Error: rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
File:                     OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft (raw, json)
Hash identifier:          fqQLynTk3M2DMqS15kPiAxgmqZKaHng01VLVPFvUN6M=
Subject key identifier:   80:BD:B1:D9:A3:EF:E1:65:5B:1F:38:70:38:92:FB:53:D5:21:FD:E4
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Certificate issuer:       /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial:       050A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
Manifest number:          0502
Signing time:             Sun 15 Nov 2026 03:31:43 +0000
Manifest this update:     Sun 15 Nov 2026 03:31:43 +0000
Manifest next update:     Tue 17 Nov 2026 03:31:43 +0000
Files and hashes:         1: OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl (hash: lTkzP90+loapmlx2dvYk5sqgn0YFKp4dKEy6P096pzM=)
                          2: 31612164538311F182AFB0ACCE1D38B0.roa (hash: ymWXf0yxlrh1Y4pYFCcg1REPoB+gKEIeP6+qgKhj12k=)
                          3: 08A8A4CCC30411F1A156BBE6CE1D38B0.roa (hash: mOjLjWpbK0v5LfYcOQ4upv7EwGqnrUNEizqzZA/QHxo=)
                          4: B4993864538311F1B53AEFAECE1D38B0.roa (hash: 3z7Pymhab8EkuTX9K5wP76vuUvu1ud/Qr+5REcwgL4I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
        Validity
            Not Before: Nov 15 03:31:43 2026 GMT
            Not After : Nov 17 03:31:43 2026 GMT
        Subject: CN=6af9279f-e200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:01:7c:ec:e1:e0:2d:c0:a8:b1:46:b5:b8:
                    cb:bf:a2:75:e3:4f:7c:5f:91:80:9a:d3:59:5e:d3:
                    92:f4:42:18:e7:7a:a9:46:4e:a3:57:e4:2a:bc:e2:
                    84:c2:db:54:16:20:52:dd:9b:ff:a4:1d:f0:fc:bd:
                    4b:09:e5:84:82:67:66:55:96:9f:7a:0b:ac:58:40:
                    f9:23:84:a6:6d:87:a4:c8:69:27:ca:ad:09:48:3b:
                    1e:40:49:97:e9:cc:9d:f8:5e:cf:d1:7c:96:4a:5c:
                    6f:16:7b:90:7b:ca:cd:7e:30:bb:89:63:fb:82:98:
                    32:a4:f8:68:7c:75:47:5d:87:82:e1:83:65:38:d6:
                    14:28:a6:37:d7:13:18:85:06:0e:24:2c:ce:7c:78:
                    02:b1:ad:d9:1b:99:55:93:75:00:b3:da:78:86:37:
                    65:a8:c2:c5:dd:25:5c:fd:42:92:27:ce:b6:6b:fc:
                    0a:34:45:db:0f:e4:a0:85:41:d5:97:e0:4b:7d:c2:
                    80:c8:5c:58:ce:f6:06:e3:23:8d:ac:c6:fd:70:dd:
                    f6:e6:57:89:92:a8:1c:b4:0f:71:e0:b6:b3:9f:f6:
                    94:6a:07:42:da:e3:c0:f6:ae:ad:66:e7:ac:5a:06:
                    09:93:26:7e:74:23:f9:e4:e7:c6:10:33:5c:79:26:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BD:B1:D9:A3:EF:E1:65:5B:1F:38:70:38:92:FB:53:D5:21:FD:E4
            X509v3 Authority Key Identifier:
                keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:86:ea:b4:69:cc:56:77:ba:79:64:a5:8b:bb:bd:76:df:
         0c:22:94:72:40:a4:d8:4f:a9:12:1e:0f:69:ab:10:7e:99:99:
         b8:eb:c2:03:a0:37:53:44:60:bd:43:46:5d:40:80:38:7d:d6:
         73:05:5e:d6:dd:5e:cb:78:45:51:9f:ff:6c:3d:4b:d4:97:ea:
         99:4a:66:e4:7a:40:6a:2b:28:32:0d:45:21:81:5f:62:f6:ef:
         6a:02:98:82:10:f6:d4:fc:26:41:ac:c2:f3:10:70:4a:36:5e:
         1d:3d:4c:5d:06:83:9d:f2:ab:5e:b5:4b:16:5e:83:f9:7e:9d:
         89:d6:4f:09:ff:f1:6a:c3:13:b3:50:08:ef:5d:9f:a4:36:33:
         74:73:e5:82:f0:47:87:8b:22:39:38:db:ae:c2:0c:f0:20:b0:
         e1:c0:bc:f7:dd:b6:95:7f:6c:93:55:00:f5:c9:5c:d3:da:4c:
         ca:85:a3:dd:ba:86:01:93:c5:e8:39:4b:eb:73:72:4e:1c:84:
         e4:cc:02:b7:d8:ab:92:6e:a9:4f:9b:a2:29:d9:50:49:8d:9f:
         9d:68:21:26:99:ca:a5:2b:2b:a4:27:17:aa:a7:34:5a:f4:4a:
         04:3b:95:e1:fd:47:4d:59:e7:a0:27:c4:cf:c2:61:eb:6f:f3:
         0a:e9:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:57:38 2026 by rpki-client