Error: rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
File:                     DZvooDz0-SG-roASCfDNqfpcKKk.mft (raw, json)
Hash identifier:          U+W9omLALf80zAvAnJ0jVWTlLGYo//d7KheHSAE/UAE=
Subject key identifier:   0C:EF:FB:C1:D4:6D:4F:F5:55:64:AD:D0:EB:4A:02:66:0E:55:50:9D
Authority key identifier: 0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
Certificate issuer:       /CN=F36E3A59AF/serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Certificate serial:       01E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
Manifest number:          01E2
Signing time:             Mon 26 Oct 2026 05:01:51 +0000
Manifest this update:     Mon 26 Oct 2026 05:01:50 +0000
Manifest next update:     Wed 28 Oct 2026 05:01:50 +0000
Files and hashes:         1: DZvooDz0-SG-roASCfDNqfpcKKk.crl (hash: MSyVTJKCJGp0Z/KBb449AOIqLq58TwwoEVB181bzLo0=)
                          2: 61276BBA8FE211F1A322B3D5CE1D38B0.roa (hash: ZgYi187X+5Outlah/ax0NZjZ4kzN2fXozzCC/u2qZ/I=)
                          3: 481A94F88FE211F196C1ACD5CE1D38B0.roa (hash: /b4HJPRNHI6xpg0bDUmbfP0kip9OmM0xcDOIsyuagII=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3A59AF, serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
        Validity
            Not Before: Oct 26 05:01:50 2026 GMT
            Not After : Oct 28 05:01:50 2026 GMT
        Subject: CN=6adedebf-af2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:47:4f:bf:f8:8b:98:90:95:29:73:e8:a1:
                    c9:43:16:08:5b:ba:c2:c7:3c:6a:22:11:52:64:87:
                    aa:14:89:5d:e0:ac:76:55:dc:fa:d6:34:35:1a:04:
                    01:59:20:bf:6b:15:ad:0b:97:4d:7e:7b:bc:24:57:
                    c7:e2:60:29:6e:4a:d2:46:20:7c:71:87:ce:f8:34:
                    17:96:49:dd:d7:28:e6:91:7c:89:00:9c:ae:0c:bf:
                    c1:04:b0:c9:68:f1:f0:52:e5:e0:d6:b9:e1:ff:7c:
                    46:a2:96:ec:49:02:a4:c0:af:83:7a:ec:21:42:14:
                    f0:6d:5e:ec:ec:85:6f:a0:85:5f:b2:0c:ed:71:9a:
                    96:60:26:90:21:b5:36:91:8e:49:2e:17:df:26:27:
                    8f:a1:e3:21:87:40:6d:78:ec:0c:bb:52:c3:3f:a0:
                    e1:d5:b1:f6:35:bd:c1:f5:f3:18:63:cc:f9:59:1b:
                    60:87:1b:d6:e9:7e:97:2d:47:ea:2b:61:b2:08:f2:
                    1e:57:9a:2b:1d:d7:8b:0b:a7:1f:3e:04:51:37:a5:
                    21:2c:27:c1:b1:d0:c4:1d:e2:8a:dd:49:c5:6d:a4:
                    c8:fa:66:72:ec:f0:b9:13:b4:38:d2:6a:92:d1:f7:
                    b3:63:67:05:87:cd:00:b7:6b:7f:ce:77:ae:f9:5c:
                    6e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EF:FB:C1:D4:6D:4F:F5:55:64:AD:D0:EB:4A:02:66:0E:55:50:9D
            X509v3 Authority Key Identifier:
                keyid:0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fe:f2:4d:03:7c:1e:7b:8a:f2:ef:13:f4:6a:fa:aa:f2:03:
         c1:3c:e0:4c:b6:e0:a9:77:c7:15:ba:f8:e4:0a:fc:03:ef:6e:
         f9:58:1c:1e:93:3e:36:43:35:df:be:f2:92:7f:e5:f6:9f:aa:
         78:61:f2:4c:74:ce:71:73:20:d8:5a:29:84:43:07:d5:7c:a1:
         c0:d1:72:bd:08:e4:71:39:cc:5a:47:87:1a:49:40:5c:d2:8e:
         49:2b:ce:ba:da:3b:1b:60:20:5c:ef:0c:1b:29:20:67:c5:c8:
         ae:3f:56:d1:6e:e6:40:8d:1d:81:5c:91:1c:88:c0:bb:44:ba:
         a1:d9:db:81:aa:f2:ba:a3:cb:fb:02:0f:5b:f4:5d:73:bc:ed:
         0f:dc:c3:76:ea:a1:22:2a:bb:7b:09:1d:b6:42:54:5a:ee:dc:
         f8:70:5d:ef:ea:ea:1a:33:cb:1f:b8:2a:7e:68:fe:63:c3:df:
         67:63:26:b9:6e:54:8b:51:db:9e:bc:b1:23:5b:6b:89:bf:ac:
         2f:4e:1f:7a:91:c0:1f:e6:db:ab:55:3d:5b:70:66:a9:59:0f:
         45:35:e8:72:ef:60:d1:4d:7c:50:e0:ba:ab:b9:c9:cf:71:72:
         f9:3e:8f:a5:cd:37:34:5b:ac:75:61:c1:3f:d8:09:65:b2:f7:
         4b:1a:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:59:28 2026 by rpki-client