Error: rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
File:                     FUgKw-djfPKntoh6_VGlPwPmrUc.mft (raw, json)
Hash identifier:          9xsQKmvsGYXfvLa+4TPkp9StcyMeeI3PdXBdn9c+aaY=
Subject key identifier:   51:EE:57:CC:99:6D:3C:CF:4B:6B:0D:7A:14:8D:0F:27:F5:CD:6B:5C
Authority key identifier: 15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
Certificate issuer:       /CN=F36D289CAF/serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
Certificate serial:       0AB6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
Manifest number:          0AB2
Signing time:             Thu 29 Oct 2026 01:31:21 +0000
Manifest this update:     Thu 29 Oct 2026 01:31:20 +0000
Manifest next update:     Sat 31 Oct 2026 01:31:20 +0000
Files and hashes:         1: FUgKw-djfPKntoh6_VGlPwPmrUc.crl (hash: enZRFarNeTHItAkzS+qTpsQT8fDKKV5wuGZIvDOAK7g=)
                          2: 967E592CF1E611EFBCF7DD4F762E951A.roa (hash: OyrLKAFW3d4E09yYEW9wskKKqknjSYiMg4ra/6illO4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 01:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2742 (0xab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CAF, serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
        Validity
            Not Before: Oct 29 01:31:20 2026 GMT
            Not After : Oct 31 01:31:20 2026 GMT
        Subject: CN=6ae2a1e9-17fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:72:08:ef:db:85:cb:59:0a:d5:cb:37:25:
                    58:49:80:f8:9c:6d:27:b5:5c:2e:a9:48:7a:c8:b1:
                    c6:9b:59:88:7e:8e:d7:89:85:57:4c:20:a4:a0:e4:
                    70:e2:15:0a:5a:f8:a8:35:ab:0c:f8:8d:f5:4e:57:
                    8d:90:3a:b2:c6:0b:bd:cd:43:42:f4:c6:3c:23:6a:
                    71:00:08:b1:61:75:ee:2d:5c:8d:1c:71:00:c1:f4:
                    91:cd:d0:6e:65:4e:76:8d:d1:b7:c0:db:1e:d4:41:
                    d6:8d:c1:95:18:02:a4:71:0a:77:59:66:a8:72:bd:
                    19:ff:79:a0:9f:ae:09:fd:17:d4:c0:b1:df:57:49:
                    92:d2:9c:ef:d2:b4:41:5b:42:2b:72:49:51:0b:a5:
                    a7:2d:10:10:f6:8f:dd:5c:2d:cd:b2:43:39:25:58:
                    19:58:7d:e9:46:25:26:bb:6b:08:d7:29:e5:25:18:
                    a4:4c:da:eb:73:a8:60:54:c7:f5:02:e7:e8:c0:2e:
                    ee:66:0d:89:f3:26:4e:b5:bc:e0:ac:92:65:2e:e8:
                    a4:3b:39:52:cc:58:45:e0:01:f3:2b:3e:73:31:93:
                    b1:b1:a7:0c:b9:7f:ee:27:a2:b1:3d:81:7e:61:a1:
                    e7:c5:68:e1:82:e1:22:53:94:32:ce:d0:47:c1:ab:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EE:57:CC:99:6D:3C:CF:4B:6B:0D:7A:14:8D:0F:27:F5:CD:6B:5C
            X509v3 Authority Key Identifier:
                keyid:15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e5:78:69:ca:6e:49:3e:63:39:d2:a2:34:14:fe:82:d9:72:
         b3:92:df:7d:96:fb:52:67:03:41:6f:9c:73:b1:d8:07:ac:5b:
         df:52:8b:e4:e5:76:80:45:3a:be:9c:ce:a4:3d:89:15:e1:28:
         f6:ad:c1:0f:6e:b2:d2:bc:d4:70:f1:41:32:3a:07:a1:22:61:
         df:46:b8:70:18:19:1d:83:8b:b8:f7:5e:54:bb:87:9c:f3:cd:
         ff:2f:73:37:ca:c7:3a:48:6c:ce:9f:b1:43:fe:e0:a1:85:66:
         da:f8:2b:b6:0f:a8:9c:dd:59:65:0f:4c:d2:a3:3a:ed:ef:c1:
         72:eb:c7:85:90:c8:20:cb:c9:f2:e2:ce:c3:13:a5:a5:2e:c1:
         c2:37:2d:7c:85:cb:84:77:f1:c2:c0:6c:19:fe:03:ab:bd:10:
         7c:ad:e2:6c:35:9c:1c:aa:ba:ca:f2:6c:25:a3:ad:08:3d:8e:
         f1:5e:91:09:a8:8d:87:c1:b7:64:39:d2:1e:c5:a1:3e:a2:d2:
         63:97:53:95:95:03:7c:e0:db:2c:b6:a6:3c:f2:0f:05:59:f5:
         55:a1:00:06:7f:6b:06:23:e6:8c:cb:c6:ae:cc:29:b1:35:16:
         5f:5e:63:b3:2b:e8:cf:a4:e8:79:80:eb:d5:5b:b4:3a:84:88:
         84:84:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:51:32 2026 by rpki-client