Error: rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
File:                     wD_daU9RquOPBRRWEBYXxW_YnEo.mft (raw, json)
Hash identifier:          vTRmlfnqhRZvNa2AvpA+b9BmQ+IH0r9IY2rUdApkoYQ=
Subject key identifier:   E1:A5:7C:2D:28:77:39:19:24:DC:DB:9E:9C:E8:F1:C3:C2:4E:C5:E6
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Certificate issuer:       /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial:       05E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
Manifest number:          05DC
Signing time:             Mon 26 Oct 2026 03:04:54 +0000
Manifest this update:     Mon 26 Oct 2026 03:04:53 +0000
Manifest next update:     Wed 28 Oct 2026 03:04:53 +0000
Files and hashes:         1: wD_daU9RquOPBRRWEBYXxW_YnEo.crl (hash: FTBVdUoAFm1roo7wFm5F8MGP11+QgI+7Epa7d9aCb+w=)
                          2: F998A4B4A68111EF83490D8F762E951A.roa (hash: gRJbn7TUJdVqzLN1VGDb0fJr1Lg413PCOuxRtaJJTFU=)
                          3: 49293CEC8C1711F1B40012BDCE1D38B0.roa (hash: UGIZ11vI+AloPkuFQufQtNgRRaZ7czAPvHXq/fiHA+E=)
                          4: F65069468C1611F19B4A1EB9CE1D38B0.roa (hash: PlId2XWtYjHJ/3qsp/QHOEHdxAmP0q8lXCpxMSmNdfg=)
                          5: 6069E9FA190611EFAAC79456017001B1.roa (hash: qaWE3oZP6UDJiJvSf/qTz0gA6Weypu8kgh11g/Q7Yjc=)
                          6: E621A12E190511EF8A909B51017001B1.roa (hash: /esz7AIhM5t30ub8s0aOAXHtnxsPkykRU/r4aTbVw0Y=)
                          7: 6DC5038018FE11EF8B80B516017001B1.roa (hash: prIb+/59lGAY5m7ee/w0QfgAEg0BFXE2ZtOJctQ1wsI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698DD0AF, serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
        Validity
            Not Before: Oct 26 03:04:53 2026 GMT
            Not After : Oct 28 03:04:53 2026 GMT
        Subject: CN=6adec356-9b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:62:0e:43:86:ef:31:8e:ee:23:4a:a1:b0:
                    93:91:05:23:0e:4a:af:61:1c:92:35:49:0c:ad:13:
                    d2:9c:58:79:61:bb:03:55:a5:4a:27:47:b7:b7:60:
                    7e:de:65:c7:a9:01:29:c3:f4:51:6e:15:91:90:d1:
                    e6:d1:76:42:1c:c3:52:f0:8c:f4:e2:71:55:0b:27:
                    80:5d:9e:74:54:2f:a7:a1:a5:b8:fb:8a:62:ea:17:
                    69:0f:55:5d:64:76:90:23:d5:4e:5a:25:bf:6e:b8:
                    f5:61:f9:9b:7f:14:25:e6:86:cb:9d:be:bf:88:b3:
                    ea:4c:3b:bc:06:58:48:98:72:d8:c4:64:b2:a6:74:
                    12:69:8f:13:63:15:f1:a0:82:1d:be:78:d3:cd:c7:
                    e4:f8:15:39:f3:50:b1:4a:d0:57:32:23:f6:54:73:
                    b4:d6:47:93:1b:5f:1e:fa:b7:f3:5e:fd:f1:58:59:
                    78:a3:d2:5f:02:a7:2a:fd:1f:f3:48:4a:24:91:e9:
                    95:27:43:88:ce:68:bc:55:25:2e:63:5e:c9:41:7a:
                    79:5e:6b:22:f8:44:f2:1f:4d:cf:fd:ba:d3:75:42:
                    b7:9e:56:79:c9:5a:99:eb:7a:06:a5:b5:d4:4c:b0:
                    cc:d3:d0:35:ce:fe:2c:d2:1e:93:57:bb:54:4f:bd:
                    44:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A5:7C:2D:28:77:39:19:24:DC:DB:9E:9C:E8:F1:C3:C2:4E:C5:E6
            X509v3 Authority Key Identifier:
                keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a5:75:e8:91:76:be:14:40:6e:b6:cc:3d:3e:34:9d:3a:f0:
         1d:02:bf:e3:c8:43:ab:ec:c5:fc:c7:d7:67:a2:2c:d2:2f:60:
         96:a8:b0:3e:ac:36:11:2b:91:b4:05:cc:30:e8:ec:83:ab:50:
         09:f7:86:20:18:03:92:1c:bf:97:25:85:53:94:12:ba:b5:59:
         06:19:0d:19:a1:ce:e9:03:94:13:17:c1:d3:30:68:ba:21:20:
         22:30:4b:a0:35:9d:49:f0:43:f4:d6:23:d8:fa:b8:d1:0b:98:
         03:de:47:92:32:7c:2b:84:ec:4c:dc:26:de:6e:0f:5d:94:af:
         21:99:6d:93:db:08:57:35:41:28:c5:6e:8a:fc:a7:b7:bf:bb:
         d4:9a:b9:a9:fd:f1:07:b3:2c:ef:37:55:3b:f6:94:7f:cb:7c:
         95:d7:54:74:ed:ef:4d:11:d1:4a:c8:a1:67:3c:e4:86:d9:52:
         09:33:2e:e9:f9:89:6b:6e:30:c0:f8:13:f4:0c:eb:c8:b8:30:
         34:56:5e:08:c1:0a:76:2d:ab:eb:23:22:a3:5d:6b:0f:67:62:
         ae:48:99:6b:a0:db:76:2b:69:3d:c6:ff:e6:e2:67:31:2f:7a:
         3d:5a:c4:1b:09:10:9a:44:be:da:f7:f7:04:2d:59:e6:c0:1a:
         77:ad:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:53:54 2026 by rpki-client