Error: rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
File:                     A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft (raw, json)
Hash identifier:          TT9fUUE/dTb69BP/ni7fyGv+QdtvMR2sNarR1aKoRKQ=
Subject key identifier:   A1:AC:6F:75:70:B0:90:A9:36:B4:30:F7:55:EE:06:EF:35:FD:1D:CF
Authority key identifier: 03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D
Certificate issuer:       /CN=F3628C37AF/serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
Certificate serial:       079F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
Manifest number:          0799
Signing time:             Thu 24 Sep 2026 02:16:43 +0000
Manifest this update:     Thu 24 Sep 2026 02:16:42 +0000
Manifest next update:     Sat 26 Sep 2026 02:16:42 +0000
Files and hashes:         1: A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl (hash: ehdj+19ThZMJCV98KGDYwG4iZJu9Z3MHliW/D3Zh7zU=)
                          2: 4F5FB340BB9B11F0A4FC7890DAE4EC9C.roa (hash: 3j3JDrZJ5kzeoEP9B0zAHrKvWgUKuEoaaWh/f6w0w/E=)
                          3: 5BF8D2D2BB4E11F096D4D5A3DAE4EC9C.roa (hash: 5Sk/Y26ERaFugAQyGneW8BLkYqkzkn2e5hTPTauSWpQ=)
                          4: CAF715B4BB4D11F0A4D09D9FDAE4EC9C.roa (hash: LMV8zXhxDB9mr3rYVm2LJ0jTK/1jhcnobRpbQ4acSio=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628C37AF, serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
        Validity
            Not Before: Sep 24 02:16:42 2026 GMT
            Not After : Sep 26 02:16:42 2026 GMT
        Subject: CN=6ab4880b-f7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b8:f7:3e:a6:61:c6:ce:1b:8a:19:f3:95:e5:
                    8d:aa:62:6b:4c:bd:18:6f:ad:a0:c2:c5:f4:19:9c:
                    ca:44:5a:0a:29:55:70:9a:29:4c:1a:28:d0:25:f5:
                    b2:ad:a0:b5:7e:74:9e:31:a1:38:dd:5c:02:d8:ce:
                    de:f3:4e:4b:8b:3b:45:0c:fa:b3:b0:5f:3c:52:05:
                    4e:0f:6c:22:4f:bf:65:ba:4c:a3:e1:5b:46:f2:5f:
                    44:ac:09:d2:d8:ea:a4:31:63:ff:cb:d2:ec:23:51:
                    af:ad:93:7e:82:82:de:8b:df:aa:fe:95:7b:db:83:
                    6b:b4:ee:20:df:23:6c:8e:eb:6e:0e:09:6c:03:06:
                    84:39:7e:fa:00:4e:4b:fd:64:5b:4a:c7:0d:df:cf:
                    a9:20:43:d8:c3:ef:90:3c:8e:ae:77:f7:bf:34:0b:
                    da:11:e9:3b:dd:f1:be:3e:19:52:e0:b0:6c:91:d0:
                    25:b1:a6:ee:31:e0:19:78:6d:07:6a:3d:4f:07:8b:
                    13:63:17:e5:ac:3f:1c:55:51:a4:7b:ca:01:16:5c:
                    20:4e:20:a6:d1:4d:b4:e9:d8:5e:7c:a1:91:c0:bf:
                    fd:49:1b:29:97:02:db:fc:75:2a:ee:b7:0a:71:d2:
                    73:b8:34:a5:9d:3c:af:f8:73:b2:71:64:b2:57:c1:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AC:6F:75:70:B0:90:A9:36:B4:30:F7:55:EE:06:EF:35:FD:1D:CF
            X509v3 Authority Key Identifier:
                keyid:03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7a:15:71:78:a3:0b:33:a8:7a:d7:b1:ae:1b:6f:cd:53:30:
         6f:72:52:65:7c:27:37:3f:28:55:e7:8d:de:79:bd:dd:0f:22:
         5d:fa:d3:21:38:ca:34:e5:66:ac:fd:f0:82:5f:8b:c0:8d:82:
         63:04:d9:31:cf:2b:aa:32:4c:74:fd:4e:71:eb:b3:ad:c6:95:
         d0:02:fe:cd:bb:0c:38:f9:81:32:e1:23:c8:1f:00:74:f7:93:
         83:de:0d:eb:a0:51:f4:8c:63:cc:f2:31:fe:44:d9:7f:57:92:
         20:12:3d:29:e8:b0:70:89:5e:2b:e1:70:5c:83:79:b5:63:e6:
         03:b5:b6:81:f9:f2:3f:6c:0c:c1:2a:1e:06:38:5d:09:4e:b9:
         28:3f:39:f8:7c:89:58:62:54:db:76:7b:13:3c:c5:09:6d:d1:
         17:41:2c:82:80:a7:c1:cd:53:d3:96:a7:e6:96:71:e7:93:ef:
         09:e6:76:b6:6c:5f:96:b0:9c:7f:a0:30:10:d4:6b:27:17:fe:
         d1:1d:b2:06:62:82:21:af:4a:bb:2d:02:5f:18:a6:da:40:11:
         3d:b1:0b:9c:26:ef:5b:4e:c6:39:4c:f4:28:e4:a7:45:91:a1:
         1c:01:4b:f7:fe:f6:64:40:b4:c5:47:e1:60:20:3d:ac:af:5e:
         c7:42:c3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:07:25 2026 by rpki-client