Error: rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
File:                     LElzuTCDpISsLUZYJ4UCx4jQZPU.mft (raw, json)
Hash identifier:          cnT79Wj2LlJF4MQXhRb5DCoxa8DrMHvLoACV8ViNoNk=
Subject key identifier:   3D:BB:30:24:DA:28:46:D9:37:C9:A0:02:D3:68:F8:84:24:53:58:CB
Authority key identifier: 2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5
Certificate issuer:       /CN=F36D96A0AF/serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
Certificate serial:       0627
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
Manifest number:          061E
Signing time:             Sun 25 Oct 2026 02:58:08 +0000
Manifest this update:     Sun 25 Oct 2026 02:58:07 +0000
Manifest next update:     Tue 27 Oct 2026 02:58:07 +0000
Files and hashes:         1: LElzuTCDpISsLUZYJ4UCx4jQZPU.crl (hash: tcYg8sZja7U/CKXxN2LAbHVC2oWJezxBwYv+IL05i1g=)
                          2: 2E59EB44CEB811F1BC11CE03CF1D38B0.roa (hash: 5TK4CM95HpQiSBQB30Uv/DVW38W+6FYLymPmPW4W5ho=)
                          3: A7068B628CA811F1A92E63BECE1D38B0.roa (hash: T+KaTN7CnFyIm7H8bTLCLoHIYy/qXBnMRWdBkzS66ps=)
                          4: 9BE08B8E8C4E11F1BE755A05CF1D38B0.roa (hash: 07hDoRNRXMySdWEGeDHUnYW4FbI3+O15r72KVP2ufCQ=)
                          5: B8BE38148C4E11F1AE5E6605CF1D38B0.roa (hash: 22CcpPE6x9rKWvgvIIiNQvDytWYoXTxMqBgkQo1sm2M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D96A0AF, serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
        Validity
            Not Before: Oct 25 02:58:07 2026 GMT
            Not After : Oct 27 02:58:07 2026 GMT
        Subject: CN=6add7040-21b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:12:23:41:45:4e:f9:79:51:a2:aa:16:ac:
                    dd:6c:11:a6:dc:2c:ff:5d:62:08:bb:34:37:de:9f:
                    8d:6e:81:ec:dd:b0:ae:21:b8:fb:30:f9:d3:a5:e1:
                    0d:c6:08:3e:9c:39:e8:e2:8a:47:83:74:dd:bf:74:
                    7c:aa:bf:86:52:4c:88:64:ac:37:8d:1f:86:a7:f3:
                    a9:ca:8c:9e:69:cb:e4:a8:8c:4f:bb:88:a8:32:1a:
                    c6:b8:75:4a:34:da:b2:75:40:82:77:7a:87:56:f3:
                    82:28:76:5c:fd:a8:44:ac:81:73:82:60:8c:3e:13:
                    bd:db:9e:a5:4e:ee:81:33:17:83:11:90:ce:b1:89:
                    25:c1:63:b1:a2:94:9a:34:ae:bd:3d:d6:d2:fa:34:
                    11:a1:34:c0:01:03:5c:47:70:85:10:8b:b3:53:2f:
                    65:d5:c4:ae:3c:5e:25:8a:4a:4c:6e:8e:5a:a2:7f:
                    b3:56:27:9d:c0:08:74:ea:42:f6:31:31:a2:a9:08:
                    e1:d6:4c:3f:b0:2d:d1:2d:07:36:44:63:4b:c5:2a:
                    4c:fa:e0:6c:78:e7:b0:dd:53:58:de:08:fa:40:17:
                    9a:f9:49:36:8b:52:79:a7:0d:a1:95:b3:01:ad:ce:
                    5f:6e:b3:a9:a3:50:89:0a:75:58:5c:d4:c0:b0:8d:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:30:24:DA:28:46:D9:37:C9:A0:02:D3:68:F8:84:24:53:58:CB
            X509v3 Authority Key Identifier:
                keyid:2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:23:dd:67:a8:a5:92:cd:58:cb:e0:00:9c:69:98:89:e6:07:
         3b:f9:7a:ad:49:d8:f5:84:70:98:d0:7a:4c:82:2e:6a:b8:2d:
         33:b8:a3:ba:66:a8:46:55:f1:31:37:40:b9:a7:1d:70:e7:5e:
         0e:d8:9b:ba:bf:30:f6:26:68:ba:bc:dd:af:fd:60:04:44:d1:
         a2:e6:c3:d0:81:b4:e5:78:e5:f4:87:dc:f1:f7:fc:e8:eb:91:
         4a:79:88:fa:fa:46:e6:e0:e7:d9:2f:c7:54:20:99:e8:d3:1b:
         f5:ca:d1:d4:40:96:87:86:f2:7e:ed:e8:bc:70:5c:39:c3:7a:
         70:33:d9:87:55:4a:82:e9:56:4f:8f:ac:71:60:2e:82:d1:bd:
         6e:e0:87:37:82:56:16:57:2b:9d:0d:59:bd:eb:7c:48:ff:a1:
         63:6b:0e:0c:99:49:53:d8:13:c5:f3:e7:e8:3c:fd:ba:c8:85:
         e8:00:a8:12:e8:40:f2:c0:d1:07:38:2e:a0:a0:00:a7:d0:a0:
         b8:cd:6c:b2:50:8b:88:fc:dd:2d:24:5b:bd:7b:9a:4c:0d:b4:
         fe:cb:99:a4:05:70:43:47:5c:50:9e:bf:a7:d9:28:bd:38:ae:
         46:93:7d:d7:f9:40:cb:c3:be:2f:cb:e8:53:7c:ef:3e:7a:9c:
         01:ed:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:53:59 2026 by rpki-client