Error: rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
File:                     DOoR1fD2WesQDyt_sejINrwlz5g.mft (raw, json)
Hash identifier:          elnnvCbq0HCaT019HtdFU+ayb7HkHQ3eut0odlD5zas=
Subject key identifier:   D4:F0:EA:BD:2C:ED:5A:73:36:80:9B:4C:FC:27:7F:66:4C:4E:4E:DA
Authority key identifier: 0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98
Certificate issuer:       /CN=F36C33BBAF/serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98
Certificate serial:       03F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
Manifest number:          03F4
Signing time:             Sun 25 Oct 2026 04:00:55 +0000
Manifest this update:     Sun 25 Oct 2026 04:00:54 +0000
Manifest next update:     Tue 27 Oct 2026 04:00:54 +0000
Files and hashes:         1: DOoR1fD2WesQDyt_sejINrwlz5g.crl (hash: Pu+vPO1FzYAPQgBRcsTjhy09uSyllQ0MTs88hy37JRU=)
                          2: 48BD0A7A14D811F09D2DBA0A6EB8BCC6.roa (hash: K8z2vSGpFFut3n7D7lisZcx7JDx1aJSflHUP/bhx0pg=)
                          3: 059E0E4AC59E11EEA53C71B7775412E6.roa (hash: ZFKITH+OchlrxbiwzeW9jzaBB9KK8U2j/qLB4RDTGvs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C33BBAF, serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98
        Validity
            Not Before: Oct 25 04:00:54 2026 GMT
            Not After : Oct 27 04:00:54 2026 GMT
        Subject: CN=6add7ef7-b529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:40:2b:a9:d2:96:51:96:7e:6c:7a:e7:b9:
                    8d:40:29:0f:bf:df:00:73:55:10:02:87:27:1d:26:
                    f7:c9:28:22:75:8e:c6:16:a6:04:6e:f1:26:f1:f6:
                    c7:80:bb:a7:7f:5a:60:93:d2:ce:05:67:45:db:db:
                    09:04:97:21:00:7e:74:dc:99:c0:91:bf:04:a9:55:
                    03:22:ef:2d:7c:70:98:b8:45:f1:f4:df:40:ba:5d:
                    63:de:8e:ab:f1:0e:5e:38:c2:3b:f9:1d:3b:a6:7b:
                    0f:d8:9b:d1:77:10:d5:dc:c9:d9:3c:c4:94:b7:ff:
                    20:66:cd:c3:f2:21:cc:3d:54:95:08:40:82:eb:92:
                    9d:62:27:20:6b:46:60:31:81:ac:9c:14:86:3b:25:
                    06:aa:11:de:c1:b6:88:72:66:6c:60:8c:6d:0a:21:
                    a1:87:7f:49:d9:bf:94:9a:01:da:37:89:ba:31:b9:
                    87:38:16:ab:9f:1e:52:a2:b4:c5:94:7a:7c:e9:50:
                    fa:5b:22:15:8e:82:e8:70:82:55:e1:bb:02:17:d0:
                    0d:a3:38:39:e2:29:9d:5d:10:1f:7b:35:d4:55:7d:
                    2b:e5:b6:b2:2e:b4:3b:e0:ba:6d:1e:82:95:b4:37:
                    7a:04:fb:3c:c3:31:82:75:4b:b1:8d:3f:73:bd:06:
                    ef:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:EA:BD:2C:ED:5A:73:36:80:9B:4C:FC:27:7F:66:4C:4E:4E:DA
            X509v3 Authority Key Identifier:
                keyid:0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d1:47:5a:32:20:5f:5f:c7:30:49:72:32:e8:ca:b1:bb:70:
         11:ff:b4:f2:f8:2c:d1:9e:3b:0c:6f:4a:68:f4:2a:9c:a0:79:
         05:b3:5d:09:56:96:8f:e5:d8:d7:db:41:3b:aa:1d:7f:65:36:
         ba:a9:51:44:97:78:2f:8d:b7:09:12:e6:6f:9b:5d:45:39:41:
         f2:e9:d9:39:14:e4:d5:e3:19:d9:53:ff:29:a5:a2:4a:b2:b7:
         da:33:c3:8b:de:10:40:5d:69:38:09:59:7c:7d:be:78:01:cd:
         66:c6:a3:63:d8:2d:4f:23:ba:05:34:8d:2d:ba:70:a2:46:cb:
         11:0d:3a:03:47:47:ee:07:b8:ff:0b:2e:39:32:5d:ea:9b:26:
         38:6d:90:3f:f0:ac:e4:c0:45:fa:3e:b6:38:58:d1:5f:f1:ae:
         83:81:6f:02:6c:23:39:5f:bd:3c:fa:be:3c:bc:28:6a:86:a0:
         22:57:cb:a2:95:6a:5e:97:d9:f2:73:b9:d5:a5:be:ed:ee:93:
         32:f9:31:99:9d:1f:05:29:9e:59:85:47:8b:19:59:ef:10:94:
         e7:21:f7:3d:0b:80:5a:2d:0d:7e:c6:b7:f5:2c:c1:5d:f3:e4:
         0f:86:96:d1:17:27:47:f2:bb:97:cf:ce:e3:5d:28:b0:3c:a0:
         b6:c3:43:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:55:57 2026 by rpki-client