Error: rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.mft
File:                     hwgWtRD7iV6er3KRBGiulqGHPlw.mft (raw, json)
Hash identifier:          nHTV05gvoJOUjshe65tYWLAlg5v2cTgM2VfDqIQ208w=
Subject key identifier:   5D:11:F0:98:19:05:F3:69:CA:6C:47:B2:D9:FB:12:CF:66:07:4A:FE
Authority key identifier: 87:08:16:B5:10:FB:89:5E:9E:AF:72:91:04:68:AE:96:A1:87:3E:5C
Certificate issuer:       /CN=F3616990AF/serialNumber=870816B510FB895E9EAF72910468AE96A1873E5C
Certificate serial:       B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hwgWtRD7iV6er3KRBGiulqGHPlw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.mft
Manifest number:          B8
Signing time:             Thu 15 Oct 2026 05:33:36 +0000
Manifest this update:     Thu 15 Oct 2026 05:33:35 +0000
Manifest next update:     Sat 17 Oct 2026 05:33:35 +0000
Files and hashes:         1: hwgWtRD7iV6er3KRBGiulqGHPlw.crl (hash: tq21LRe5cWEz5cGM0QctuWDJ8IeaTWcdOKR7Ebkbckk=)
                          2: FAA05D2C492611F1AC4697B3CE1D38B0.roa (hash: xorOWYvfQgtYLkV5YjCLsFPmuKoApGkVbCKmg4lfAUk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hwgWtRD7iV6er3KRBGiulqGHPlw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 05:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616990AF, serialNumber=870816B510FB895E9EAF72910468AE96A1873E5C
        Validity
            Not Before: Oct 15 05:33:35 2026 GMT
            Not After : Oct 17 05:33:35 2026 GMT
        Subject: CN=6ad065b0-9eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:a5:10:3a:0d:0d:34:82:89:6d:33:8c:c5:
                    e3:73:4e:25:e0:e3:2b:df:8c:f5:3b:08:f7:33:30:
                    58:a5:0f:de:10:87:69:49:c7:8b:9f:34:a4:e6:e0:
                    e1:0d:1b:11:5a:2f:89:25:61:12:79:76:e3:0c:f5:
                    8c:b8:5c:8b:c3:a5:8b:83:f0:5d:00:87:ba:2c:c3:
                    a1:48:f6:f0:a1:75:79:2d:49:f5:ee:98:c5:f1:3b:
                    e4:69:ec:4e:46:d6:66:e7:c4:60:f2:10:31:8a:e4:
                    f6:31:ba:9f:4d:1b:02:71:c2:75:82:78:06:1a:be:
                    14:f4:e6:c4:c9:cc:71:bd:73:53:11:2d:ab:1f:a8:
                    b0:1b:32:4d:b6:57:cd:b2:8e:cc:ba:1a:95:cc:be:
                    c2:a8:e6:96:6d:8a:d3:08:88:20:22:a8:74:60:f5:
                    6b:fa:7b:c8:2e:c9:20:3f:d0:af:93:6a:25:57:73:
                    b9:14:20:1b:b5:fe:89:8f:36:ff:3f:09:7c:98:fc:
                    ad:5d:4a:51:4c:e1:27:3c:2a:a4:e1:0e:5b:82:a4:
                    68:63:67:35:2b:b9:16:1c:76:6b:b4:51:d9:cf:ce:
                    f8:07:fb:65:fc:da:94:fa:aa:f7:61:a0:a9:f4:26:
                    f1:96:f3:48:c0:fc:3d:0a:86:8f:0d:61:05:05:23:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:11:F0:98:19:05:F3:69:CA:6C:47:B2:D9:FB:12:CF:66:07:4A:FE
            X509v3 Authority Key Identifier:
                keyid:87:08:16:B5:10:FB:89:5E:9E:AF:72:91:04:68:AE:96:A1:87:3E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hwgWtRD7iV6er3KRBGiulqGHPlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:49:0a:f6:6c:8c:e4:80:34:aa:69:18:92:12:4c:f6:f6:0e:
         c9:0f:53:bf:83:47:ca:dd:1e:14:88:3d:93:de:9b:86:dd:f9:
         85:90:c1:d7:30:24:62:a5:d7:c2:d6:45:c0:fc:d6:7b:52:f6:
         56:6c:ee:e9:a8:9c:de:1f:c9:d9:11:f5:ce:98:ea:2d:ca:b3:
         19:68:90:15:d0:79:36:b8:8a:25:76:4e:ab:f4:c8:f4:b2:ce:
         a5:0c:eb:b2:62:09:4b:69:5f:09:cc:a6:a1:d8:01:9c:28:42:
         16:b4:f9:9d:24:86:f2:6f:e3:f8:2d:72:ce:da:0f:85:85:45:
         21:48:b9:05:83:9a:e2:09:1c:d6:24:c5:39:b5:5c:20:c9:7d:
         f7:5e:ef:d0:93:ed:a3:30:75:0a:80:90:9d:1b:cf:22:ee:30:
         95:30:b5:99:80:8e:e3:c0:1a:40:48:1a:9d:e1:28:ec:cb:3c:
         4b:c8:b7:c4:67:db:b7:09:4a:e7:e4:a8:bc:e3:ef:d1:76:65:
         89:48:15:95:dd:67:f1:9d:de:3c:95:38:63:44:27:74:1e:bb:
         57:c4:ee:c7:a8:2e:8b:a3:7d:f4:d3:38:f5:5a:31:4f:cd:16:
         5c:92:6c:b6:75:65:aa:1a:c4:ea:d4:2d:9a:96:44:e1:49:44:
         dc:1a:d4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:38:12 2026 by rpki-client