Error: rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
File:                     cEamUnYMjpA1cB1qRNwnGg4zAVw.mft (raw, json)
Hash identifier:          9lrX6LPFfn9BW0qKo3Hqeaisg/exnOmsV6bZwqpX/I4=
Subject key identifier:   56:6A:B3:4B:AC:E3:77:60:C6:90:D6:25:CE:AD:C7:10:BE:02:5E:6A
Authority key identifier: 70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C
Certificate issuer:       /CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
Certificate serial:       0ADC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
Manifest number:          0AD8
Signing time:             Sun 11 Oct 2026 01:19:46 +0000
Manifest this update:     Sun 11 Oct 2026 01:19:46 +0000
Manifest next update:     Tue 13 Oct 2026 01:19:46 +0000
Files and hashes:         1: cEamUnYMjpA1cB1qRNwnGg4zAVw.crl (hash: YZzC2wAiVfUzp/D92ECmTtfENT3U6ftn0kkC1w/nFDE=)
                          2: 0530CDFC45F511F0B8D116B4DAE4EC9C.roa (hash: NAagYOuoz83gJBbc9yz2V2e+hj5eern7tDyLsDy4nYU=)
                          3: 83E8C882ABE211EAB75B5884F8AEA228.roa (hash: RmYidaSanSrUDIijG3Hos1aIo1Mry4vynEz6zaj5KdQ=)
                          4: 59A177F88DCF11EA93675420F8AEA228.roa (hash: iJ4bpcIMbfbrSSynUTnD1MYU3E3BFy11GDgoP7CyilU=)
                          5: ACCF80A0725A11E9A4F37F71F8AEA228.roa (hash: /cq3b3YEjHQKJ7r9oxTK2L2hH6NQ1gLsW5kWro4hp5c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2780 (0xadc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610674AF, serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
        Validity
            Not Before: Oct 11 01:19:46 2026 GMT
            Not After : Oct 13 01:19:46 2026 GMT
        Subject: CN=6acae432-fb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:43:0a:ac:13:e0:a7:e0:e9:0a:69:93:95:
                    3c:5b:93:5a:a9:4c:29:1d:4d:47:b3:e2:e1:64:42:
                    7f:ac:f2:21:eb:c5:66:7d:3e:26:70:77:ab:f4:0c:
                    56:36:35:5e:ed:b8:d0:81:11:fd:aa:5b:b2:da:69:
                    e6:c0:d2:4e:92:23:e8:9f:0f:52:fa:27:e9:92:f0:
                    a4:3b:59:1e:bf:f9:ae:f9:75:d8:7a:98:f6:05:d2:
                    b3:1a:e1:e7:cb:00:79:79:6b:b4:e0:bc:54:4e:fc:
                    7b:90:44:35:68:53:3a:b2:63:cb:66:cc:91:ae:87:
                    be:1b:d7:9d:9e:6c:6a:3e:69:b7:cf:9e:9f:a1:9d:
                    27:f8:3d:bc:b7:10:d7:08:d5:57:b8:b0:83:80:bd:
                    8e:15:90:29:e3:6c:e9:1f:98:d9:02:84:ee:c7:eb:
                    4c:8e:ae:8b:16:40:9b:65:2f:4b:41:77:32:4e:be:
                    a1:f1:51:3c:39:58:05:60:b5:74:7b:68:ab:04:3b:
                    f3:4e:5d:41:f8:a3:56:15:66:ce:f3:ab:c0:98:8a:
                    31:42:35:43:af:78:5b:80:7c:83:87:4b:9c:d7:df:
                    3f:f5:c6:ab:ae:b6:60:ee:53:a4:2e:f7:e3:82:01:
                    db:58:8a:b6:45:ef:9f:25:46:b7:c1:2d:1f:7b:2e:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6A:B3:4B:AC:E3:77:60:C6:90:D6:25:CE:AD:C7:10:BE:02:5E:6A
            X509v3 Authority Key Identifier:
                keyid:70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:90:5e:7e:f0:29:13:40:d5:95:7a:d2:34:bd:e7:b3:71:3a:
         b9:fe:5d:40:07:c2:73:74:68:26:a0:6c:56:cf:cb:62:eb:92:
         68:30:d5:29:1e:ab:10:e8:05:7a:20:c4:2d:42:c0:52:d5:d7:
         06:ac:23:47:15:a5:ee:66:b5:fb:43:00:8d:6e:de:30:23:af:
         df:ef:c2:79:34:5a:9d:a1:b6:2c:03:08:a5:ee:ef:90:0a:41:
         1f:a2:53:a3:6f:e9:74:06:0b:ae:79:d9:19:b8:95:d9:01:b9:
         bf:bb:13:35:69:ae:91:8c:33:03:72:69:88:eb:da:73:4a:5a:
         44:88:9a:11:82:d5:f1:f1:2e:8c:19:d5:6b:d6:4e:71:33:db:
         c4:4b:c0:e4:ae:06:e5:c5:fb:ed:6b:55:b3:1a:23:e3:36:b1:
         47:9f:b9:22:fd:61:8a:d3:0c:13:ad:45:e7:51:58:b4:35:f2:
         00:0d:9d:d7:b7:c5:20:fe:98:75:b1:ce:92:63:f4:13:73:25:
         32:a6:2b:0c:d3:c1:ac:cc:2e:3c:1b:fb:a7:92:64:8e:cc:aa:
         1d:e0:d6:d5:bd:3e:90:09:a5:ec:75:71:ca:a2:47:39:e0:a4:
         8c:21:50:c7:52:3c:08:2c:f4:ba:6c:b4:1e:1b:ab:54:a8:55:
         49:f8:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:57:17 2026 by rpki-client