Error: rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
File:                     2LbhjGXdH5bypUTKz8mAhq75KW8.mft (raw, json)
Hash identifier:          tJN5W/r7Cdg/IKHHmA0gN0IfSrCZSXe/Luo4nu3XTHE=
Subject key identifier:   7E:28:69:4B:5F:D6:E2:59:B6:8D:1F:7B:15:B4:F2:A8:FF:0B:D9:4E
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Certificate issuer:       /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial:       088F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
Manifest number:          0871
Signing time:             Thu 10 Sep 2026 01:59:03 +0000
Manifest this update:     Thu 10 Sep 2026 01:59:02 +0000
Manifest next update:     Sat 12 Sep 2026 01:59:02 +0000
Files and hashes:         1: 2LbhjGXdH5bypUTKz8mAhq75KW8.crl (hash: GAQdWEzAqRksGj36My2zFMOI5OouzqAB+DsZ1EOsTmY=)
                          2: 4D448904CF5811EE973188BD775412E6.roa (hash: ySSYPE0shLpdO7tNiGvvy73ZDXbdIqU3PG2m2I/Ajqg=)
                          3: DCC047FEE06E11EEB2B0FC6C775412E6.roa (hash: Tz/tIAPulQlEyr/QEKB9q80Zxn8V6++we+recfQKhpE=)
                          4: 15161890CEAC11F0B8BB8AA5DAE4EC9C.roa (hash: sz4t/bgPn6e92FcyejE2oYUP19uwkzdPRB0WWNeOfwU=)
                          5: 2DE942E8F05011EEB7E2EA77775412E6.roa (hash: GBenxdZx6aEBeL1h9fe5p87DnQDStd1SWX74CBckZcY=)
                          6: B26CC39CE06E11EE9B19AF6C775412E6.roa (hash: Ty5HAlTEhASXYCuUF5uWrrX1/gj8dWsdudDz16cov10=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 01:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191 (0x88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAF, serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
        Validity
            Not Before: Sep 10 01:59:02 2026 GMT
            Not After : Sep 12 01:59:02 2026 GMT
        Subject: CN=6aa20ee7-5993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:e4:e2:0a:bf:f1:59:06:b6:2f:53:37:97:
                    94:64:5c:99:32:a4:2c:74:c1:0b:11:78:9b:a4:25:
                    11:d9:8d:d3:41:a6:72:12:11:c2:b0:5c:c5:75:48:
                    00:47:2c:ad:c1:a6:7f:74:f4:d4:8f:f6:3e:61:36:
                    d8:46:8f:de:44:6d:e5:6b:73:e2:a6:b5:60:12:5b:
                    1c:c0:68:d5:9c:11:b0:80:90:d0:c0:03:d3:2b:f0:
                    bf:da:67:1d:0a:66:20:a0:c1:f9:eb:44:82:69:95:
                    8a:42:3f:7a:1b:ea:08:a5:22:70:6d:9d:cb:5e:c8:
                    5f:8a:46:a3:3c:64:23:bc:e3:56:a6:03:c2:03:d6:
                    0d:3e:a8:f5:42:92:00:b3:11:47:9d:f3:90:a4:f9:
                    ec:a0:24:50:3b:f4:52:3a:b4:6f:e9:86:2a:73:9b:
                    24:74:63:52:39:c4:a9:56:a2:fb:dc:91:75:be:96:
                    dd:6c:41:e4:78:bc:ee:d2:7a:d6:d5:14:c3:1e:a0:
                    0e:d8:0f:39:ca:e4:f3:85:2f:44:b0:73:5e:fc:9f:
                    a2:4b:56:79:ec:bc:73:65:26:13:6a:61:c9:e5:7d:
                    bf:cc:72:97:6d:cd:4c:98:3e:c2:c6:59:a4:eb:ca:
                    d0:5e:21:fe:e1:b2:86:b7:b6:ac:96:df:7a:0a:79:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:28:69:4B:5F:D6:E2:59:B6:8D:1F:7B:15:B4:F2:A8:FF:0B:D9:4E
            X509v3 Authority Key Identifier:
                keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b3:40:a0:65:10:42:e8:d3:b9:27:0d:67:08:62:c3:a0:b8:
         38:d2:3a:d5:e5:c6:25:24:97:06:ba:5f:a5:97:31:35:3c:93:
         3f:bc:64:e4:65:83:c5:53:f6:63:ed:3f:46:ed:6c:2b:64:29:
         e8:a5:1a:60:c2:bf:69:c1:bf:34:9b:59:de:4e:ce:ff:7c:4c:
         dc:38:1e:78:c8:eb:8d:1a:73:16:03:c9:75:65:a3:8d:11:be:
         43:8d:f4:7b:11:00:d1:f1:69:3f:a4:a5:58:61:49:8e:d5:6b:
         21:c6:6d:9b:67:d6:41:9a:ba:a4:96:75:18:73:e3:e1:e1:76:
         0c:57:bd:8a:a9:3a:d4:6f:8b:6e:ad:44:d4:83:45:f3:a6:bb:
         82:ff:6d:7a:91:92:eb:54:c0:6c:04:d2:3e:c0:ce:3d:54:33:
         33:f1:6e:b9:2e:38:d0:b0:16:7b:4d:eb:ee:ff:76:9a:ea:13:
         37:be:e8:2d:8d:67:f6:25:df:c5:5f:62:8b:c7:e9:b4:ea:5c:
         be:a1:78:80:13:77:29:2d:38:54:96:e7:d7:26:97:ce:d6:70:
         2b:c6:d2:a6:22:bf:11:f1:f9:31:d7:d2:c4:35:92:f7:f9:5c:
         19:b4:8e:d3:6f:4c:f1:11:fb:ea:d4:58:72:1b:81:8f:3e:b6:
         c8:62:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:13:58 2026 by rpki-client