Error: rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft
File:                     awzWxO1x4Omxb2jpd6u1HcouckQ.mft (raw, json)
Hash identifier:          eHrAWrqGdb+DoGzEgRPy6gDNT0osQAFhPpZI6r0O8hA=
Subject key identifier:   CD:1D:C1:87:65:DF:02:CF:12:13:BF:1E:7D:C1:03:AE:A2:8E:17:AC
Authority key identifier: 6B:0C:D6:C4:ED:71:E0:E9:B1:6F:68:E9:77:AB:B5:1D:CA:2E:72:44
Certificate issuer:       /CN=F36CA008AF/serialNumber=6B0CD6C4ED71E0E9B16F68E977ABB51DCA2E7244
Certificate serial:       7A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/awzWxO1x4Omxb2jpd6u1HcouckQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft
Manifest number:          79
Signing time:             Tue 27 Oct 2026 05:42:07 +0000
Manifest this update:     Tue 27 Oct 2026 05:42:07 +0000
Manifest next update:     Thu 29 Oct 2026 05:42:06 +0000
Files and hashes:         1: awzWxO1x4Omxb2jpd6u1HcouckQ.crl (hash: /OWoCXkCRMx59iHbWL0GFXroN8r0R3ienRP6Knd0Dnk=)
                          2: ED2048C6748A11F1996AF7CFCE1D38B0.roa (hash: XHzjG9WZBS9B1G67SDvbgwEXROLuYT7arslMt8w5z7Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/awzWxO1x4Omxb2jpd6u1HcouckQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA008AF, serialNumber=6B0CD6C4ED71E0E9B16F68E977ABB51DCA2E7244
        Validity
            Not Before: Oct 27 05:42:07 2026 GMT
            Not After : Oct 29 05:42:06 2026 GMT
        Subject: CN=6ae039af-a8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:f5:92:be:0c:26:21:8b:77:5e:6f:80:e5:
                    ed:f1:3e:c4:7c:e8:b9:da:7d:e6:57:65:bc:c8:ee:
                    c1:fc:f3:54:2b:9b:49:c9:e6:73:c8:f6:7d:92:5a:
                    92:c6:ca:30:9f:bd:cf:dc:98:72:a4:7f:47:b3:d8:
                    65:43:9a:2f:96:b4:1f:ed:35:32:eb:03:f4:e6:b4:
                    88:8a:12:26:84:48:eb:1b:2b:db:51:30:48:e3:fe:
                    9d:3c:5c:89:7d:27:5a:30:ae:ac:d4:19:58:57:32:
                    48:1d:5a:b8:4d:bc:aa:21:a7:48:ad:c2:e5:70:1d:
                    8c:76:4a:19:a9:3b:ee:31:eb:47:eb:2d:7b:55:8c:
                    b4:0e:d8:d0:8e:5f:a5:29:03:d6:93:41:7f:e2:86:
                    16:bc:18:a6:11:a9:27:9a:f6:b6:e3:dd:7b:2f:00:
                    71:25:64:56:c6:d6:a8:f7:d5:3c:b1:b0:16:13:71:
                    56:cd:0f:62:1b:92:cb:11:69:cf:98:43:a5:b2:97:
                    c4:da:d2:f8:8b:e7:17:ee:c4:59:85:35:3b:a9:23:
                    83:32:ac:a0:82:35:f9:3d:89:7c:72:07:47:d0:a7:
                    10:49:56:6b:bf:03:a7:a3:41:d9:b3:3c:31:29:4a:
                    f5:5a:01:0e:dd:66:c6:49:e1:04:8d:79:67:29:16:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1D:C1:87:65:DF:02:CF:12:13:BF:1E:7D:C1:03:AE:A2:8E:17:AC
            X509v3 Authority Key Identifier:
                keyid:6B:0C:D6:C4:ED:71:E0:E9:B1:6F:68:E9:77:AB:B5:1D:CA:2E:72:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/awzWxO1x4Omxb2jpd6u1HcouckQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:da:07:4b:d6:90:f3:45:d5:b6:14:cd:41:c6:29:d8:02:b2:
         d4:f7:6b:c6:19:21:58:d7:85:b6:2f:f6:89:f3:90:b9:1c:d0:
         8d:b9:2c:d8:0f:12:80:6f:e8:48:99:64:3c:80:fb:5d:1f:4c:
         e6:db:ca:83:16:71:71:58:90:c2:f5:84:9b:65:17:11:ec:32:
         1a:7f:6f:d3:ce:eb:5f:0b:66:f3:09:5a:7e:4b:ae:92:d0:68:
         c4:fd:9e:b1:c9:74:38:52:a1:e6:25:d3:67:bd:87:5b:7f:12:
         6a:a7:e1:93:00:ca:7f:54:2e:39:80:c0:6b:87:fe:37:3a:ed:
         4a:b1:ae:66:b4:7d:3e:3d:61:43:d5:ea:e1:31:36:46:39:5f:
         54:0f:9b:7c:2b:f8:81:fe:20:a8:dd:c8:e6:3e:50:55:aa:70:
         b2:5e:cf:d1:7d:92:fe:c1:48:d6:32:df:ca:b6:8e:ee:03:5f:
         5e:6b:19:81:10:ef:e7:05:a1:ad:14:07:73:8d:50:92:8f:6d:
         06:fc:3b:29:7f:50:19:0f:80:99:94:85:21:54:db:a3:e4:e8:
         5c:b9:1a:96:cd:2f:0e:99:b3:56:82:24:61:54:fd:fc:8a:44:
         14:22:40:78:76:e3:2c:3d:5e:82:c8:c8:d1:0e:0b:95:b0:2e:
         fa:30:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:25:51 2026 by rpki-client