Error: rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
File:                     gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft (raw, json)
Hash identifier:          nqP9VmJxlhpYSG4YwGzimEsABXoBYjAKSa8+gX2uQts=
Subject key identifier:   74:DE:60:DB:D6:6A:98:64:51:4C:8D:95:E1:58:6B:9D:F4:10:B4:9C
Authority key identifier: 81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
Certificate issuer:       /CN=F36BE2EDRI/serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
Certificate serial:       0590
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
Manifest number:          058D
Signing time:             Tue 27 Oct 2026 03:09:17 +0000
Manifest this update:     Tue 27 Oct 2026 03:09:16 +0000
Manifest next update:     Thu 29 Oct 2026 03:09:16 +0000
Files and hashes:         1: gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl (hash: WIcPRU3mabZGMEkDYUVZIj2yvF6j/WwsJ+tv9mfadvo=)
                          2: 36842E6C930B11F1964414FCCE1D38B0.roa (hash: xm0/INcnvqpioHRaQkmrxZd0pJ8+9E3Ylz2YfMXkiec=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                          rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424 (0x590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDRI, serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
        Validity
            Not Before: Oct 27 03:09:16 2026 GMT
            Not After : Oct 29 03:09:16 2026 GMT
        Subject: CN=6ae015dd-8107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:28:74:70:d5:cf:90:8d:1a:18:b3:45:6e:
                    b8:4d:36:b8:f8:00:f1:04:ac:fa:38:eb:bf:6d:74:
                    28:42:af:ff:70:de:03:80:22:d0:1f:03:1c:13:5a:
                    c0:9d:7a:6d:82:59:3d:68:54:8f:47:f4:9c:ee:32:
                    bd:d4:fd:61:ca:45:09:3c:47:7b:d7:56:d0:31:77:
                    90:e5:ac:e0:6b:f3:91:38:26:1f:ee:c2:09:37:5d:
                    3f:a0:df:02:64:7e:11:8d:75:b6:63:97:93:c5:3a:
                    af:2b:6d:6d:4b:dd:3e:05:3d:d7:5c:8d:5f:46:0a:
                    63:49:a4:07:97:e2:df:c1:e8:6c:42:00:a3:3f:e0:
                    bc:83:36:b0:9c:78:e4:8e:81:d6:ef:05:9a:9d:dc:
                    2b:bd:5f:c0:29:8b:9a:07:9c:0e:50:ae:68:e7:33:
                    1f:b3:fb:64:26:1f:d9:54:ac:76:94:08:ec:ba:83:
                    24:70:39:96:48:23:f5:0a:2f:96:9e:47:cf:d0:cf:
                    7e:b4:16:a2:42:a2:82:99:27:56:72:f9:a5:3c:3f:
                    02:b8:8f:cc:0c:98:5d:f0:f2:e0:65:c6:21:b0:38:
                    8f:a0:0a:9f:84:80:b3:76:5f:89:1d:7b:b5:f7:bb:
                    c8:5e:f2:c4:9a:8d:66:1f:8e:65:71:51:64:31:7d:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DE:60:DB:D6:6A:98:64:51:4C:8D:95:E1:58:6B:9D:F4:10:B4:9C
            X509v3 Authority Key Identifier:
                keyid:81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:bc:1e:12:bc:b1:f1:fc:1c:f9:aa:9e:94:94:0d:d0:83:22:
         78:98:b4:59:d6:9d:1a:73:43:b3:01:d4:1b:c5:d7:d8:2d:4c:
         65:33:4b:db:0a:cb:0f:cd:16:ee:44:d9:43:2d:1e:c3:aa:17:
         f0:96:cb:12:ee:c3:b1:b1:1e:25:61:6f:47:1f:e6:b9:35:e1:
         7e:fe:54:d4:fc:ec:85:2b:e3:ba:c8:82:67:17:a0:78:09:53:
         f3:b3:43:cf:eb:1e:40:0c:92:5c:cf:12:fa:52:e5:30:f0:36:
         ba:f0:a9:59:47:60:2c:22:2c:6c:4e:14:d3:4f:01:2e:28:8a:
         4c:f5:7b:78:e1:a6:a4:af:fb:c7:c5:e0:df:a3:b6:30:b5:bd:
         d8:0a:ff:a9:09:da:fd:fd:00:3d:5e:9d:fb:60:c2:05:8c:fa:
         a3:27:c3:40:27:e9:0c:8a:09:9f:58:99:c5:10:92:43:87:d1:
         0f:7b:fb:22:c1:d0:b0:36:ff:2b:91:09:8e:40:20:2f:05:67:
         52:95:f0:eb:3b:54:8b:e4:9c:fa:1e:21:9d:85:95:fa:ae:b4:
         d9:14:a0:3e:0c:52:aa:e3:27:c3:04:41:28:95:a3:81:a7:4c:
         cd:90:0b:93:96:7b:a4:f7:47:1d:d6:46:c0:22:9b:26:09:17:
         1b:05:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:43:47 2026 by rpki-client