Error: rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft
File:                     VibDpyL2myOgzqq4vq9tsK0kQw8.mft (raw, json)
Hash identifier:          Ci8izmBZySTI8o6Dt+VKJsFjbliBey3IQfcapv65uWc=
Subject key identifier:   09:EB:AB:F7:3B:7F:B4:41:04:91:BE:18:DB:37:45:E3:0F:61:B3:36
Authority key identifier: 56:26:C3:A7:22:F6:9B:23:A0:CE:AA:B8:BE:AF:6D:B0:AD:24:43:0F
Certificate issuer:       /CN=F36EA220AF/serialNumber=5626C3A722F69B23A0CEAAB8BEAF6DB0AD24430F
Certificate serial:       16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VibDpyL2myOgzqq4vq9tsK0kQw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft
Manifest number:          15
Signing time:             Sun 25 Oct 2026 06:00:28 +0000
Manifest this update:     Sun 25 Oct 2026 06:00:28 +0000
Manifest next update:     Tue 27 Oct 2026 06:00:28 +0000
Files and hashes:         1: VibDpyL2myOgzqq4vq9tsK0kQw8.crl (hash: +s8pAFyeGJIRsj2MRi1A3jm36V55YgH1UFjU9PotZCA=)
                          2: D7FAE8C6C16911F1AE6DCCDDCE1D38B0.roa (hash: oF1QD/EnlryIIxrUvh7rJqBbz2N3toUNpal/yvqhuxs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VibDpyL2myOgzqq4vq9tsK0kQw8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EA220AF, serialNumber=5626C3A722F69B23A0CEAAB8BEAF6DB0AD24430F
        Validity
            Not Before: Oct 25 06:00:28 2026 GMT
            Not After : Oct 27 06:00:28 2026 GMT
        Subject: CN=6add9afc-c8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:e7:aa:94:df:4d:57:da:54:a3:28:20:70:
                    ce:bf:04:6d:7c:5b:b4:8f:24:43:65:9d:13:82:7d:
                    3e:f5:91:41:8d:e8:88:b7:35:d2:9d:61:f5:54:b9:
                    46:4c:75:9a:3f:dc:fe:f6:4a:9b:7e:4e:6f:ca:5c:
                    bf:a1:f3:ad:96:8e:d3:cf:a8:d1:55:d0:ac:bc:ea:
                    52:b7:f0:4c:2b:64:e8:d2:50:78:6d:c4:58:a3:a1:
                    95:d3:b7:b7:5d:9b:4b:18:25:b2:e3:2b:b0:5d:b5:
                    8d:8c:67:be:33:34:71:88:ad:0a:c5:d8:b1:d0:59:
                    5d:7f:4d:04:f8:bc:a5:2d:92:32:e9:b0:0f:6e:33:
                    b1:76:ec:11:4e:73:3a:1b:c6:89:1d:1d:a2:79:00:
                    08:43:d3:8a:4a:07:af:e2:bb:71:ec:6f:ae:0c:94:
                    bc:e2:d7:28:f7:c5:98:ed:50:8a:a4:2f:a8:b6:d6:
                    90:a0:4d:79:8d:89:d0:42:36:04:28:08:50:bd:fb:
                    8a:40:b2:ff:1a:d2:8b:fa:79:80:92:85:29:03:57:
                    b7:36:59:d5:fa:79:a5:cd:99:0c:4e:70:69:97:b1:
                    96:f8:e5:98:f2:54:d9:1d:7c:af:48:10:9e:35:20:
                    46:ec:36:29:65:fb:b1:bf:28:3b:80:d6:87:2a:52:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EB:AB:F7:3B:7F:B4:41:04:91:BE:18:DB:37:45:E3:0F:61:B3:36
            X509v3 Authority Key Identifier:
                keyid:56:26:C3:A7:22:F6:9B:23:A0:CE:AA:B8:BE:AF:6D:B0:AD:24:43:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VibDpyL2myOgzqq4vq9tsK0kQw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2b:c4:eb:d8:96:fd:41:0b:24:5f:69:91:7e:fc:b9:21:3f:
         51:03:a5:95:e9:b1:5c:4e:31:df:39:88:92:8f:2d:cf:76:5d:
         d1:76:77:ce:cb:17:6e:a6:38:bf:c7:2a:52:f5:d4:00:f2:4f:
         ce:87:db:92:37:bf:f8:d7:8d:8e:7b:9e:d2:8a:21:87:e9:4e:
         b2:98:50:04:70:ab:3b:c0:07:cf:61:14:11:bf:3c:f4:c7:98:
         f2:a0:25:1f:da:e6:44:94:e0:0f:53:5e:3a:9d:0d:8e:95:aa:
         be:34:e7:e9:10:90:1f:15:61:77:d4:24:a2:2c:ca:5e:bf:b2:
         7a:52:f7:77:90:74:7d:fa:e3:93:e2:2d:84:65:a3:de:33:78:
         fb:1f:80:dd:f7:7c:da:7e:88:4f:eb:8e:94:84:0e:91:d7:34:
         d5:66:0a:42:4f:28:4a:b3:af:94:15:86:5b:83:e6:9e:19:4d:
         95:f8:8f:fb:f1:7d:a5:a6:be:21:90:fe:13:41:b7:77:f4:58:
         62:7b:32:04:e0:67:8e:6c:5d:a6:c6:78:86:2c:08:79:9a:a7:
         83:48:7c:8a:ec:93:c0:c8:0a:93:51:2d:a1:95:f3:61:43:a5:
         14:8c:75:d9:11:53:df:c0:e2:1f:96:f0:4e:82:c9:aa:07:9c:
         f2:9c:3b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:33 2026 by rpki-client