Error: rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
File:                     fs54roG_QHKx3E9vt-bLkWYlKzQ.mft (raw, json)
Hash identifier:          yd1peBgPgA66eaGJyZy/Dkmv4MOwy/lwOhRgb8AuUEE=
Subject key identifier:   9D:CE:8F:EA:44:63:61:DC:87:A5:42:E7:EE:CE:46:BD:5F:1D:23:6D
Authority key identifier: 7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
Certificate issuer:       /CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Certificate serial:       0684
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
Manifest number:          067A
Signing time:             Thu 10 Sep 2026 02:41:39 +0000
Manifest this update:     Thu 10 Sep 2026 02:41:38 +0000
Manifest next update:     Sat 12 Sep 2026 02:41:38 +0000
Files and hashes:         1: fs54roG_QHKx3E9vt-bLkWYlKzQ.crl (hash: IlAyG2jYm6+bNtFWr26R8BRdmlRDliIjpcZtPrEhqK4=)
                          2: F2869CE2631511F1AB7816F4CE1D38B0.roa (hash: w337w6lFswzcMoF6XmD+yS8pjZh65kRgsDRKhjEyxsg=)
                          3: 05DD987EE12A11EEBF968C9D775412E6.roa (hash: GrTtmavb95kKmRvm7iTDLhvIm3hoIjSrT87MDqcdXU8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 02:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668 (0x684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028AF, serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
        Validity
            Not Before: Sep 10 02:41:38 2026 GMT
            Not After : Sep 12 02:41:38 2026 GMT
        Subject: CN=6aa218e3-6ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:cd:34:ca:9c:aa:2b:cb:6f:22:73:16:8b:
                    10:e5:91:3f:41:4e:32:d0:c0:76:4d:a7:15:cc:20:
                    cd:83:28:02:75:df:f1:63:dd:17:64:d7:b4:c4:27:
                    f0:01:02:1c:20:8d:ad:4f:c8:34:66:a8:f9:fd:d9:
                    d2:00:18:a9:bc:b2:4e:73:96:fe:aa:18:38:6c:ea:
                    e8:59:5c:9f:2c:1f:a0:ea:3d:a3:df:7c:50:0a:5d:
                    c9:7c:0a:be:da:b7:0d:81:59:65:92:6f:91:04:e6:
                    2d:b7:d1:41:51:0f:cd:e9:23:0a:6b:7e:69:d1:f8:
                    1c:c9:2b:94:a1:8b:6e:17:31:91:2d:4c:f1:63:65:
                    e0:0d:96:1d:3a:a6:62:65:1c:92:e2:c2:fd:99:a3:
                    84:fb:87:9d:bf:62:09:12:71:ce:48:26:12:9e:de:
                    a3:85:c8:6f:29:8c:57:4e:75:2e:d9:72:f2:e9:40:
                    68:f2:bf:37:7f:01:9d:7d:0d:9a:58:ab:29:f8:d9:
                    34:b4:51:97:54:8a:f7:5f:31:c3:71:a8:d0:22:cf:
                    83:3d:0b:36:53:23:a4:2c:85:9a:d4:59:53:04:51:
                    04:e7:22:21:f1:15:ec:48:c5:e6:24:d4:48:90:b1:
                    7f:d6:1c:ed:1c:d5:27:7d:68:58:f8:ee:f9:45:1e:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CE:8F:EA:44:63:61:DC:87:A5:42:E7:EE:CE:46:BD:5F:1D:23:6D
            X509v3 Authority Key Identifier:
                keyid:7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0e:28:69:36:5f:00:b0:f6:f7:29:10:ab:67:16:57:fb:17:
         f7:28:e2:62:26:04:66:81:6d:3d:7a:30:35:73:7c:a1:3b:f8:
         cc:19:3b:e1:b4:d4:b2:1b:54:ca:4f:a9:08:db:9b:3f:e9:03:
         50:f8:85:8e:07:1d:7c:46:10:a8:34:13:bf:1d:16:d8:dd:2e:
         46:8a:ed:07:7c:d5:e5:ac:cf:59:74:73:50:82:c8:62:2c:32:
         07:e8:48:62:f2:6f:df:94:71:5e:31:81:cc:f4:8d:53:2f:b0:
         ad:2e:ac:9a:eb:b4:84:e4:92:71:c7:33:91:f1:c6:6c:6d:12:
         e4:f4:3f:01:10:a6:0f:e9:06:5a:d4:82:8d:a4:c5:64:43:c6:
         28:51:3b:47:92:14:fe:fd:56:b3:82:4a:e8:e1:65:b5:83:5d:
         eb:65:59:f4:b5:37:25:0a:de:f2:d2:2a:ae:d7:d2:dd:80:81:
         38:c9:a9:c7:ec:6d:98:54:fd:8e:9c:99:88:c2:a4:48:66:81:
         a0:ab:51:2e:d9:f8:c4:e9:49:f2:d6:42:53:ef:7a:34:5a:bc:
         b8:e3:0c:f2:c5:a5:c9:66:e8:3d:b7:c1:2b:c3:ae:40:ed:b3:
         c4:5b:ef:2d:f0:43:4d:f7:df:68:1f:23:c1:23:0c:b8:0c:74:
         d0:5e:0f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:40:33 2026 by rpki-client