Error: rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
File:                     UD0YKNTvDNxjpYpU9cDJktI7wao.mft (raw, json)
Hash identifier:          /3whAGjVTSHdQiiitNMOeoVCJX11OEy/OSHz/nNBqhI=
Subject key identifier:   4B:00:3A:EA:84:94:EC:E4:39:31:A9:AD:A6:BC:82:87:D0:D8:A9:3E
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Certificate issuer:       /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial:       0566
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
Manifest number:          0562
Signing time:             Tue 22 Sep 2026 03:11:22 +0000
Manifest this update:     Tue 22 Sep 2026 03:11:21 +0000
Manifest next update:     Thu 24 Sep 2026 03:11:21 +0000
Files and hashes:         1: UD0YKNTvDNxjpYpU9cDJktI7wao.crl (hash: jSy8QI1hYyVjXnGpu95RA9oEFCUrOsuDLLejZXY9J/M=)
                          2: 7BADB9E6F07211EF92AD9376762E951A.roa (hash: B2o+mnnPb8VJ0KXGT1vN0Wq4qZm+iGs6+p3J/guAPnc=)
                          3: F1E5F272F07211EFAFA7997A762E951A.roa (hash: zuqVO/yJxreB8Tl25mp3hH6BAgTW+c+L7Zu/GOdPyYc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619AFBAF, serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
        Validity
            Not Before: Sep 22 03:11:21 2026 GMT
            Not After : Sep 24 03:11:21 2026 GMT
        Subject: CN=6ab1f1da-0d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:4c:0d:f7:36:05:02:38:f6:e5:3c:19:e2:
                    49:6a:4c:10:34:e5:09:48:ae:02:ea:d2:cf:1d:f3:
                    3e:3f:e3:e4:20:a3:6f:10:88:92:5a:7d:f8:9a:b6:
                    69:38:0e:05:f6:0b:5f:85:5f:cc:e1:2b:5d:6a:ca:
                    f8:d7:c9:6a:0b:11:45:07:3d:0f:37:5f:bb:f9:5a:
                    c7:53:70:2b:c8:c4:7c:4b:9c:e2:cb:27:c5:af:e0:
                    d7:76:54:bc:6b:e5:a3:82:f4:3f:62:36:a9:dc:37:
                    92:07:2c:f5:4c:f3:3c:de:19:26:dc:02:8a:19:90:
                    89:f1:e0:59:c0:43:11:03:16:5b:4c:4f:4f:36:2d:
                    e2:9e:97:ed:43:54:98:8a:9d:3e:a7:25:43:1a:0f:
                    5b:65:48:c8:0c:fc:19:a1:1b:a6:fb:75:96:cd:45:
                    5f:49:0a:b9:be:8f:54:57:c9:bf:b0:f4:7c:43:18:
                    8e:b4:6d:60:1e:08:7b:c7:a4:56:89:c1:7f:28:f0:
                    86:8c:6d:ea:f0:2c:34:5d:f1:83:1f:c3:ad:6f:49:
                    a0:fc:6f:15:23:35:1a:57:75:24:da:3a:7f:cc:f6:
                    87:18:f4:6f:14:a8:d9:f6:8f:da:24:b4:8d:ae:71:
                    07:61:6a:ba:a3:bb:77:70:c7:95:33:a7:a9:e8:32:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:00:3A:EA:84:94:EC:E4:39:31:A9:AD:A6:BC:82:87:D0:D8:A9:3E
            X509v3 Authority Key Identifier:
                keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:3f:c2:e6:1b:05:b2:15:8d:c5:c4:6b:85:78:51:a4:97:
         39:4d:da:5d:48:2b:84:2a:40:ec:be:d9:ee:44:a9:fb:1f:c8:
         b2:ca:8a:4f:e0:5c:a2:08:d7:d9:fc:1e:be:a6:a7:e2:7e:d3:
         c8:eb:b5:75:e9:33:9c:cf:56:2a:16:88:e1:a5:06:6a:60:98:
         96:0a:9e:d5:fd:c7:54:0f:ae:22:92:c9:c9:3f:05:a6:e7:c2:
         97:86:e5:1d:0e:bb:9c:00:3c:98:75:d2:10:3d:ee:fd:7d:b6:
         bf:4c:ef:81:7d:d1:71:ac:57:5b:37:d7:fe:2c:91:c8:ef:99:
         f0:f9:ee:cb:56:d2:bc:4d:89:9e:db:d2:08:00:96:22:a6:08:
         c3:9a:51:0c:77:80:3d:b0:20:19:d6:72:f6:39:b2:e7:0f:f3:
         59:28:a5:a2:68:4f:d6:fd:89:d3:69:1e:7c:7a:6e:47:50:04:
         2f:b8:ec:da:55:bd:96:c3:67:a6:20:e3:fc:0f:c2:d4:8a:33:
         34:58:45:e5:25:73:e8:df:0d:38:e3:75:de:68:3c:0c:23:cb:
         ec:11:3d:9b:72:86:4e:ae:7e:e1:c5:71:03:4b:e6:7a:19:a5:
         a2:ba:27:b5:46:12:62:74:c7:22:c3:75:43:81:91:47:5d:a3:
         56:62:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:02:31 2026 by rpki-client