Error: rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
File:                     1ijkyWq6nPsSRHeGe73xpENfD1s.mft (raw, json)
Hash identifier:          Ty0XXIH5PlkUxO4/bM+yA6e39/B1k5Q7MFgPzZ02pxU=
Subject key identifier:   83:B8:12:55:7C:A3:71:C1:D6:09:C1:CB:4E:C5:B8:E0:5B:E2:EA:25
Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
Certificate issuer:       /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Certificate serial:       0448
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
Manifest number:          043F
Signing time:             Sat 26 Sep 2026 03:48:51 +0000
Manifest this update:     Sat 26 Sep 2026 03:48:51 +0000
Manifest next update:     Mon 28 Sep 2026 03:48:51 +0000
Files and hashes:         1: 1ijkyWq6nPsSRHeGe73xpENfD1s.crl (hash: kgmwQqE5ovkmyKMBROtKzhWtl+aVRj9iUgagACPL2kE=)
                          2: ED02D88AE81A11EE8623BCC5775412E6.roa (hash: mvHTVhODmwdELfP/e2cG297ECeboGj2BsOL9AUtxSak=)
                          3: D9673B327E3811EEA513EB3B4AD9E6FC.roa (hash: UqaCdDOXPbSropYSiVv8/KHGfuPJpE0IwMmtg9u2HE0=)
                          4: AD4DC7B2E81B11EE9D0AAC4C775412E6.roa (hash: Rg0rPDoDCNsPvE5jk03o2oztgTr1S1Uz/K+MpVZVO/k=)
                          5: 413308947E3A11EE832D2F404AD9E6FC.roa (hash: Eb0obFXe3E6DORP4MxW4QBN2bM/zRSA3RlnaOBqHUN0=)
                          6: A9A46126E81A11EEAA8ECCC1775412E6.roa (hash: wd/nf2EuVpjl0YLy2l9YBPgNolj8qZpz1sk3ozhlrnw=)
                          7: EA19B9687E3911EE8853E63E4AD9E6FC.roa (hash: O86LwkUf5r8SNUYChgmFxO/FC3RubzrEdUN/7g3zOxM=)
                          8: 1970B130E81B11EEACE154C6775412E6.roa (hash: 5vNOWkuS5OOw6HL2Agkgo+3kaWgHGPZi7TRSlYZvPNs=)
                          9: 48AE0434E81B11EE876ADDC6775412E6.roa (hash: wJr/eaxq68q6pHClMi9x3b4zYhBKBXGZVN5loE10NCg=)
                          10: 63F96FF2BEB411EE9F8AD251775412E6.roa (hash: ndpKTdXcDoxXSkEuWmu2k8nfK/ZfndTlZeUQ+gODKm4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362412EAF, serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
        Validity
            Not Before: Sep 26 03:48:51 2026 GMT
            Not After : Sep 28 03:48:51 2026 GMT
        Subject: CN=6ab740a3-0a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:a6:75:13:48:6a:fe:af:d1:15:6f:a3:c6:
                    2d:ce:bd:ec:b9:66:8f:cc:a0:39:8f:7a:60:7c:1d:
                    ea:42:df:bd:ec:5c:40:dd:c0:86:a6:7e:d3:26:e7:
                    81:fb:d4:8e:73:26:c4:ed:1a:60:cf:e3:1f:6a:10:
                    8c:a4:0c:f5:14:0b:72:4c:dd:c7:2a:52:39:74:ef:
                    57:2c:00:ff:fa:88:10:2d:85:af:20:ac:fe:74:cc:
                    73:ed:da:46:7e:31:f8:ec:c7:28:ad:dc:2d:e9:d3:
                    7b:6d:75:b9:3a:33:4a:ab:8c:28:00:b8:7f:e0:c9:
                    db:2e:d6:f9:a7:10:c4:de:b2:04:b1:ac:6a:68:e8:
                    74:38:05:96:9e:47:56:1e:7e:1d:89:55:0d:c8:0f:
                    2c:5f:c9:7a:0c:0d:e2:9f:d3:21:35:e9:45:5c:97:
                    c5:54:36:1b:7f:c6:46:24:b5:93:df:7d:6e:3e:95:
                    ba:b9:ad:73:ac:47:22:ea:04:84:8f:45:33:01:c1:
                    a6:87:68:93:fb:e4:e5:2f:45:54:cf:bd:9e:d9:ff:
                    25:7f:12:a9:d6:a8:30:b4:cf:1d:90:31:4d:ab:65:
                    70:0e:72:a6:70:d5:d5:11:20:08:ab:5b:cc:af:cc:
                    fc:09:cd:fe:91:b4:ef:2b:86:20:4c:53:28:79:45:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B8:12:55:7C:A3:71:C1:D6:09:C1:CB:4E:C5:B8:E0:5B:E2:EA:25
            X509v3 Authority Key Identifier:
                keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:86:2d:6a:35:03:e9:f4:be:6a:b1:c3:02:d9:b1:36:12:c8:
         ed:a7:d9:e2:0a:98:20:c3:88:11:19:9b:63:e5:99:24:ae:b3:
         88:4c:e1:6d:dc:f1:c0:c7:69:aa:ec:90:bc:8c:c8:78:61:99:
         50:ed:32:3d:b6:27:a8:1b:fb:6a:11:95:ad:b0:1d:24:8b:20:
         55:f9:8c:80:c0:bd:c5:f5:e8:af:c8:08:32:81:52:c5:64:96:
         e5:dd:5f:44:3e:d7:c8:21:bd:70:3b:91:d0:9e:5c:d7:4a:b3:
         b8:b3:74:e1:33:86:67:45:05:e5:17:b8:be:f0:18:9c:46:31:
         e2:ad:81:3b:78:39:ce:d4:b3:df:09:a7:ea:66:a1:14:e0:47:
         70:25:da:cd:8b:c0:a4:2b:96:23:24:09:ac:35:c2:53:be:7c:
         1d:06:10:5d:23:77:96:5c:07:37:fb:61:8d:da:c0:f7:ae:c5:
         e9:bf:b0:2b:4b:78:ea:b7:14:b0:b1:ce:19:97:8b:e0:e7:22:
         6b:95:1c:cd:f3:80:e0:7a:e4:f1:ad:ab:2e:22:70:96:98:3c:
         17:e9:46:70:62:4c:2d:81:34:ab:5e:5d:1d:64:c0:44:0d:6b:
         9e:51:76:a3:cf:1b:9b:fc:06:ee:6f:01:68:53:39:2d:08:6f:
         24:5f:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:21:23 2026 by rpki-client