Error: rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
File:                     Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft (raw, json)
Hash identifier:          F4Pn361A3+51SYavGntDmhvQ4BaGiwA+gjar5fgJcBw=
Subject key identifier:   55:0C:F4:E8:16:8F:13:B5:7F:02:8A:F2:13:9F:2A:EB:14:6E:1A:6F
Authority key identifier: 43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A
Certificate issuer:       /CN=F36E61B7AF/serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
Certificate serial:       0AF4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
Manifest number:          0AEF
Signing time:             Thu 29 Oct 2026 01:20:23 +0000
Manifest this update:     Thu 29 Oct 2026 01:20:23 +0000
Manifest next update:     Sat 31 Oct 2026 01:20:23 +0000
Files and hashes:         1: Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl (hash: cw1Om0J1in70q93k7UQY25gejLFme24wAD+Gu6X1Fe4=)
                          2: 3E2B9236734711E9B82EF41FF8AEA228.roa (hash: sHavROAEkdgwvUhdTRWjp16c0hkbhCfTH2dCNlT1fQc=)
                          3: CD4E82BA8B6E11F193216EB1CE1D38B0.roa (hash: Mu9wDlrsbfgrtzH7U7DLk811yCXwYxCebqbQqCj2G48=)
                          4: 95353CFC8B6E11F1805891AFCE1D38B0.roa (hash: V4Swugya/f9MLCy7s5nQ9HR1OR7ck99/+vX47SGsVNM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 01:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2804 (0xaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E61B7AF, serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
        Validity
            Not Before: Oct 29 01:20:23 2026 GMT
            Not After : Oct 31 01:20:23 2026 GMT
        Subject: CN=6ae29f57-3554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:36:e4:57:81:08:ac:4a:ee:e6:a1:85:a0:
                    8b:2e:68:38:87:3b:36:12:85:86:ee:87:2b:fa:5b:
                    d0:0b:a8:3d:51:b7:ed:be:76:34:e8:1b:f9:a5:46:
                    b9:f5:63:bd:8d:6d:fc:60:ea:5f:a7:8e:18:62:c8:
                    33:eb:45:33:7f:8a:ac:70:b6:fe:42:c3:e2:4c:69:
                    27:5c:21:58:aa:f6:04:87:a4:9a:98:f9:a1:f9:d3:
                    ae:9c:d5:b7:b5:26:dc:0d:7c:9f:9a:13:6c:0f:a7:
                    d0:9e:52:b9:fb:c9:87:90:f8:be:0f:5a:fd:d9:da:
                    8f:86:e2:83:c6:6f:75:7d:aa:7e:e0:8e:f4:da:d2:
                    41:0b:75:36:07:7f:36:b3:92:33:cf:6c:56:06:4d:
                    28:6d:97:6c:26:43:8f:e5:ed:e2:59:70:07:c4:f1:
                    e4:42:e1:6a:29:bf:d4:b0:a4:bf:af:a0:56:67:e8:
                    b7:64:09:2d:d0:c2:04:09:9c:17:cc:f2:00:70:8a:
                    08:12:de:21:ef:16:39:d2:8e:18:4d:f0:0f:0f:2c:
                    2f:22:13:19:d0:c8:18:99:58:19:3e:8b:0b:bb:b1:
                    42:43:cd:7a:16:48:66:d3:9f:6b:7b:7f:50:c0:27:
                    9b:48:61:4e:08:87:98:68:97:06:96:18:0d:d5:e0:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0C:F4:E8:16:8F:13:B5:7F:02:8A:F2:13:9F:2A:EB:14:6E:1A:6F
            X509v3 Authority Key Identifier:
                keyid:43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1c:2f:91:e7:e2:9c:d9:8d:db:dd:f7:7d:97:11:57:5d:0c:
         3d:e2:e8:c8:91:a2:99:18:96:de:ac:d3:6f:d4:ee:de:82:4c:
         38:8d:ff:97:96:06:62:fd:f0:87:44:7c:06:ae:41:db:4f:44:
         0b:7b:2c:98:0c:79:87:d1:93:e2:11:25:e9:94:47:1d:2b:3f:
         b3:52:2b:c7:d6:75:b3:cf:91:46:fe:d5:af:f1:8c:9f:e3:f1:
         01:a2:22:2e:74:e0:03:04:ba:15:ff:d7:d3:4f:e6:29:3f:2e:
         1d:e3:90:c9:ee:ac:ca:89:5e:9a:43:55:fd:ef:7b:7b:69:98:
         94:f9:e4:bd:c8:36:c0:5a:01:0c:42:31:62:3c:67:da:27:f5:
         2e:16:38:53:a2:9c:cd:d1:8e:56:05:56:7d:ab:0b:58:04:bc:
         57:9f:48:57:aa:55:9f:04:6c:79:a3:1e:f7:a5:d5:be:50:b1:
         f0:b0:7e:55:28:df:36:46:d8:0c:84:15:7d:c8:66:59:63:bf:
         4b:93:8c:f0:03:22:95:3d:fa:b1:eb:b1:48:1a:ce:07:25:61:
         c5:35:d5:58:eb:74:8f:a8:88:6a:b6:0e:f7:a1:15:34:0b:04:
         1f:b6:52:2b:56:64:e6:d5:e0:a3:24:59:f2:f4:07:e9:af:97:
         b6:b8:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:15:57 2026 by rpki-client