Error: rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.mft
File:                     LnpJoweDL2MmAr_nqk5ICHRVH80.mft (raw, json)
Hash identifier:          nK3A7HVQ23lsntlU9BFg2vzGQn+AMH/qNTzot4LMXQM=
Subject key identifier:   74:E2:5A:EE:C8:95:34:26:70:FC:AD:4A:18:93:DE:E2:D6:EF:68:F4
Authority key identifier: 2E:7A:49:A3:07:83:2F:63:26:02:BF:E7:AA:4E:48:08:74:55:1F:CD
Certificate issuer:       /CN=F36F5B9DAF/serialNumber=2E7A49A307832F632602BFE7AA4E480874551FCD
Certificate serial:       0103
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LnpJoweDL2MmAr_nqk5ICHRVH80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.mft
Manifest number:          0102
Signing time:             Mon 26 Oct 2026 05:29:34 +0000
Manifest this update:     Mon 26 Oct 2026 05:29:33 +0000
Manifest next update:     Wed 28 Oct 2026 05:29:33 +0000
Files and hashes:         1: LnpJoweDL2MmAr_nqk5ICHRVH80.crl (hash: 26PrYHp5a4awjMq7O/J2VjqOxyWEg7XmRIM7yYYs5+Y=)
                          2: 6B0279CA09C511F1BE9C3097DAE4EC9C.roa (hash: xaw/xaDZuxbiw9x4K+rCVDkYhuPeyhAyCp53eGqU7Fo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LnpJoweDL2MmAr_nqk5ICHRVH80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5B9DAF, serialNumber=2E7A49A307832F632602BFE7AA4E480874551FCD
        Validity
            Not Before: Oct 26 05:29:33 2026 GMT
            Not After : Oct 28 05:29:33 2026 GMT
        Subject: CN=6adee53e-742c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:6f:39:32:f3:6f:22:89:03:86:b4:39:db:
                    e7:c7:ad:ec:2a:0d:f2:38:7e:ef:e6:30:25:4e:7a:
                    b0:fd:af:0d:0a:d4:00:c5:82:1f:e8:4c:61:58:16:
                    e3:b7:a3:70:96:a8:2f:45:4d:54:d1:af:90:a2:bc:
                    bb:0d:bb:9b:eb:f9:18:fd:88:b6:b0:35:6b:1d:e6:
                    20:11:a5:84:10:52:80:53:b4:76:89:26:2f:0f:b5:
                    72:d0:3e:dd:5e:c5:39:61:86:f1:c9:da:8a:92:4e:
                    b7:fe:2e:8c:34:c0:84:f9:2f:78:f1:5e:5f:0e:e9:
                    78:16:16:1a:1b:e1:99:0c:6b:76:59:a5:a6:46:55:
                    49:e3:cd:3b:3f:9c:89:1f:22:05:dd:ca:5e:01:a7:
                    ee:db:a6:0f:8c:41:f2:a8:64:29:cf:c1:a8:57:72:
                    2b:b9:80:1f:f3:df:c0:71:70:89:b6:25:10:a7:60:
                    4b:e7:a8:e0:a6:99:23:24:12:8c:df:7a:6d:ca:66:
                    7d:7b:5b:e3:a6:d6:cf:15:17:14:38:ae:d1:d0:87:
                    24:c5:38:54:48:ed:ee:c2:4e:0d:cb:a3:de:5a:de:
                    0f:0f:c7:c4:3e:79:cc:63:84:f8:f1:da:d2:75:47:
                    71:06:98:14:75:a2:db:51:3e:a9:23:7d:38:62:f0:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E2:5A:EE:C8:95:34:26:70:FC:AD:4A:18:93:DE:E2:D6:EF:68:F4
            X509v3 Authority Key Identifier:
                keyid:2E:7A:49:A3:07:83:2F:63:26:02:BF:E7:AA:4E:48:08:74:55:1F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnpJoweDL2MmAr_nqk5ICHRVH80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:4d:9a:ba:11:a0:34:32:6d:e4:a1:0c:cc:b0:ab:73:1f:
         f7:4c:89:d9:32:a2:70:35:d1:c0:ae:7a:c4:63:51:a4:6b:8f:
         03:5e:f0:90:62:a4:0d:42:eb:31:7f:5f:c1:4c:e6:c8:fa:d7:
         2a:07:e1:cc:05:73:56:45:00:5d:7c:05:ac:e1:cb:06:12:da:
         10:14:62:b4:90:00:10:04:20:98:73:e9:10:41:ee:68:39:b4:
         b3:5e:36:c2:7d:6a:9c:34:56:92:fa:7c:2d:6c:33:1a:4b:18:
         db:9b:0b:e7:05:fe:68:f5:4a:10:9f:f3:69:6d:df:a3:2c:9d:
         1b:7c:76:82:84:96:38:62:6b:b9:6b:03:c7:af:e7:9a:fd:6e:
         a9:3e:57:e4:9d:cd:06:7f:68:4e:b4:4b:70:57:ed:03:c4:6f:
         72:13:f1:a5:8c:0b:8a:b5:ca:8d:14:e5:b8:47:8a:02:22:12:
         da:60:eb:ad:ad:ca:00:e9:ce:0d:33:6c:ad:c5:c2:c9:00:e6:
         53:77:a8:c3:e5:17:24:a4:12:b2:a9:6f:97:aa:11:fe:b9:bd:
         f1:91:42:db:2b:65:55:db:0b:08:bf:f9:82:23:a6:6d:1b:53:
         a2:8c:eb:02:dc:2d:58:48:d8:b5:f9:68:25:78:cd:c7:e2:80:
         c3:89:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:45:32 2026 by rpki-client