Error: rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
File:                     xE0y1JF8eCux2zJK4FcIfAY8cLk.mft (raw, json)
Hash identifier:          lk4t194cstuhkuLQSbdKfIO/tjiMdz9TqYGxEwFGOOI=
Subject key identifier:   99:45:C5:7E:55:4D:A2:D3:AE:1B:6E:7C:59:A6:2E:7E:31:D2:B1:34
Authority key identifier: C4:4D:32:D4:91:7C:78:2B:B1:DB:32:4A:E0:57:08:7C:06:3C:70:B9
Certificate issuer:       /CN=F36A94BDAF/serialNumber=C44D32D4917C782BB1DB324AE057087C063C70B9
Certificate serial:       E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
Manifest number:          DE
Signing time:             Sun 25 Oct 2026 05:32:57 +0000
Manifest this update:     Sun 25 Oct 2026 05:32:57 +0000
Manifest next update:     Tue 27 Oct 2026 05:32:57 +0000
Files and hashes:         1: xE0y1JF8eCux2zJK4FcIfAY8cLk.crl (hash: oeBQVIWLrXh5YRP1UWD2Tg6COU/xDHlNR4Ehnr17AH8=)
                          2: B369AC28381F11F18DCA46B3CE1D38B0.roa (hash: YZtyT6PDtXJ4qALzjjOrC5/HQfvWf0WK/SUWLEjJyYY=)
                          3: ED340E44376B11F1B04FA1E2CE1D38B0.roa (hash: 4ObZ7bDEQ2jHZa0f9dc6g+W1O0wVtCUpYVVLDLjdphU=)
                          4: 5640FC4E382A11F1A6805EF0CE1D38B0.roa (hash: o5aNp5VzCf07pR6zEaALvtNhU23Ddi97zee6Hwc02BA=)
                          5: 37A037F0376711F196F2C2C7CE1D38B0.roa (hash: s4mQ/4xdr4CVChAjeed6+fk5zrUn/6l56aaZ5pNmYt4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A94BDAF, serialNumber=C44D32D4917C782BB1DB324AE057087C063C70B9
        Validity
            Not Before: Oct 25 05:32:57 2026 GMT
            Not After : Oct 27 05:32:57 2026 GMT
        Subject: CN=6add9489-320a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:3a:6d:ec:05:75:db:81:5d:fd:b0:8d:88:
                    2f:89:23:fc:d0:d5:22:b1:fc:90:10:c4:55:10:f4:
                    6d:ff:0f:7d:ef:70:14:6d:2f:62:94:92:08:07:ca:
                    5f:9c:ec:10:1a:43:71:a2:8b:a2:bf:c9:4d:f6:c9:
                    0e:10:ae:c3:bf:9a:3e:bd:40:57:0d:d2:7e:73:a0:
                    d7:f5:99:3b:42:34:c0:87:c3:f2:09:18:1c:9f:6b:
                    9e:c5:ff:c4:b4:26:44:f9:90:9a:5f:0f:06:a2:ce:
                    17:42:4e:5d:3e:23:de:c7:04:b7:94:dd:5c:7f:8e:
                    4e:90:4c:8a:88:2a:9f:74:84:f5:fb:c4:55:49:ae:
                    0c:6d:41:ec:a8:c0:b8:0d:e4:ee:70:00:f0:d3:6a:
                    8e:57:97:4f:a6:f9:89:b9:a9:11:c1:12:c5:8d:23:
                    1d:32:18:67:8f:d8:05:52:dc:18:23:a4:05:b2:8d:
                    45:80:8b:a6:1a:05:4f:2c:c6:c2:26:ff:7a:f5:3f:
                    7e:ca:86:16:e6:d4:fc:47:ab:78:04:95:ca:c7:a4:
                    87:4c:cd:09:2f:59:88:fc:82:b4:f6:14:60:1a:40:
                    f4:b5:12:b5:eb:76:67:9e:66:60:b4:48:f5:2a:54:
                    e3:9a:6b:47:9f:5e:68:73:49:b1:3d:ec:5b:a6:4f:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:45:C5:7E:55:4D:A2:D3:AE:1B:6E:7C:59:A6:2E:7E:31:D2:B1:34
            X509v3 Authority Key Identifier:
                keyid:C4:4D:32:D4:91:7C:78:2B:B1:DB:32:4A:E0:57:08:7C:06:3C:70:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:d1:1a:51:0f:c4:f0:26:ab:e2:5c:c6:6d:87:6d:67:86:
         dd:44:66:34:1d:74:47:c5:b4:3f:0a:96:a7:f8:a4:9a:00:b2:
         0a:55:a5:33:79:a1:d0:58:ea:88:f7:b2:7b:82:f4:47:bb:8e:
         e7:b3:5a:1d:14:46:2c:3c:f0:8b:13:85:5f:4e:7e:27:bf:3f:
         bf:bd:19:56:d2:65:5e:fa:e6:2b:99:97:bb:3b:95:22:35:9b:
         ec:f4:68:30:b7:c7:a8:5c:10:0d:7e:e0:07:be:e0:66:55:46:
         34:73:22:9e:ff:e1:51:73:9d:19:67:4b:b0:8b:c5:61:9a:6d:
         2b:22:a5:5c:74:d8:df:3c:83:b6:83:81:97:72:71:4c:c9:b1:
         2c:04:40:55:0d:1a:10:ec:68:9e:62:7f:25:b7:8a:d6:6c:10:
         d4:ef:67:4b:a5:33:67:70:80:f7:8c:34:c2:1a:57:a9:0d:d3:
         a8:21:12:53:fb:9f:fb:8c:11:95:8a:fc:eb:87:8d:79:7b:a2:
         55:e1:4b:fd:77:b4:cd:91:ac:71:4b:61:dc:04:24:64:ef:db:
         f8:78:a9:2c:78:1b:c3:66:39:56:1e:0c:f5:5d:1f:f1:18:dd:
         cf:dc:17:72:07:03:57:44:aa:47:3e:21:94:10:11:05:4b:fa:
         7f:8f:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:02:16 2026 by rpki-client