Error: rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
File:                     JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft (raw, json)
Hash identifier:          2i3ZDahV5MoYxSEUjtcYb8Gk4+BdhzNuJxTOBglhiB4=
Subject key identifier:   2B:2D:08:7D:C9:F0:8A:D0:85:07:67:B1:4B:7B:61:8B:93:85:4E:C0
Authority key identifier: 27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E
Certificate issuer:       /CN=F36AA6EDAF/serialNumber=27031675A295AFE3935D9F62261BD4868D144C4E
Certificate serial:       07FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
Manifest number:          07F4
Signing time:             Sun 25 Oct 2026 02:11:12 +0000
Manifest this update:     Sun 25 Oct 2026 02:11:11 +0000
Manifest next update:     Tue 27 Oct 2026 02:11:11 +0000
Files and hashes:         1: JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl (hash: eqSQ0yZ5cMeK40e4dPV5aHEwWCQhi4mVMPv4ulBurpI=)
                          2: 77EF4AC87B0811F19F8325B7CE1D38B0.roa (hash: P75TsDPm8L/KxrcaJrmC7dvS+DlJXvO9NiHTN0VALDE=)
                          3: 45D717A07B0811F1A193D0B6CE1D38B0.roa (hash: PgXaAXoHAwUJ4XhaIzjPD4VbiBjFRll+UqTQ6hEV2SQ=)
                          4: 1FFC4050D4D211EB8428B634F8AEA228.roa (hash: YxepH7+hLot/dgNBooYvnog3uH8tz5wlH0qu4u8Qo6E=)
                          5: F9D73EF2D4D111EB99268434F8AEA228.roa (hash: jO+1rjWEWMm+WY3oT+Y1Zmh3wgMMZTJ0o4Zk73LDsKY=)
                          6: A5363C324DF411EFB122684E762E951A.roa (hash: ivvBl4JvviLSTjgv3ZDij0GhU0YfxugCBNbi1Fs5qs4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA6EDAF, serialNumber=27031675A295AFE3935D9F62261BD4868D144C4E
        Validity
            Not Before: Oct 25 02:11:11 2026 GMT
            Not After : Oct 27 02:11:11 2026 GMT
        Subject: CN=6add6540-3042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:71:e5:13:bc:7d:3e:8c:c7:f3:94:0f:8c:
                    6e:a2:d6:8f:1e:f5:10:5a:b8:a9:1d:37:ed:4c:99:
                    d8:0a:ef:8a:88:c9:a6:c6:76:83:74:61:dd:a8:ad:
                    b3:4d:89:8d:df:85:31:81:66:bb:d2:6d:f5:6c:a9:
                    6c:95:b1:b5:98:50:e7:25:0b:01:11:32:d4:14:40:
                    d8:3b:6b:0a:36:80:87:43:85:45:26:2b:82:fc:e5:
                    fd:c7:89:7c:f2:17:11:4b:27:d9:66:f1:e7:3a:23:
                    02:87:a4:25:0b:26:3d:62:d1:e6:1b:68:7a:32:0c:
                    d4:e2:8c:cd:6f:33:37:4c:39:d6:ac:94:61:ee:bc:
                    c8:81:81:bc:ba:c7:9a:9b:a4:a3:2c:78:68:45:1d:
                    04:ff:4b:98:64:ff:46:9c:1d:b9:a4:62:6a:8f:bd:
                    1a:fe:20:4f:2d:87:ce:2e:f7:4c:7f:ca:99:a2:a8:
                    78:2f:ac:54:0d:91:09:fa:c9:84:e0:8e:c7:8e:51:
                    11:2f:b8:9d:14:2b:80:1a:a9:c0:a4:0a:a7:41:f8:
                    2c:ee:d1:15:e3:7d:48:96:1b:6f:ea:d8:1f:71:dd:
                    f3:65:fc:8e:26:e3:49:cf:79:c8:8e:01:20:be:31:
                    44:bf:16:d7:15:7c:48:8a:f9:fc:27:18:10:84:5f:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2D:08:7D:C9:F0:8A:D0:85:07:67:B1:4B:7B:61:8B:93:85:4E:C0
            X509v3 Authority Key Identifier:
                keyid:27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:fe:08:df:8d:d0:06:be:7e:8b:e0:17:59:ee:9f:e6:96:
         5b:78:d8:51:25:0e:ae:c7:5d:4c:d9:1b:3b:0f:2d:66:00:7e:
         ee:52:d4:91:b7:ce:2c:ee:5c:62:01:85:ed:ce:e7:8e:94:b0:
         cd:5a:ae:a1:8d:66:e0:68:76:4a:c8:b3:a8:a3:c0:32:77:0e:
         be:4c:05:fa:0d:20:69:e4:87:38:a0:3a:1d:b6:6e:fc:d9:ee:
         2c:4b:fe:d3:38:ae:a7:49:16:3f:0c:be:72:25:e8:30:d0:b1:
         02:24:ff:ee:f0:2b:d1:c8:5c:74:7f:98:4b:52:e6:c8:56:bc:
         97:09:49:c2:92:1a:5c:e0:46:a5:74:77:be:c0:f9:f9:17:52:
         16:17:d4:bd:08:ad:58:86:d3:7d:50:87:52:9e:43:bc:73:9e:
         27:c2:30:93:b5:d3:2a:75:4b:1f:89:e6:f0:e3:73:04:79:44:
         b8:32:36:b8:af:56:25:7c:b0:5c:51:e8:b9:32:60:ba:84:9a:
         33:fa:34:60:7b:0e:89:8a:7e:36:78:ac:08:b2:24:f3:97:00:
         73:3f:cd:b2:8c:dc:9e:37:6a:87:69:12:98:04:b4:cd:af:87:
         68:36:85:67:32:d9:55:49:e2:e0:a5:d8:7a:9d:68:49:91:43:
         08:a2:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:56:37 2026 by rpki-client