Error: rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
File:                     VCiBspPW4uKh8hlSyLwDISbuu8k.mft (raw, json)
Hash identifier:          QGJPavx5KRqywX0HABkYutuiCWtLnFryCYznQoUzxoU=
Subject key identifier:   D8:15:78:C5:F2:2E:22:2A:D7:D0:D8:C9:73:5A:63:80:CB:AE:5E:34
Authority key identifier: 54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9
Certificate issuer:       /CN=F36B52A6RI/serialNumber=542881B293D6E2E2A1F21952C8BC032126EEBBC9
Certificate serial:       0ABC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
Manifest number:          0ABB
Signing time:             Thu 10 Sep 2026 01:18:52 +0000
Manifest this update:     Thu 10 Sep 2026 01:18:51 +0000
Manifest next update:     Sat 12 Sep 2026 01:18:51 +0000
Files and hashes:         1: VCiBspPW4uKh8hlSyLwDISbuu8k.crl (hash: rb/KQs0VFZVrPsm7qX0mSN3ydHAvWu0KVLxflwtbB5M=)
                          2: 6B867142864C11EF92D39262762E951A.roa (hash: q/5PVa0Y5jiVYanPXInC3+mN2koWYpdxJKq6XS413jQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
                          rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2748 (0xabc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6RI, serialNumber=542881B293D6E2E2A1F21952C8BC032126EEBBC9
        Validity
            Not Before: Sep 10 01:18:51 2026 GMT
            Not After : Sep 12 01:18:51 2026 GMT
        Subject: CN=6aa2057c-7eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:d7:82:0c:69:5d:97:c1:18:67:ec:19:0e:
                    f8:1d:07:ef:e0:6e:ef:c6:9d:d6:6b:10:53:6e:70:
                    b1:26:2f:bb:cb:77:c3:3c:d8:66:5d:25:49:78:58:
                    fc:75:82:ea:1f:da:0f:4f:5e:bb:8f:d6:5a:1e:a1:
                    6f:ef:fe:42:16:a5:46:c7:61:da:fc:27:d3:be:7b:
                    d9:24:c3:a2:bc:41:d1:1a:8e:c1:7f:c9:c9:c6:0b:
                    6b:0b:c7:3f:08:95:4e:3d:ee:ed:a0:03:7f:9c:7b:
                    0a:b0:b5:7f:ab:58:0a:c5:a1:e6:d0:cc:23:8d:9c:
                    4e:32:10:71:f2:d5:c3:59:a8:dc:35:fb:10:2a:0b:
                    c3:1a:0f:cb:b6:14:ca:0a:48:1a:30:e1:1e:76:0e:
                    ff:0a:a3:67:dc:8b:69:ba:7c:95:68:70:ff:82:36:
                    74:c2:02:a6:b0:c9:f9:d8:53:a8:28:1a:fe:f3:e1:
                    03:5b:3f:70:ad:47:b5:99:3e:91:eb:bc:fc:79:88:
                    93:a6:cd:0e:06:99:44:82:8a:ea:5d:54:69:49:74:
                    a0:0e:ee:bc:d6:e6:ad:53:df:9a:6b:2d:69:99:e3:
                    99:fd:cd:03:96:04:a8:78:cb:db:89:bb:af:fb:9f:
                    87:43:4d:f2:0e:a4:3e:f5:bb:ad:b5:21:50:32:b4:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:15:78:C5:F2:2E:22:2A:D7:D0:D8:C9:73:5A:63:80:CB:AE:5E:34
            X509v3 Authority Key Identifier:
                keyid:54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0f:5a:d1:e7:52:f8:e2:53:01:c4:0b:7b:b2:df:46:65:0f:
         d4:c7:ff:f8:44:3b:71:a1:0d:6f:66:bf:37:50:60:20:a8:2c:
         c3:3b:27:99:78:93:20:53:69:14:b7:92:b6:b7:b0:02:91:58:
         ce:fb:df:5e:f6:dd:2d:8a:8e:38:14:95:59:60:cf:45:75:5e:
         eb:51:a4:2f:d4:09:6a:14:00:16:fd:f7:da:d9:8f:2a:2f:58:
         ec:de:2b:96:d6:00:3f:8b:8a:78:d9:a0:87:4a:2f:0b:9b:d5:
         cd:d8:b5:56:f5:74:b3:93:d9:f7:15:97:5c:bc:b5:c0:db:b7:
         c0:8d:b1:8f:c7:60:9d:c0:e0:4b:78:48:7b:56:4e:de:03:a9:
         85:ab:ae:b0:d7:a9:ad:b1:59:a8:0c:c1:79:da:ce:ed:b7:94:
         da:e4:cd:2a:cb:a6:e0:c4:0c:2e:18:56:3d:41:24:5a:fc:d3:
         cf:bd:ee:9f:37:32:d4:5e:ba:c2:aa:97:38:86:c2:a7:9a:e7:
         43:ff:cc:c2:1a:6a:c3:0a:ba:d5:bd:e4:40:da:d3:3d:6d:46:
         c4:93:df:59:e9:95:1d:ce:e2:49:05:18:0d:6a:8c:a4:95:4c:
         0a:a1:91:02:db:58:54:72:cc:9f:e0:48:05:db:98:66:99:b2:
         3c:38:6b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:29:19 2026 by rpki-client