Error: rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File:                     0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier:          DAA6ynNDa0o9w7di1HaFAGD8MHJhmOPto7umGiaFgsU=
Subject key identifier:   9D:DB:FF:A7:7B:74:43:39:C9:06:44:36:EE:BC:AD:94:1B:66:AD:13
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       077B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number:          0774
Signing time:             Tue 27 Oct 2026 02:24:41 +0000
Manifest this update:     Tue 27 Oct 2026 02:24:40 +0000
Manifest next update:     Thu 29 Oct 2026 02:24:40 +0000
Files and hashes:         1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: QLwstN6iqNjRw30pBtSv4aB+DznE2pqbB9NqG1DyB+8=)
                          2: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
                          3: 9E1E04DAC42A11F195A36CD8CE1D38B0.roa (hash: N2Ari3VqP125GfUVmY/HdUpQCynCdIpetGzSelUfNiY=)
                          4: FACAEE98703B11F186502B13CF1D38B0.roa (hash: +atnFyNmkEsaCKX9Ro0ZZNx+4LrHBs/bVM1erUMfE6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915 (0x77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: Oct 27 02:24:40 2026 GMT
            Not After : Oct 29 02:24:40 2026 GMT
        Subject: CN=6ae00b69-e02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e1:e9:7f:da:fd:92:13:e4:f1:6e:a4:de:02:
                    25:c2:29:80:be:41:89:2b:84:5b:1d:57:34:c4:42:
                    5e:37:00:f7:2b:28:e9:83:c4:1e:44:6e:f1:ad:e6:
                    b3:d8:98:28:6c:ca:14:3e:17:2e:7e:19:03:50:fc:
                    c4:11:01:0b:d2:3c:21:49:2c:88:d6:8a:25:45:6e:
                    4b:9b:8d:94:95:56:85:24:1b:6c:1d:4b:6a:bd:7b:
                    58:8b:cf:15:28:94:86:87:60:cf:7b:0f:a8:dd:a7:
                    dc:a3:4c:b9:44:2e:b2:5e:d7:da:e0:a4:b2:92:97:
                    6d:c6:c7:3a:cb:7c:c7:6e:22:a3:68:7f:23:1e:40:
                    d1:45:0d:58:d3:e3:4a:ec:f8:95:82:fd:b7:d7:2c:
                    8d:64:d3:65:41:ca:22:f5:ce:10:d3:60:5d:11:4e:
                    2a:78:42:ab:f8:6a:c8:4a:2f:d6:49:73:3c:25:1f:
                    42:58:99:eb:4b:da:93:16:ba:b1:3c:ae:d3:41:14:
                    b3:94:cd:c7:04:58:35:f0:b8:90:1b:7a:f9:40:a5:
                    3d:e5:01:f3:66:a2:ae:37:95:94:28:7b:31:e9:89:
                    6d:81:4d:5c:b9:87:78:ea:30:99:ea:15:a1:e8:d4:
                    3d:6f:b0:99:e9:f6:cd:c7:10:23:19:6e:32:52:5d:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DB:FF:A7:7B:74:43:39:C9:06:44:36:EE:BC:AD:94:1B:66:AD:13
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a3:24:e4:ed:d4:23:8f:f4:52:db:27:fe:41:79:ac:ba:e2:
         f9:50:de:b9:f6:f6:30:be:43:b4:84:dc:62:b2:e5:99:c8:79:
         16:4a:da:cb:5a:28:1d:b6:0a:fe:f5:0e:12:a4:04:62:2d:a9:
         52:ca:df:02:98:42:ca:e1:94:9e:ef:61:ce:9b:36:b4:07:4f:
         5c:89:d4:56:6c:61:30:ef:aa:f3:4b:c3:c3:b8:50:12:33:03:
         af:ce:75:5f:0c:5b:bb:7e:e3:bf:a7:22:ee:ea:94:f0:b8:69:
         c8:60:c8:ac:f2:59:0e:72:0f:bb:a9:47:aa:4d:73:4b:49:ef:
         d0:96:a8:9e:06:8c:85:bf:df:8e:05:4d:2d:cd:16:30:48:30:
         2b:ac:e1:e1:f5:28:18:07:52:2d:96:2f:03:53:2c:c1:f1:41:
         4b:99:eb:49:d2:af:0d:7b:a0:e8:95:b5:79:b7:96:b5:ec:1d:
         05:ad:33:6b:07:e7:af:5f:54:a0:af:be:de:34:67:64:01:1d:
         ad:9f:56:a1:a1:e4:a8:a4:72:11:92:c9:8c:1a:46:c7:1a:20:
         e8:a1:fc:76:3b:af:97:4e:63:11:7f:e5:46:d7:e5:dc:c2:da:
         81:00:2e:06:e7:3e:44:18:18:dc:c7:de:44:fe:9c:d6:f6:c4:
         fc:25:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:04:05 2026 by rpki-client