 02:01:09 +0000
Files and hashes:         1: rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl (hash: Qr1ROiQCvwLk/UZLJfXXFnb2Xlc5p53nyPOKDLJJZ1Q=)
                          2: 5F38F7AE8A4911F1800CD0B6CE1D38B0.roa (hash: U/HuiLZ6Sss66UBXOUZ9CTnCo40rL1oFrzun9Wg0tRc=)
                          3: BCAF9294702811EB8791AD25F8AEA228.roa (hash: AT0o7ug7v2ZBAyMdgUq3SD/St9P0mYCt+1mdlQ+38qg=)
                          4: A0FB2C7A702811EBBEEF8C25F8AEA228.roa (hash: WRA7vUkmweseystfPnsoSmxUQdjwHDtXfkHr1rmgxF8=)
                          5: DA2A3F688A4911F1A419E0BACE1D38B0.roa (hash: Ae7lcvyzgbbhhsWy4rPPoyYkCHmjQBD2D56BJGDzKcI=)
                          6: F82C96028A4711F19641A3AECE1D38B0.roa (hash: XHS/PlTbJJf38vr8Lm2UbPHtd7t1vmvBVAYeHGDnxMk=)
                          7: 365FE0469DF411EB9F82B84AF8AEA228.roa (hash: Ws8N8X7YiONJc56TyVAJKcp66X/6QscYInYVrETeq+o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 02:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147 (0x863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368A3D1AF, serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
        Validity
            Not Before: Oct 25 02:01:09 2026 GMT
            Not After : Oct 27 02:01:09 2026 GMT
        Subject: CN=6add62e6-7db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:68:9f:a7:c0:49:d9:ef:cf:ef:a4:b2:98:c3:
                    0a:7e:b8:7a:5d:6a:bc:68:57:1d:4d:39:3e:65:4f:
                    ad:39:a6:ef:b1:0a:ba:f9:82:ef:05:63:24:45:5f:
                    4a:88:41:0e:5b:84:aa:7f:f4:9d:7b:01:56:93:8b:
                    3b:be:fe:8e:e3:bb:e3:9a:28:9c:dc:3a:ee:42:fe:
                    a0:b6:69:0d:0f:c0:d0:42:32:57:7a:3f:ed:e4:2e:
                    1e:63:2d:03:a9:55:c0:e6:ac:ec:5f:a1:e3:40:fd:
                    9e:ab:bd:63:82:9a:36:f1:bc:26:63:ec:a3:8b:b7:
                    f9:c0:53:61:ba:81:40:c0:23:c1:4c:d2:93:8c:44:
                    60:65:70:e4:ea:c7:da:03:b3:5a:ba:5a:a4:a1:69:
                    77:d8:f5:48:22:40:70:4f:46:8f:14:53:40:e1:57:
                    9d:f9:91:ac:2b:d2:7b:d4:97:de:8f:8a:19:7c:c5:
                    2b:32:61:a2:da:69:7b:99:38:f7:b8:99:40:d4:91:
                    c0:77:f3:16:7d:1c:7d:1f:68:63:98:d0:60:04:e0:
                    95:aa:7e:3d:16:0d:30:d0:cd:45:e1:81:20:b4:c7:
                    95:8c:95:d5:2b:e7:ba:54:05:26:a7:55:3e:7c:79:
                    73:36:fc:48:5e:d3:71:a2:00:b3:68:10:37:8d:2c:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7B:A5:93:A1:E3:F6:C3:93:48:3E:4D:0F:A6:22:6A:0A:80:9F:6B
            X509v3 Authority Key Identifier:
                keyid:AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:36:13:76:96:1c:2d:40:99:5c:f5:fd:79:70:44:1e:4c:f3:
         5c:e9:f5:69:59:32:bf:77:58:8b:e6:76:2b:8c:d9:e9:d1:58:
         8a:03:e0:98:5e:e4:a7:7a:8c:30:3f:ab:e2:e2:18:12:c7:1b:
         b8:ff:d7:bb:a9:05:0b:5c:4a:62:c9:3c:41:b5:b7:7e:3c:bc:
         9a:40:f1:9b:87:1f:fd:8a:a5:a7:c9:98:01:d9:bd:0d:dc:3e:
         c1:e0:ca:68:62:64:4c:fe:aa:cf:a3:22:50:3e:d4:1b:4a:c6:
         36:d2:8e:d3:00:26:ee:a2:84:e6:46:67:b0:97:23:8a:e5:2e:
         f4:44:dd:77:d0:f3:25:38:71:d1:d0:50:55:a9:71:72:15:a8:
         5f:79:03:56:e1:5d:40:38:49:99:39:ad:12:b4:f9:9d:24:ec:
         d4:d3:80:fd:a5:f1:5f:69:5f:70:2c:9b:dd:e0:7e:7c:7b:27:
         5c:6c:b9:e5:ca:06:49:be:a5:a6:29:5b:e9:f2:16:f9:6b:6c:
         f6:b5:ed:ce:fe:45:93:86:8d:16:ed:e3:85:79:20:22:4e:af:
         60:dc:2e:b3:fa:3e:3d:88:1f:57:79:89:25:4d:27:f0:1a:25:
         30:2b:9c:2f:aa:04:8f:59:bc:1a:dc:66:46:72:80:94:4f:11:
         7a:de:8e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:05:05 2026 by rpki-client