Error: rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
File:                     YiXGU2dIRI8cYBvpr6uCfJptjJg.mft (raw, json)
Hash identifier:          cw5Oc4JJdLbT+v7Au1yXl8FSCwRxflfsqmBllHAcBcI=
Subject key identifier:   A6:B4:09:D4:0A:FB:B2:57:A8:B7:46:E2:EF:D6:4C:60:0D:E7:94:EA
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Certificate issuer:       /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial:       06AB
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
Manifest number:          06A2
Signing time:             Mon 26 Oct 2026 02:42:05 +0000
Manifest this update:     Mon 26 Oct 2026 02:42:05 +0000
Manifest next update:     Wed 28 Oct 2026 02:42:04 +0000
Files and hashes:         1: YiXGU2dIRI8cYBvpr6uCfJptjJg.crl (hash: Y3ZKKm4GJaRUR77Fy4oD1Bal8/sC6I+E781+yXRq/hE=)
                          2: 8E8DDE1C6FD111F1A724E610CF1D38B0.roa (hash: 1KMlFaEajdNRT3rBNkJK3leEidm1bkbbNhMaz2bl61o=)
                          3: B715016C631511F18D69FFF3CE1D38B0.roa (hash: Q90vO03OvbzVlr6xHMXNeN+1cU9pbCWlbrp/3F+J26k=)
                          4: 0201DC14657711F1B151DFE6CE1D38B0.roa (hash: XgErl+4Yq3zK0QkzIWHcw2rfdjCVU6UhA/XKlXzAm6M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                          rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
        Validity
            Not Before: Oct 26 02:42:05 2026 GMT
            Not After : Oct 28 02:42:04 2026 GMT
        Subject: CN=6adebdfd-5935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:fd:79:1c:b1:8d:04:9b:45:75:e3:05:65:
                    1d:13:cf:08:04:ae:c5:65:0f:cc:e7:5e:ca:f7:a8:
                    f2:f2:34:8a:58:95:a2:57:a0:b9:82:76:ec:44:d5:
                    3d:b0:bb:0a:0b:40:4a:0b:e1:92:8b:26:a9:d2:a5:
                    fd:fc:1b:94:ba:34:e9:db:33:97:28:35:db:72:5b:
                    d2:61:b3:48:e5:41:cf:da:91:aa:b2:93:94:ff:ee:
                    44:cb:f2:ba:16:1e:f2:1c:55:9a:b6:d2:ea:96:6a:
                    d7:b0:6c:6c:1a:07:c3:8a:9d:50:10:a6:41:6c:b5:
                    54:c0:99:07:02:36:87:a2:63:c7:d4:f6:eb:ec:36:
                    8d:ae:57:42:9f:be:27:5a:a8:29:c5:11:9b:4f:62:
                    60:0f:47:14:59:28:70:a3:b0:3f:b5:57:b7:1b:09:
                    1c:a1:4f:09:9e:15:29:8f:b1:9f:7e:33:e1:08:dc:
                    20:98:ed:61:c2:6e:a4:02:61:03:bd:d6:82:fb:c8:
                    52:d4:cd:1d:d0:b6:ec:63:fd:26:2c:38:dc:0e:93:
                    13:af:28:64:f1:10:34:96:7c:0b:e5:5a:7c:4e:56:
                    f6:e5:9c:3c:f1:9a:18:3f:2b:35:28:d6:04:29:4f:
                    d0:da:af:28:96:01:aa:ab:6c:c8:92:d4:2b:cf:14:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B4:09:D4:0A:FB:B2:57:A8:B7:46:E2:EF:D6:4C:60:0D:E7:94:EA
            X509v3 Authority Key Identifier:
                keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:13:e3:df:a1:cc:9c:50:8e:cc:15:d6:49:4d:ac:de:ec:08:
         63:7e:7d:1a:5a:18:6e:79:05:da:b8:c5:7f:d2:75:7b:2e:a2:
         f7:64:4e:62:f2:69:4d:ff:d5:36:71:6b:ed:c8:6b:1c:f9:06:
         34:d5:ed:ae:59:1d:6d:b3:88:d6:c6:c5:f3:58:5a:32:3e:3f:
         eb:a5:4f:2c:f4:11:7d:4b:ec:8c:a3:d0:93:87:92:b2:c3:72:
         bd:15:97:d8:9d:4c:9e:8c:e6:6c:28:69:5c:0e:bb:93:dc:21:
         7a:85:e9:cd:6f:6e:9d:cd:e2:b3:61:71:1e:34:b9:1e:84:34:
         e8:16:d4:a4:c8:16:c1:de:e2:3a:e7:ef:99:ba:42:94:7e:bc:
         33:a1:96:46:84:a2:50:8d:63:ba:a8:44:3c:21:d9:af:eb:04:
         3b:a3:5e:23:84:b5:4b:cc:9e:8f:87:93:74:fa:71:9c:8a:73:
         e6:a6:bc:25:57:b3:c8:d8:87:df:f1:ad:53:24:e3:5f:f8:ec:
         c4:72:af:82:d1:f9:8c:03:96:d9:1b:0b:42:43:98:bf:89:2a:
         06:8c:ac:5f:fe:3e:a4:52:ed:e4:f2:82:11:3a:68:c0:45:70:
         44:88:3d:82:66:1c:e4:83:bb:b5:68:d5:1e:ca:5c:f8:b6:67:
         6e:da:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:35:23 2026 by rpki-client