Error: rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
File:                     7LPP-0CimvoX8H5dSzxCY0E2ukA.mft (raw, json)
Hash identifier:          WVWDGYfHRzFRnU9eS4xR+9r1fWk/x0zZzI3Os52GdfM=
Subject key identifier:   04:7B:ED:B1:35:BD:76:73:06:D1:0A:A4:C0:0A:3E:B2:F5:DD:4A:DE
Authority key identifier: EC:B3:CF:FB:40:A2:9A:FA:17:F0:7E:5D:4B:3C:42:63:41:36:BA:40
Certificate issuer:       /CN=F3614C03AF/serialNumber=ECB3CFFB40A29AFA17F07E5D4B3C42634136BA40
Certificate serial:       0A10
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
Manifest number:          0A0D
Signing time:             Mon 28 Sep 2026 01:38:38 +0000
Manifest this update:     Mon 28 Sep 2026 01:38:37 +0000
Manifest next update:     Wed 30 Sep 2026 01:38:37 +0000
Files and hashes:         1: 7LPP-0CimvoX8H5dSzxCY0E2ukA.crl (hash: 9c6X8a3aOzzfSahgdsQLY6CJby/gXL0cKoCgNLTzrUE=)
                          2: 0636F15A898711F1BE979A10CF1D38B0.roa (hash: uXRE4MYJypYecPWIt2nhK7I0w3ERb1vCTX5Ha7buUdA=)
                          3: 53913FE406B411EAA1EA0549F8AEA228.roa (hash: XJEJSGpw335NcuwS3+6oYV5fIuyzKIEqyyHHkBG3bgI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2576 (0xa10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614C03AF, serialNumber=ECB3CFFB40A29AFA17F07E5D4B3C42634136BA40
        Validity
            Not Before: Sep 28 01:38:37 2026 GMT
            Not After : Sep 30 01:38:37 2026 GMT
        Subject: CN=6ab9c51e-a14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:4c:03:ef:63:79:93:82:8a:67:c3:4d:16:
                    e5:be:ec:f2:2d:2e:74:a0:f3:c9:8f:7c:6e:cf:0c:
                    e8:8e:33:2d:5f:3f:cb:0a:eb:c7:d6:a6:57:63:4c:
                    68:55:86:b9:fd:47:85:f4:1a:54:38:01:56:9d:78:
                    99:4a:70:22:40:34:16:af:41:39:c2:98:7a:81:0e:
                    6c:19:fc:f1:ef:66:8f:f5:74:5d:20:d4:09:1a:24:
                    42:6c:94:99:1c:69:10:d2:1e:ae:0c:9f:05:17:cb:
                    6c:e0:3b:4b:fa:5c:7d:df:1d:c1:1f:5b:01:d6:f9:
                    c8:13:af:9b:61:d2:23:f1:ac:c0:6b:27:f7:ea:72:
                    cb:78:bb:c4:ef:a4:5a:73:c5:31:e6:1d:d4:c8:25:
                    0c:ec:ec:32:c5:a1:69:1d:13:b1:81:70:bb:9c:7c:
                    d5:c5:7d:c0:d3:d8:4d:24:b1:04:48:cb:c1:bc:e2:
                    40:69:dd:ec:d5:4d:5c:45:9a:de:49:87:e1:9f:62:
                    b4:fa:df:2f:72:c8:31:1b:49:ce:9f:1c:b2:e8:d3:
                    3b:ff:d2:ba:4d:c5:66:70:f3:17:c8:aa:7f:4e:bf:
                    06:18:f2:83:b1:83:45:d0:e6:ff:94:73:93:f0:9a:
                    12:49:5a:61:9b:87:bf:36:a7:15:1d:e4:74:4c:f3:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7B:ED:B1:35:BD:76:73:06:D1:0A:A4:C0:0A:3E:B2:F5:DD:4A:DE
            X509v3 Authority Key Identifier:
                keyid:EC:B3:CF:FB:40:A2:9A:FA:17:F0:7E:5D:4B:3C:42:63:41:36:BA:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:de:19:c7:af:9c:19:40:2b:e6:27:79:80:3b:8a:72:87:6f:
         e9:b9:e4:da:94:de:b9:5d:e0:98:53:22:48:f8:6c:83:e2:2e:
         55:64:95:2d:46:16:38:66:bd:8c:a1:84:e4:46:b3:c1:ac:1a:
         56:06:a5:c4:2f:9c:da:b7:58:c3:4d:a4:ba:4a:cc:dd:fe:ae:
         d3:36:2f:98:dc:9d:dd:97:ce:68:b4:af:7a:d4:6d:16:02:36:
         4f:75:45:6e:e6:82:3b:e1:3c:2d:15:cc:0f:6e:5f:87:b0:f9:
         5e:83:42:03:08:d4:22:a0:33:a8:63:16:1c:47:11:2d:18:76:
         cd:64:d2:2a:8c:89:cb:4d:53:5e:95:58:9b:50:37:ba:03:32:
         26:85:04:4f:17:b1:3c:ae:dc:0c:74:27:18:c9:d7:c7:d7:91:
         f1:2e:e5:3a:64:91:cb:07:10:18:f0:ea:bb:00:c0:2b:c5:b8:
         24:50:4a:a1:7d:7c:ee:96:b6:29:44:0a:69:c7:0b:9e:47:95:
         60:a0:5a:32:51:33:c9:19:4c:62:5e:45:1c:ed:d4:7e:72:83:
         5d:49:00:d4:be:94:ce:97:56:6e:b3:57:02:dc:d0:fe:3e:1e:
         8d:37:3e:13:a7:fb:10:fd:e7:f8:8e:bf:30:54:68:53:40:4d:
         e0:11:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:56:47 2026 by rpki-client