Error: rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
File:                     Qp9woBorWSL-60vwyD1zxfV08l0.mft (raw, json)
Hash identifier:          kBUnEGdT0Zm+eb/jIeBXm64M0wryA7fokuH/ea6GLDw=
Subject key identifier:   CD:37:E0:DD:59:0D:08:04:8E:9A:A4:19:3C:A7:B4:CA:48:E2:13:4F
Authority key identifier: 42:9F:70:A0:1A:2B:59:22:FE:EB:4B:F0:C8:3D:73:C5:F5:74:F2:5D
Certificate issuer:       /CN=F36F8B97AF/serialNumber=429F70A01A2B5922FEEB4BF0C83D73C5F574F25D
Certificate serial:       0735
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qp9woBorWSL-60vwyD1zxfV08l0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
Manifest number:          0731
Signing time:             Sat 26 Sep 2026 02:29:03 +0000
Manifest this update:     Sat 26 Sep 2026 02:29:02 +0000
Manifest next update:     Mon 28 Sep 2026 02:29:02 +0000
Files and hashes:         1: Qp9woBorWSL-60vwyD1zxfV08l0.crl (hash: n3THeFocsVzfCV3FKsoe3tmpOp2beBxUdAeI431AnCk=)
                          2: FD4DB548A1BF11EFA39151A0762E951A.roa (hash: jNJWeITwxu0vczeduFKEplO/t2/G8EFVwbsdEOzx9y0=)
                          3: 5813D9640FB411F0A6B56DA0762E951A.roa (hash: 2Q+hoGwNUDdoOl21mzLdpEGQumgusRGF7qozk0hKNmw=)
                          4: BAA0E2DEA1B411EFA1EE2F5D762E951A.roa (hash: K1xKU9htAsSiqeoEzSyp58rJTSDbVeGSEYylDFoKes4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qp9woBorWSL-60vwyD1zxfV08l0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8B97AF, serialNumber=429F70A01A2B5922FEEB4BF0C83D73C5F574F25D
        Validity
            Not Before: Sep 26 02:29:02 2026 GMT
            Not After : Sep 28 02:29:02 2026 GMT
        Subject: CN=6ab72def-b551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:1c:d0:3d:63:9d:e7:7b:51:98:eb:8b:b6:
                    f8:ae:c7:3b:1d:01:e2:5b:75:82:b5:84:68:08:aa:
                    ec:a7:68:e7:91:5f:a9:88:e0:9b:10:4b:81:d2:f9:
                    60:13:35:07:81:02:bc:fe:7d:90:7b:89:a6:7e:a1:
                    90:3f:9e:d3:60:68:5e:f4:78:4c:59:53:89:8d:58:
                    1c:99:1e:68:d7:e8:4c:f6:3f:5a:11:1f:2e:84:a2:
                    91:ec:19:e8:88:1a:0e:fe:d0:d1:7e:71:dc:3e:16:
                    69:58:d1:33:2e:1a:70:c9:54:47:ce:df:1a:7c:4b:
                    88:a4:f7:5a:15:81:ee:6d:ee:2f:1e:b2:67:80:a5:
                    b7:55:f0:0b:52:90:de:11:68:eb:41:82:c3:55:7e:
                    74:8a:8d:d1:0a:11:ca:c8:8c:49:8b:f4:ee:7b:47:
                    15:8c:23:b2:45:01:3c:27:8b:93:aa:01:34:47:9e:
                    ea:b1:e3:67:e7:3a:41:c6:53:9d:a0:2e:6f:37:dc:
                    bd:c0:49:08:57:81:65:8b:45:c1:80:bb:16:d8:20:
                    17:b8:40:80:cc:1b:52:b5:63:25:ee:bd:fa:5d:57:
                    2f:1c:69:95:63:fa:98:01:6f:46:96:54:63:77:70:
                    f0:c8:c6:d0:cd:54:53:50:44:5e:53:ac:45:17:02:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:37:E0:DD:59:0D:08:04:8E:9A:A4:19:3C:A7:B4:CA:48:E2:13:4F
            X509v3 Authority Key Identifier:
                keyid:42:9F:70:A0:1A:2B:59:22:FE:EB:4B:F0:C8:3D:73:C5:F5:74:F2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qp9woBorWSL-60vwyD1zxfV08l0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:34:a2:00:34:a4:ba:cf:69:80:74:b9:44:53:e9:19:7d:6b:
         84:7f:73:6c:12:1d:81:da:07:44:85:f7:b1:ee:88:98:b7:a8:
         41:9f:f7:7a:7d:aa:dc:cb:e6:52:0b:f7:2b:e5:10:b3:ef:2b:
         ae:0e:33:4c:1e:49:a1:be:e5:c5:bc:c6:ac:37:b9:03:74:4c:
         ee:2c:32:30:1e:f5:4e:1a:ff:5c:49:a4:47:a8:46:34:39:99:
         56:a3:ba:35:aa:f1:1c:fc:fb:1e:a4:e4:b0:76:6a:19:80:f2:
         8b:86:36:91:ac:ec:96:38:1f:84:82:a2:e8:4c:1e:8c:94:28:
         7c:91:ec:7f:cf:0f:fb:ae:ab:d0:1d:32:19:e6:d9:cf:f8:3d:
         49:f9:1b:62:23:ec:b0:56:32:a9:f7:36:eb:25:95:38:b2:0d:
         bd:32:46:d1:4d:9a:93:64:c1:a6:ac:39:75:c8:12:61:a7:6d:
         4b:76:b5:8e:e4:2e:8f:0d:c9:c3:34:30:d0:39:2d:ba:c7:2a:
         1e:56:51:d5:b6:98:03:f6:3c:e7:bf:c6:96:a3:60:fd:b0:19:
         a7:10:37:b8:db:40:88:bb:06:73:88:c0:7f:af:ad:54:a1:d5:
         25:e4:96:79:dc:1b:34:75:e2:a1:1d:56:35:bc:30:fe:73:bd:
         86:95:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:01:01 2026 by rpki-client