Error: rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
File:                     Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft (raw, json)
Hash identifier:          V5nYz3WSpgCKR/b+L+3ESHF4QYMNbTwvJ9e6ksD0+As=
Subject key identifier:   25:6B:F5:B5:C9:AB:18:11:51:72:47:4C:A4:BD:A6:5A:81:5D:68:2A
Authority key identifier: 67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
Certificate issuer:       /CN=F36AA788AF/serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Certificate serial:       0610
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
Manifest number:          060E
Signing time:             Sun 25 Oct 2026 02:57:19 +0000
Manifest this update:     Sun 25 Oct 2026 02:57:19 +0000
Manifest next update:     Tue 27 Oct 2026 02:57:19 +0000
Files and hashes:         1: Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl (hash: wvM8CmJdo0v/fqcTrQeNABKrHaRE6QwiRMRn4ei2jI8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1552 (0x610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA788AF, serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
        Validity
            Not Before: Oct 25 02:57:19 2026 GMT
            Not After : Oct 27 02:57:19 2026 GMT
        Subject: CN=6add700f-a8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:ac:de:50:af:9f:ee:81:e4:71:6d:03:03:
                    24:41:84:b7:d3:5a:a7:9d:c3:10:a9:1e:3d:0f:a7:
                    ab:07:5e:63:36:b0:e7:89:11:91:f0:35:d2:7b:1b:
                    f3:61:ff:01:26:4f:b9:f4:68:b5:8a:28:dc:c9:31:
                    25:50:2f:22:4d:3f:59:7c:d9:a6:62:e4:dd:77:42:
                    67:8a:40:00:4f:49:55:0c:a6:49:b2:d4:3a:37:44:
                    dc:c5:d0:f8:9f:c6:5e:a5:42:61:aa:28:9b:0e:30:
                    0e:60:e0:30:32:f1:2f:7a:41:89:c0:a9:0d:e8:d6:
                    4e:11:ca:01:db:c8:da:0a:3e:a1:21:8d:f2:83:78:
                    3c:40:fb:16:1c:79:46:23:f2:5c:df:45:78:1c:c1:
                    7f:30:94:67:7e:f8:c6:c5:14:84:08:f1:62:10:63:
                    99:0d:35:1c:89:a5:07:6e:45:c6:95:39:29:48:ea:
                    e9:80:96:9c:fa:7a:51:42:6f:aa:8e:f6:0b:80:5a:
                    b6:d2:1c:6d:7a:42:0e:27:90:ae:12:24:f1:eb:3e:
                    a5:62:f1:e6:32:e1:03:45:76:b3:cc:02:f4:99:f3:
                    66:40:06:c0:50:91:35:ce:7d:d2:87:2c:62:ae:26:
                    e3:c9:3e:8b:c7:5b:04:d4:f2:14:12:8a:a1:a4:3e:
                    ef:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6B:F5:B5:C9:AB:18:11:51:72:47:4C:A4:BD:A6:5A:81:5D:68:2A
            X509v3 Authority Key Identifier:
                keyid:67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:95:ff:a2:15:f1:ad:a6:f2:96:1a:e6:83:d4:5f:ea:c6:f0:
         90:41:05:ec:12:cb:8f:3c:77:71:39:ae:d3:4d:85:b8:69:28:
         1d:33:36:03:ec:6a:c8:39:33:81:cc:5e:08:b8:46:5e:9c:9a:
         82:bf:55:34:2a:cd:cc:54:d2:1e:7f:b3:b8:0f:52:1e:a5:b9:
         5f:31:a5:fb:f9:2e:74:59:55:79:0c:ee:d8:63:9f:f9:8b:8d:
         87:38:05:17:ea:ec:91:4f:05:3c:3e:d1:b5:06:b8:41:0d:17:
         3a:99:e2:44:be:e4:71:bd:e4:40:6f:ef:aa:06:4d:36:c6:00:
         e7:11:ed:be:3d:5b:d6:64:3f:da:7e:b9:a1:53:03:3d:1a:5d:
         cf:3f:d3:30:be:17:0b:ae:c2:c8:f6:ed:90:fd:c0:13:45:c0:
         00:4a:62:8c:64:d4:46:75:e0:fe:c6:b6:ac:91:5b:25:fc:f6:
         cc:cb:e5:da:2b:39:52:1d:5d:ef:84:9c:b4:be:c4:05:df:d8:
         03:bd:d4:3b:73:93:2e:30:ae:0f:c8:b0:fc:73:f5:31:ed:bb:
         6f:a8:d7:f2:5b:2c:01:51:c7:34:32:a4:dd:51:e5:fc:d8:0b:
         b3:7a:93:fd:ea:92:77:df:ec:b3:ea:2d:36:f8:46:02:8b:df:
         26:92:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:04:52 2026 by rpki-client