Error: rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
File:                     FJvWukypr0s2P6bjEnf8i8_TEW8.mft (raw, json)
Hash identifier:          3c2ElLkiKbpd/ieX/raZ99CM7D4W/bTpkePE7rbvqtM=
Subject key identifier:   43:2C:68:3D:5C:16:C6:F9:C0:9B:BB:1D:98:11:41:35:94:63:CE:9A
Authority key identifier: 14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
Certificate issuer:       /CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Certificate serial:       0792
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
Manifest number:          078D
Signing time:             Sat 14 Nov 2026 02:23:20 +0000
Manifest this update:     Sat 14 Nov 2026 02:23:19 +0000
Manifest next update:     Mon 16 Nov 2026 02:23:19 +0000
Files and hashes:         1: FJvWukypr0s2P6bjEnf8i8_TEW8.crl (hash: KJONGITykp+BM4HBfeotmp9yhS3RHzuJYsNlyGMBMrY=)
                          2: C816F1F0D82211F1A0067701CF1D38B0.roa (hash: r7Rt7DfF0WqHwRHvDT/qGN9RjGA27rhpQ0MqROBugkE=)
                          3: 688E149A89D311F1853307DACE1D38B0.roa (hash: LKCFkhc2f3sYp0TME94TAWq27rIEBJpS5lpd1U+d6z8=)
                          4: 2D2BA23C89D311F1B0B823D8CE1D38B0.roa (hash: WHUX0r+IRyGxdKLqa0mlODIy/1WMY6+wx87ohyoAYsk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1938 (0x792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623C86AF, serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
        Validity
            Not Before: Nov 14 02:23:19 2026 GMT
            Not After : Nov 16 02:23:19 2026 GMT
        Subject: CN=6af7c618-e3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:76:cc:44:be:9d:0e:43:ab:4a:8d:49:a0:
                    c0:8a:bc:a3:99:48:bb:b4:4c:2e:81:2a:b5:cb:a5:
                    94:1b:29:20:89:ab:ac:04:66:fc:b8:fb:19:b1:79:
                    e2:41:0f:71:cd:ed:72:cc:3b:bc:70:c4:f8:74:87:
                    d8:6b:d0:46:2a:80:b9:eb:89:9b:79:88:8a:c5:97:
                    05:7b:d8:a8:27:13:c9:04:8d:fa:a2:a2:20:20:8e:
                    a5:d7:1c:79:2e:5e:aa:a9:6b:08:38:3e:91:f2:6f:
                    32:2f:c9:71:ec:c5:a3:7e:7a:a4:ad:40:ac:89:17:
                    d2:29:11:6f:c9:3f:a8:0c:1f:94:5a:c0:3e:34:63:
                    2c:31:ff:7b:90:9d:2d:ef:bb:b6:4d:f1:c4:d1:d4:
                    49:6d:14:fd:8c:c1:f0:4c:ef:27:2e:dc:c9:0e:9a:
                    f8:d0:2d:69:0f:f0:10:cc:95:3d:86:7d:06:c2:6b:
                    5d:6a:6e:e1:81:1d:31:d1:09:45:4c:d8:29:a8:a9:
                    61:d9:2c:a3:34:c6:e0:6b:b7:73:64:43:0a:fd:dc:
                    3b:d8:ec:12:cd:78:8a:09:44:b3:fe:66:46:bf:7c:
                    08:41:f5:0c:92:a5:6c:2d:a1:ab:ac:76:45:53:ed:
                    51:d4:ee:3e:20:b9:eb:cd:c2:fc:43:46:74:58:e3:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:68:3D:5C:16:C6:F9:C0:9B:BB:1D:98:11:41:35:94:63:CE:9A
            X509v3 Authority Key Identifier:
                keyid:14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3a:ad:c0:79:61:f8:62:4a:5b:a1:ef:b3:9e:9d:e6:6f:6b:
         cf:e8:bc:58:14:96:ee:7a:91:c3:97:ef:9c:c8:d2:54:02:06:
         62:be:32:8b:a1:7b:7e:14:f3:1e:10:49:6c:ab:81:ed:54:85:
         71:47:4f:a9:93:d5:3c:b8:28:63:d7:52:cd:35:5c:a9:28:40:
         1d:78:61:78:3a:19:91:dd:06:b2:87:16:85:fc:d9:5d:9f:24:
         57:b8:a6:df:37:77:94:ea:c9:fd:07:81:a4:88:11:2c:4c:7a:
         c9:3f:02:7b:40:8e:da:ab:2c:ff:d3:c7:99:32:3a:85:d9:65:
         0d:a2:4b:33:b4:5f:0c:fe:48:de:27:7e:44:b5:d3:42:41:06:
         43:e1:f8:7d:b0:86:91:a7:22:a9:5b:4f:70:0b:d0:80:38:5e:
         c4:1b:b8:25:c9:cc:ba:78:6e:a7:5e:91:c2:b1:ff:96:15:5a:
         57:a6:8e:d9:e6:5c:49:8e:18:15:e0:05:80:84:53:e9:ec:9a:
         b1:f7:d3:d9:e2:f8:72:f4:06:f1:80:50:d6:b6:0e:1f:43:32:
         b9:ba:3c:e0:2d:cd:b1:12:c4:6b:d7:e4:e0:a3:f1:e4:3e:42:
         65:b9:c6:a8:7d:b2:17:0a:a9:ba:2c:34:67:20:d8:ca:65:83:
         42:a0:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:49:29 2026 by rpki-client