Error: rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
File:                     4LRXYprC1N58lOp7iBVXQdHsICQ.mft (raw, json)
Hash identifier:          IhYW0i9Zs0nKxnNXsOtnizGEzwS61mV6Fso4rOsavY4=
Subject key identifier:   3C:AD:6B:62:66:AC:45:AB:AE:A7:3A:5D:D1:F8:A1:CD:FE:1D:F7:A3
Authority key identifier: E0:B4:57:62:9A:C2:D4:DE:7C:94:EA:7B:88:15:57:41:D1:EC:20:24
Certificate issuer:       /CN=F362C7E9AF/serialNumber=E0B457629AC2D4DE7C94EA7B88155741D1EC2024
Certificate serial:       0A38
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
Manifest number:          0A35
Signing time:             Fri 25 Sep 2026 01:36:40 +0000
Manifest this update:     Fri 25 Sep 2026 01:36:40 +0000
Manifest next update:     Sun 27 Sep 2026 01:36:40 +0000
Files and hashes:         1: 4LRXYprC1N58lOp7iBVXQdHsICQ.crl (hash: lVb86fZVay9I/kKh7YNaTLBenQnw1mbUzC8CGpkLI+8=)
                          2: 70E0EF4A1C5611F18E32DD81DAE4EC9C.roa (hash: CQ0hSEAMLadXtbNl+F7CDLaiilmNLE2/Ef+nvNSAYdY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2616 (0xa38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C7E9AF, serialNumber=E0B457629AC2D4DE7C94EA7B88155741D1EC2024
        Validity
            Not Before: Sep 25 01:36:40 2026 GMT
            Not After : Sep 27 01:36:40 2026 GMT
        Subject: CN=6ab5d028-cdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8f:6f:16:73:99:da:3b:21:fe:06:d9:ab:ea:
                    9d:c3:f4:78:47:1e:8a:8d:4e:15:35:12:df:32:20:
                    b0:58:bf:33:36:9d:65:13:7f:0d:04:6c:3f:06:37:
                    5a:26:31:1f:a0:28:49:e5:f1:f9:0a:42:0d:02:f1:
                    25:e5:c6:62:c4:24:73:69:4d:ec:b4:fd:8d:12:d4:
                    ad:93:45:5f:ea:88:e7:84:46:22:6f:cf:86:db:5a:
                    bf:4d:7f:6e:ae:40:67:36:e8:c6:e0:9b:9f:04:39:
                    52:7d:86:80:c7:bc:21:3d:10:4e:68:0f:76:d0:4d:
                    64:bd:21:5e:b0:74:47:53:28:62:33:28:60:47:f2:
                    ec:53:28:32:c5:b6:80:a5:c5:0b:74:5d:0d:66:9c:
                    c8:1a:d6:b8:98:13:ed:f0:50:18:ba:fd:29:47:bc:
                    7f:d2:21:25:88:89:f7:af:66:6f:f9:9d:7f:6c:68:
                    c7:e6:32:3a:20:a1:98:27:84:57:e6:bc:fe:3b:ba:
                    f6:63:22:dc:f9:7e:b9:1d:cf:b6:a2:cb:f7:6a:b5:
                    3e:e5:76:de:d3:89:55:fe:e5:5f:d7:18:d1:bf:0a:
                    d6:72:5c:c6:ba:59:b6:20:7c:23:a2:81:67:41:7c:
                    b4:49:17:3e:55:61:6d:37:3a:1a:c7:ab:ae:97:cf:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AD:6B:62:66:AC:45:AB:AE:A7:3A:5D:D1:F8:A1:CD:FE:1D:F7:A3
            X509v3 Authority Key Identifier:
                keyid:E0:B4:57:62:9A:C2:D4:DE:7C:94:EA:7B:88:15:57:41:D1:EC:20:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:73:4c:c5:c4:f0:18:5f:dd:a4:62:16:10:69:44:4c:79:60:
         f9:87:64:d5:f6:f9:7f:31:21:2d:8c:59:5f:5e:73:1c:81:a6:
         49:5b:f1:64:13:1e:47:73:be:2c:1c:9a:6c:54:59:a6:51:ed:
         cd:bc:d8:1e:e0:89:bb:1d:12:0b:02:e2:08:9b:34:8c:2d:1f:
         2a:11:1b:5e:d7:03:f3:bc:1e:e4:d8:41:f9:91:be:0e:31:45:
         b0:05:28:34:df:f1:6b:10:1c:66:48:c2:3c:70:d3:e9:65:f4:
         ad:7b:4b:67:20:14:17:06:b8:d6:b5:fe:91:9c:08:83:b9:a5:
         12:19:ee:ec:4d:35:ed:ad:9b:90:74:a8:51:af:fa:fa:24:88:
         2d:65:62:9c:18:41:67:df:e9:ab:c4:f6:b5:0e:41:67:fb:3a:
         4a:a1:49:f3:40:fe:30:3f:39:a7:9e:f3:64:2e:ba:3c:8d:9e:
         31:2a:e6:0a:7a:7e:6c:24:94:d0:f0:d6:f6:06:56:d4:57:7b:
         c9:fc:6e:25:00:e4:71:04:59:78:8e:a7:60:68:f1:c5:ab:ae:
         af:48:3c:38:2b:97:2c:48:c3:df:6d:b3:b2:b5:fc:3e:42:19:
         34:59:99:4c:05:46:86:04:10:54:3d:2b:f3:c1:c7:64:2f:8d:
         2d:2c:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:57:34 2026 by rpki-client