Error: rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
File:                     CNLFTntRy8c0NN0AYFFFEi8ay2c.mft (raw, json)
Hash identifier:          8nVxs+yaLWOv054wgyz4tor/92PeOplqCXXDC0atdJE=
Subject key identifier:   F5:A2:49:DC:50:4E:32:CF:62:12:91:DE:5D:7A:B9:0D:0D:37:70:B6
Authority key identifier: 08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
Certificate issuer:       /CN=F3625A15AF/serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
Certificate serial:       0B59
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
Manifest number:          0B55
Signing time:             Sat 14 Nov 2026 01:16:59 +0000
Manifest this update:     Sat 14 Nov 2026 01:16:58 +0000
Manifest next update:     Mon 16 Nov 2026 01:16:58 +0000
Files and hashes:         1: CNLFTntRy8c0NN0AYFFFEi8ay2c.crl (hash: pdYlPjEvawZJcWOls0TnBbrKVM6gKgxePR8jfDNGFTA=)
                          2: 3F66AD3622C011F181F9D8ECDAE4EC9C.roa (hash: UYTOMSKRs/qbW+Sv3f+3H//zbO7ZLUVhyMToHB8R05g=)
                          3: 8DA0F20E22C011F1A24EFFECDAE4EC9C.roa (hash: pJKKgO8f4WVnAhfiOK2fL78gUsep3QpfIXLd2mvgIoo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2905 (0xb59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625A15AF, serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
        Validity
            Not Before: Nov 14 01:16:58 2026 GMT
            Not After : Nov 16 01:16:58 2026 GMT
        Subject: CN=6af7b68b-454d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:8a:47:9d:3d:c9:8b:01:d7:34:cb:19:b1:
                    f1:29:fa:6f:4a:9c:de:3f:a3:eb:01:7d:e4:95:ee:
                    40:8a:58:c4:71:7b:52:8f:49:d1:cf:73:35:d3:e7:
                    91:9a:02:d9:c1:b2:53:5c:ec:80:39:f2:67:71:fc:
                    cb:7e:21:45:2d:5b:d2:44:a7:8d:42:0b:ad:b7:52:
                    95:1c:e4:ae:ec:00:c4:8e:af:cb:fa:ab:03:cb:7b:
                    35:81:62:3a:e8:f6:16:75:c8:f6:b7:f4:2f:ee:da:
                    8a:75:77:23:48:53:87:6a:3e:fc:4a:ce:5d:1f:29:
                    f3:0a:57:83:23:02:e9:88:8c:7e:69:a8:57:57:55:
                    b8:7d:e5:e9:e2:56:96:5d:5e:fc:cc:82:7d:ec:e4:
                    5a:67:03:be:33:32:68:50:90:ab:2e:80:a2:55:9c:
                    51:03:ad:ce:2b:7b:a5:6b:90:57:96:50:0d:3a:e3:
                    bd:f7:50:78:f9:33:7f:6c:5f:72:49:0a:4b:6b:33:
                    85:56:1d:06:a9:0b:84:ce:4f:f2:f3:39:1f:63:96:
                    fd:b7:29:72:37:b1:69:e1:bf:32:65:ed:1b:f1:2d:
                    35:1d:71:9b:ba:6a:82:88:c8:2d:ef:62:e2:69:f0:
                    10:40:de:bb:89:0c:7d:95:6a:bb:62:e1:fa:d1:28:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A2:49:DC:50:4E:32:CF:62:12:91:DE:5D:7A:B9:0D:0D:37:70:B6
            X509v3 Authority Key Identifier:
                keyid:08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:60:38:8e:95:b4:bf:5a:0d:45:5c:c3:cf:c8:bc:da:4c:
         3b:ae:34:0d:88:9b:9c:76:2d:fc:fc:42:29:54:8a:eb:56:94:
         7c:dd:99:68:97:62:b7:2b:ee:5f:c1:27:8e:3a:27:aa:50:db:
         b9:cd:0e:15:26:71:84:b1:58:8f:3c:9a:c0:96:c5:b6:97:81:
         9a:27:0e:e7:61:ec:1b:d2:60:9c:c2:94:a9:f1:62:1d:22:7d:
         25:54:e4:5e:02:75:00:a2:00:09:b4:43:6d:c6:75:00:0d:99:
         f2:1e:00:55:be:02:a5:05:54:8b:be:7a:83:ab:23:cb:25:62:
         01:ed:98:f3:44:d3:e4:34:51:a8:b4:68:df:20:45:92:f2:85:
         7b:6d:46:b2:08:f2:3f:25:0f:e6:ce:ef:96:6c:3b:96:ba:e5:
         75:39:03:4b:89:d5:a7:62:15:02:8a:1c:bf:a3:3d:6d:ed:32:
         6d:30:b8:37:89:aa:80:f0:06:ea:6a:94:e4:e7:2d:66:d8:ed:
         3d:1c:0e:49:3a:35:b8:95:06:cd:15:09:be:a0:c0:2b:90:86:
         0c:fe:e4:16:7d:e4:7d:cc:87:d2:69:42:73:e2:5f:d5:97:dd:
         14:0d:39:92:6c:b1:82:fb:07:5e:20:90:bb:ef:f6:e7:23:03:
         94:18:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:43:00 2026 by rpki-client