Error: rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
File:                     J8yUlEs4mAyi4IYqXfxE2GQEF88.mft (raw, json)
Hash identifier:          oD1GfTFu4Ly630uJchYquPV+Efcc6ecp6HhzLEHCFWI=
Subject key identifier:   02:D4:A4:A4:53:1B:6F:4A:F2:F7:76:E4:8D:81:F7:4F:69:23:2B:E5
Authority key identifier: 27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
Certificate issuer:       /CN=F3698401AF/serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
Certificate serial:       0538
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
Manifest number:          0536
Signing time:             Mon 26 Oct 2026 03:22:33 +0000
Manifest this update:     Mon 26 Oct 2026 03:22:32 +0000
Manifest next update:     Wed 28 Oct 2026 03:22:32 +0000
Files and hashes:         1: J8yUlEs4mAyi4IYqXfxE2GQEF88.crl (hash: DIR7y9T5e8ZJ5bUfs3z8I4Uy/7DxIcCUUbS/uUxPXwE=)
                          2: 4A5DBA668CB711F189BFE714CF1D38B0.roa (hash: fsgrd200Fbpxxe0VEF0l5IGTl8akiYumueczfz12gNg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698401AF, serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
        Validity
            Not Before: Oct 26 03:22:32 2026 GMT
            Not After : Oct 28 03:22:32 2026 GMT
        Subject: CN=6adec779-1423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:98:29:e0:0e:28:62:a2:41:00:78:39:97:0d:
                    71:8e:ce:c0:19:92:91:f6:83:00:13:c2:3b:1e:69:
                    61:d0:72:a9:49:77:54:a0:3b:81:fe:fa:06:6d:83:
                    b6:63:78:53:83:63:30:7c:67:7b:0c:57:0a:2a:83:
                    d0:87:dd:48:b3:9f:f4:c5:de:c2:82:bb:47:36:c6:
                    b6:fe:08:38:9e:f6:81:f4:02:9c:c7:82:25:40:72:
                    35:47:e2:64:1d:aa:32:f8:5f:d6:a4:af:c3:61:44:
                    b3:aa:7b:84:35:26:9a:9f:71:b8:8f:fa:73:8d:8f:
                    b3:b4:d2:36:31:91:bd:25:0f:ef:26:c2:7b:9c:f3:
                    44:41:47:1a:a2:22:90:f9:0a:61:73:dc:8c:0e:c4:
                    35:b9:8f:be:df:ca:50:b8:c3:63:6a:52:2c:fb:bd:
                    62:34:d8:d2:22:a3:22:fa:0a:3a:8d:5f:bf:66:b9:
                    ba:a3:9b:67:07:61:b9:fa:b5:b6:a6:30:39:5f:88:
                    06:ff:11:58:ca:42:2a:d8:19:e7:53:cc:93:df:78:
                    ac:d5:58:5c:5b:31:68:c3:3e:c3:58:97:eb:98:a3:
                    4f:e8:ab:dc:61:66:4f:bf:48:52:2d:ff:00:c4:05:
                    7b:36:28:33:b6:4b:e9:7e:8e:46:69:d2:60:b3:15:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D4:A4:A4:53:1B:6F:4A:F2:F7:76:E4:8D:81:F7:4F:69:23:2B:E5
            X509v3 Authority Key Identifier:
                keyid:27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:d2:12:75:16:f8:d2:3e:71:53:93:91:61:97:03:dc:dd:
         b2:a8:87:2d:07:13:36:29:02:ee:95:4d:d4:3b:03:54:18:d7:
         90:19:f4:83:45:92:da:27:3b:07:cc:4a:51:43:53:ff:32:5f:
         d0:35:5c:63:af:13:22:fe:2e:ec:3c:97:91:30:79:d8:ff:32:
         42:b5:3d:ba:f8:e5:2f:fc:40:3f:1c:71:6d:46:61:4d:6e:22:
         30:1b:7c:50:a1:f6:f4:86:a9:a3:a3:98:e1:e0:5c:31:61:87:
         1f:3e:b4:85:07:06:f9:5a:1f:c9:88:f9:e1:63:61:52:9f:59:
         d9:af:c8:41:08:f0:52:7c:01:b5:a7:84:e6:d8:bb:6e:41:97:
         9e:f3:f8:f4:5e:ba:85:4a:97:7e:2e:8f:cf:f4:55:13:26:e0:
         b4:00:d0:b1:88:f4:c6:f8:4d:53:a7:5c:bb:fb:84:fc:df:b5:
         3c:58:5a:8e:3c:a5:8e:70:48:47:80:2d:17:4c:57:27:28:17:
         b0:3b:70:d1:33:54:bb:74:c9:96:56:d1:17:0b:29:bb:c1:cc:
         87:73:b2:c2:50:36:31:f9:d6:5e:86:cf:f9:fc:d8:10:55:6e:
         93:4a:47:1d:d3:f5:f7:29:42:b6:80:75:2b:85:43:8b:1d:de:
         e3:a8:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:31:58 2026 by rpki-client