Error: rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
File:                     VPGf2krwV1qRqtTk5vY1pk56j-w.mft (raw, json)
Hash identifier:          b2o302y7ylPfS9u5p88XYX5M9xPn/12MD4szjGpacIM=
Subject key identifier:   1C:9C:FA:D4:6A:F5:DD:11:55:C2:44:E3:BD:7B:76:73:0D:57:83:81
Authority key identifier: 54:F1:9F:DA:4A:F0:57:5A:91:AA:D4:E4:E6:F6:35:A6:4E:7A:8F:EC
Certificate issuer:       /CN=F36A6924AF/serialNumber=54F19FDA4AF0575A91AAD4E4E6F635A64E7A8FEC
Certificate serial:       0284
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VPGf2krwV1qRqtTk5vY1pk56j-w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
Manifest number:          0283
Signing time:             Sun 25 Oct 2026 04:46:15 +0000
Manifest this update:     Sun 25 Oct 2026 04:46:14 +0000
Manifest next update:     Tue 27 Oct 2026 04:46:14 +0000
Files and hashes:         1: VPGf2krwV1qRqtTk5vY1pk56j-w.crl (hash: QYMzrTBb479IZXig3n0aM3WD0fkYq6UzsRwUolwwcpM=)
                          2: 9343B656DE6511EFAF948D61762E951A.roa (hash: zDYsubxhkHYMHfjJPFrGHDpArkGFwI5Ms1TbXtuvEN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VPGf2krwV1qRqtTk5vY1pk56j-w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 04:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6924AF, serialNumber=54F19FDA4AF0575A91AAD4E4E6F635A64E7A8FEC
        Validity
            Not Before: Oct 25 04:46:14 2026 GMT
            Not After : Oct 27 04:46:14 2026 GMT
        Subject: CN=6add8997-b437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:67:e5:f1:5d:30:e6:95:4d:52:29:7d:47:
                    96:9e:31:99:fb:78:25:2b:f1:f7:62:90:7d:c0:2c:
                    1b:c2:43:69:0c:4f:d9:d1:e8:95:bf:09:87:db:fc:
                    ba:4e:3e:f6:a9:a8:82:29:1d:fe:07:86:36:eb:8c:
                    0f:d5:30:d8:41:ce:ab:cf:76:88:02:5c:96:2d:d5:
                    04:f9:0d:01:79:e1:8e:5f:6e:67:fc:5e:d5:b8:57:
                    6b:84:d6:5f:3e:ab:00:cd:a5:96:53:85:91:fa:b8:
                    3e:c1:12:54:88:99:03:11:20:67:d0:5b:f0:e7:4d:
                    c0:3e:30:b2:b0:f1:d7:fe:07:a1:b4:67:f7:b2:b6:
                    42:1f:64:d5:dc:ab:1a:0d:97:01:9d:5f:46:91:5c:
                    3d:ce:35:cf:55:af:59:e6:3b:53:14:a5:05:fb:8d:
                    04:8c:ef:e8:a4:b3:6a:75:87:0a:33:e1:db:01:b5:
                    60:4c:ac:f5:a4:b5:83:30:a1:b8:29:fa:dc:ec:79:
                    d2:44:7e:00:ef:12:06:fc:aa:ce:a4:27:8c:4a:4b:
                    de:71:c4:c6:5a:dd:c6:c8:bf:96:7c:ac:68:13:b0:
                    45:50:6e:15:4b:40:9d:f0:b0:95:63:51:00:32:71:
                    f4:94:f7:88:1c:d7:0b:e5:f0:6a:7a:99:21:a9:f7:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9C:FA:D4:6A:F5:DD:11:55:C2:44:E3:BD:7B:76:73:0D:57:83:81
            X509v3 Authority Key Identifier:
                keyid:54:F1:9F:DA:4A:F0:57:5A:91:AA:D4:E4:E6:F6:35:A6:4E:7A:8F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VPGf2krwV1qRqtTk5vY1pk56j-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e3:af:a1:5a:31:8c:83:52:9f:d0:bd:71:52:0c:8e:45:3f:
         57:d1:31:b1:ae:fd:6d:e4:07:27:3b:66:e1:90:e6:ce:01:ca:
         03:28:08:d2:2e:c1:18:46:fe:f6:93:06:94:be:b2:5a:5d:71:
         4b:fd:4c:07:83:89:e5:61:28:b7:b2:9e:c3:31:18:3a:02:33:
         c2:b9:db:1b:b9:af:4e:ba:82:a7:9a:01:03:21:5b:da:19:d8:
         ef:69:2b:e8:e9:a0:8c:8b:9c:b9:a5:3a:de:61:9d:82:88:63:
         85:5d:87:41:ac:d5:1f:aa:63:7a:8b:be:d0:83:6a:2b:03:a9:
         02:9f:20:4f:40:6a:c3:68:e7:3c:87:93:16:e6:8a:46:b4:25:
         22:e0:bc:2c:a8:c4:93:90:c7:b2:ce:a2:3c:52:e7:89:52:f9:
         ae:d4:be:ee:4b:4d:81:68:31:4a:41:2d:94:e0:bd:ae:fa:54:
         a2:88:6f:d7:53:73:b0:53:07:0a:66:85:d9:b3:97:ad:24:ff:
         fd:d4:28:a5:2e:77:95:a4:b1:b6:b1:d5:10:e5:1b:ed:11:24:
         60:8e:e9:c8:92:62:fb:7a:40:41:f2:bf:f1:4b:71:47:3f:3b:
         a0:05:50:5b:d8:89:9d:54:06:2c:93:9c:24:df:47:5a:c6:75:
         9c:64:ce:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:46:14 2026 by rpki-client