Error: rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
File:                     e-SeL48taNn-5zmG1EeTdhak7Yg.mft (raw, json)
Hash identifier:          cLeSOJ90J9CW1JZRtNckwHokI4UceM23+pkmYDqVHrc=
Subject key identifier:   55:B8:15:3B:1F:6A:F3:69:3E:87:7B:3B:BD:CA:2F:8E:74:1B:E0:41
Authority key identifier: 7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
Certificate issuer:       /CN=F36D987FAF/serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Certificate serial:       3C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
Manifest number:          39
Signing time:             Thu 10 Sep 2026 05:44:26 +0000
Manifest this update:     Thu 10 Sep 2026 05:44:25 +0000
Manifest next update:     Sat 12 Sep 2026 05:44:25 +0000
Files and hashes:         1: e-SeL48taNn-5zmG1EeTdhak7Yg.crl (hash: /NLlnvFcqoBQ9REm9lm3L4+6L4b7aD67i8CggTlMzr0=)
                          2: 9E812784844911F1AC6FBF0FCF1D38B0.roa (hash: Zj1r2gfZfraM50g7PRhgtk7jKO4qQFKeKyiQrjo1A/0=)
                          3: FCD3D5DE844911F1A8FA5F13CF1D38B0.roa (hash: FhAGrMj5xojX6TYFKx5nozxrwXt8TLfTYJbvtMzKy44=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 05:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D987FAF, serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
        Validity
            Not Before: Sep 10 05:44:25 2026 GMT
            Not After : Sep 12 05:44:25 2026 GMT
        Subject: CN=6aa243b9-f038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d9:a0:af:cb:b1:01:a0:d6:6e:87:7f:ba:c7:
                    c2:44:eb:85:a4:6b:16:7e:3e:39:c0:24:07:d3:6d:
                    ca:17:07:75:be:97:58:d6:b9:a5:67:62:dc:c9:77:
                    b5:7f:66:e4:1e:0e:5d:33:d6:9c:99:95:55:e8:44:
                    67:2c:5f:5b:c6:eb:ff:e2:98:ea:c6:9a:5d:5d:1a:
                    fd:a4:8a:a9:f5:04:7f:aa:bb:16:18:f1:3f:7c:22:
                    2e:67:72:dc:da:e1:d2:a7:31:bd:53:56:9e:c2:08:
                    2a:3c:1e:7e:46:42:86:30:b8:d2:22:3a:fd:fb:37:
                    c2:6a:aa:e6:56:27:db:02:fb:72:9f:83:36:2d:63:
                    ce:77:e4:23:2d:00:eb:dd:8f:76:b4:1c:ee:7c:f3:
                    38:c3:69:37:0c:44:46:68:0d:8d:09:b6:08:41:f8:
                    ce:15:7a:d1:eb:99:55:73:3f:07:c5:ec:10:87:ee:
                    0c:df:8f:4f:8b:89:29:0d:d7:d2:c7:74:33:ee:98:
                    69:2c:2c:2e:3a:67:94:89:94:f3:62:3c:9d:89:98:
                    f6:47:2d:45:4a:1a:44:fa:28:60:bd:df:c2:94:fe:
                    8b:7f:8e:53:da:09:22:ac:9c:6c:a1:30:25:99:ab:
                    fa:0c:94:a4:ae:1a:07:fb:d0:54:43:9e:3f:aa:98:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B8:15:3B:1F:6A:F3:69:3E:87:7B:3B:BD:CA:2F:8E:74:1B:E0:41
            X509v3 Authority Key Identifier:
                keyid:7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:06:a5:da:11:4e:75:0c:fb:8f:78:de:25:24:e4:33:d1:ac:
         08:12:8e:8d:d2:90:be:89:17:e0:c1:3d:70:a2:76:01:e8:aa:
         df:f6:43:fb:9c:8f:3f:36:18:e5:8b:00:13:67:ba:c4:51:c2:
         9d:0c:43:36:20:69:96:7c:92:d3:8d:ef:dc:8c:56:ec:19:8a:
         11:87:83:33:04:ed:f5:b6:1a:b7:d7:ce:2c:b3:5e:0c:58:cc:
         00:e1:cd:8f:10:4f:3b:1b:61:58:e9:b6:2f:d3:7b:fa:02:4f:
         3f:a6:27:81:15:65:8e:2f:aa:d1:f7:83:5d:2d:a1:1f:31:d6:
         a2:c2:c4:b5:d9:18:73:1c:8f:0d:e0:81:1f:a5:b2:fa:66:74:
         7b:15:89:f4:97:28:67:df:f0:fa:66:5e:19:0f:7b:59:c0:85:
         70:71:db:d1:f3:6e:d1:96:ea:28:7a:a4:09:c2:77:fd:6d:76:
         9f:aa:4f:a0:31:fc:c5:84:17:60:ed:5e:dd:86:10:50:e3:e8:
         28:2f:3f:31:08:04:63:bc:0c:8e:4b:13:c5:66:65:ff:da:4f:
         f8:66:28:14:e5:29:2b:50:bf:b5:07:1f:f7:8d:bb:5e:e8:63:
         2d:03:eb:4d:e9:1f:6c:37:4e:77:c7:ea:12:43:37:70:9b:a8:
         66:2e:4d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:20:37 2026 by rpki-client