Error: rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft
File:                     vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft (raw, json)
Hash identifier:          edhEXnECA5gen+UiespvY4DO64Htszi9jOv6sRj4iI8=
Subject key identifier:   ED:EB:BB:D2:61:D9:DC:62:30:77:9A:0D:93:81:27:98:93:06:CB:18
Authority key identifier: BD:8E:D1:79:47:96:FA:CD:05:AB:8A:B3:6E:81:82:81:89:83:41:78
Certificate issuer:       /CN=F369C0BEAF/serialNumber=BD8ED1794796FACD05AB8AB36E81828189834178
Certificate serial:       0997
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vY7ReUeW-s0Fq4qzboGCgYmDQXg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft
Manifest number:          098F
Signing time:             Thu 08 Oct 2026 01:44:14 +0000
Manifest this update:     Thu 08 Oct 2026 01:44:13 +0000
Manifest next update:     Sat 10 Oct 2026 01:44:13 +0000
Files and hashes:         1: vY7ReUeW-s0Fq4qzboGCgYmDQXg.crl (hash: lz9XfLtcqoa1d7ZY+lD+41ORYMs+YPtj06rTzApD03M=)
                          2: 0C6C3F5EB70411EB9D753576F8AEA228.roa (hash: +PFAfP8Xt+CTgkJYHoN92NGejp4nVmF+Cp6+W4LzC3w=)
                          3: 31307A26898611F1BE867E0CCF1D38B0.roa (hash: BOIAofFG8NRMWZRR4w3+ozWJOpLT5qmXSLPmklZDHuI=)
                          4: F5F55F64B9A911EBA799CD74F8AEA228.roa (hash: CxWzYNFUIcQ5tttsLCb4NWj7+HYKhAKh4WcFTusbCIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vY7ReUeW-s0Fq4qzboGCgYmDQXg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 01:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2455 (0x997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C0BEAF, serialNumber=BD8ED1794796FACD05AB8AB36E81828189834178
        Validity
            Not Before: Oct  8 01:44:13 2026 GMT
            Not After : Oct 10 01:44:13 2026 GMT
        Subject: CN=6ac6f56d-8b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:a4:bb:e7:18:45:f2:c1:c8:78:ee:c1:f6:
                    b8:e0:5b:ab:64:80:0c:43:c1:c9:09:6f:21:e6:df:
                    b8:62:01:a0:69:f3:19:20:99:3f:d8:90:f6:ed:00:
                    70:8e:b6:5d:78:70:a6:da:7c:9f:25:a5:56:f9:46:
                    08:4f:1b:9e:4b:6a:e0:27:95:5a:f6:30:47:40:7e:
                    ff:92:0e:33:89:41:81:df:89:5c:a0:53:28:a9:b2:
                    c1:12:01:3c:86:c2:76:66:21:7d:4e:66:72:8c:20:
                    b8:26:b6:9a:51:51:54:14:b4:4a:c3:17:81:95:55:
                    55:a9:f6:ee:a2:8c:9b:6b:ce:c7:aa:82:51:e6:6b:
                    c6:b2:d2:42:4a:f4:de:98:ee:8c:08:25:dd:68:5f:
                    83:7d:11:c5:40:b2:58:5e:29:7c:54:a9:40:dc:ec:
                    b6:13:7d:8a:13:52:be:aa:fe:95:49:6c:8d:f2:17:
                    a0:69:6a:c4:79:ed:1c:59:b6:e3:67:d7:08:c0:4e:
                    64:5a:a7:5c:b7:d0:2a:61:2f:1c:04:34:39:c7:f4:
                    72:ee:b3:9a:05:97:46:9a:5d:b7:b0:49:0b:09:81:
                    5d:9c:98:7b:98:2e:ec:ed:fe:d9:43:51:c2:fb:23:
                    e7:5a:15:f8:5c:69:f5:15:b0:7b:c2:14:01:1e:10:
                    a7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:BB:D2:61:D9:DC:62:30:77:9A:0D:93:81:27:98:93:06:CB:18
            X509v3 Authority Key Identifier:
                keyid:BD:8E:D1:79:47:96:FA:CD:05:AB:8A:B3:6E:81:82:81:89:83:41:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vY7ReUeW-s0Fq4qzboGCgYmDQXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:82:6c:4f:86:c4:2e:73:ed:d8:03:ce:73:86:7f:92:ac:
         a9:ef:60:51:fb:b7:e2:33:7d:d5:79:ea:c4:d8:4d:13:05:c0:
         e0:fe:9f:7a:03:fe:2e:d2:06:85:71:37:ee:15:eb:9d:88:1b:
         02:d9:bc:d8:9a:ad:28:46:ee:61:8d:de:bc:b1:6a:6d:64:fc:
         e7:ba:38:ba:78:ca:94:f4:cc:37:cc:a6:c4:9c:49:f2:42:33:
         0b:2a:76:be:0f:07:c9:78:13:1f:6e:46:e9:d5:25:75:b7:ea:
         8b:47:65:d1:7f:7e:4b:49:e7:91:79:7d:18:f7:13:12:ee:19:
         53:32:b0:63:19:0d:0f:8e:b7:d4:bd:3f:8b:9f:6e:ff:3d:43:
         3b:d2:30:e7:0a:1a:51:a0:0a:11:e8:19:6a:0f:b2:c8:40:95:
         b4:12:0f:8b:e3:cf:29:66:ab:e6:e4:5c:62:33:c6:c1:32:94:
         aa:8c:64:68:8f:44:ff:7d:5a:e3:54:33:40:eb:4b:a9:e3:d9:
         39:a9:cd:25:1e:74:51:c4:85:fc:5b:55:53:4b:e7:c7:71:71:
         90:e0:af:7a:3d:b8:42:92:66:a6:ae:df:99:57:a2:cc:d7:80:
         6c:78:3f:54:0d:2a:f5:b6:fe:f2:1e:f3:49:ae:09:6b:bf:e3:
         b9:4a:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:39:41 2026 by rpki-client