Error: rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
File:                     oTaOi_yA9OpasJcW0lchGTYYKFE.mft (raw, json)
Hash identifier:          Af0ONjPKwoxOmLfPH3Ps24zmrKmPiBKfYWlJayHgVZ8=
Subject key identifier:   8D:4E:FD:97:D6:77:7D:62:4B:D3:03:BB:43:F7:C3:9D:F3:7E:A0:23
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Certificate issuer:       /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial:       0F39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
Manifest number:          0EF8
Signing time:             Thu 08 Oct 2026 01:04:32 +0000
Manifest this update:     Thu 08 Oct 2026 01:04:32 +0000
Manifest next update:     Sat 10 Oct 2026 01:04:32 +0000
Files and hashes:         1: oTaOi_yA9OpasJcW0lchGTYYKFE.crl (hash: a90w8Z+xpGEbrlDvpswha52ir9SrNmJTfhcZ6awyEfs=)
                          2: 717250DC0B1F11F0979AD09D762E951A.roa (hash: EIY2uiwrUgRTGGH5CKTX60VMZhCwzhDQZwIzPuQyzLk=)
                          3: 1B68AA0C46C411F0AE592FF5DAE4EC9C.roa (hash: QPJ/pgy5MDLWjEUGppoWDCqEirKoVOtAK5W3WyI3dAw=)
                          4: 0A71212446C511F0B3816D7DDAE4EC9C.roa (hash: lv7fLpV1Z39qFrGvYE0On9CzDUQDfcH7arejVv2X+68=)
                          5: ADF5650846C511F0973FEB81DAE4EC9C.roa (hash: 7CYfsacbUXhjLqOsEIQOYe+QrprQCfUiJVwPCRh/kdM=)
                          6: 604112CC46C411F0BB8EB378DAE4EC9C.roa (hash: oScXiYHUFpyKfI5HMFQh9nsi/SHG0VE3rIhh+0Ip3Q0=)
                          7: A50DC96846C411F0942BA07ADAE4EC9C.roa (hash: sHNAOfb/q+PcCzpw6rvPqasqMwLSMx1FINw08PTtxic=)
                          8: 89672DF86D9011EEB83415874AD9E6FC.roa (hash: GCv1qnJWw7EowPAn9i0uz0mqCeC5AHRLSdr3MuuzS/U=)
                          9: 81BE337A46C511F0BFE7DC7FDAE4EC9C.roa (hash: pVcKVq48gEV8Go0LDZVguyDOkfFxzydQPYrOqsO5Mxs=)
                          10: 6023B6466D9011EEB59691864AD9E6FC.roa (hash: 8Vfkb/3Ajxlzq/FEl75zlD6gPZ0n60l+v2tc/Wmueqg=)
                          11: 3730DFCE0B1F11F08F24969D762E951A.roa (hash: M4evIqnQ83xbCnZoy0k3D9VPp29Fp6WHTYW6UjV2Hb8=)
                          12: 3FFE158246C411F0B4746278DAE4EC9C.roa (hash: JSi407PI78anMYfv+AOzcoeUknjbbweW9RVZYH6HG+Q=)
                          13: E931058846C411F0A1757E7BDAE4EC9C.roa (hash: EayQcb/gQt7YJ6Dhe3VUfGA8I0JKQX96b3m2dF4aJWU=)
                          14: E631424846C511F0802C0082DAE4EC9C.roa (hash: XDAB5XeuUP/8wavFXKpAQBTJhSuFwoK6JGeU6nezG7o=)
                          15: 4EA8246E46C511F089D87F7DDAE4EC9C.roa (hash: qjyPFtl59ffxyefqLmWJlRsBfN31sPgRtcOSrX+rkQE=)
                          16: 7A55532C46C311F0A855E5F0DAE4EC9C.roa (hash: rHdSgUS+SlwggCoWJZgjF6rhTUxpB3fhFGFetcNmcsE=)
                          17: DACADA1046C311F086D2CAF2DAE4EC9C.roa (hash: cCmcwJlgiJprQTyGetPh+w7SGAOJEFqm9EdH0ShanAk=)
                          18: 0D7A512846C611F0B4EAD183DAE4EC9C.roa (hash: +ER0d9RIe4bpJeWakTcMzMs/D2X/K+RHUk8EHXUsSzI=)
                          19: B1D3717646C311F0BC7CC5F2DAE4EC9C.roa (hash: 9gcYwTjOWCFIZzi9rrNFrBl+xybAESXQxu1TkihsHTc=)
                          20: 2A6685A046C511F0B86F727DDAE4EC9C.roa (hash: HCT4XLH64I5ImsqzEiVDAlrxg3B90jJrq1xSnA/3dFo=)
                          21: FCB7B1FC46C311F0AF749CF4DAE4EC9C.roa (hash: bSmxkooizIHzzHtegnD2xMlI/oPcsLP2bS8+oceldxA=)
                          22: C3C3FC5646C411F0957A397BDAE4EC9C.roa (hash: 6TBdH95t3nXF10Bz+Ap697yfZQbWnupWY7c4A0SeikU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3897 (0xf39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
        Validity
            Not Before: Oct  8 01:04:32 2026 GMT
            Not After : Oct 10 01:04:32 2026 GMT
        Subject: CN=6ac6ec20-fb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:b1:d3:76:4e:50:b5:94:16:f0:f6:9f:00:
                    43:ef:0e:59:99:38:fc:e9:25:de:d0:2d:5c:44:10:
                    34:c2:72:d8:b2:f9:6d:25:ac:79:97:63:f1:0d:e6:
                    c7:4a:84:80:3e:4d:7e:90:7a:d3:95:6c:39:8b:e3:
                    0b:64:5e:11:ca:4a:36:90:79:70:6e:7c:4e:ff:78:
                    8b:c7:ac:ee:d8:4e:6f:c8:9f:0d:5c:c8:09:65:62:
                    51:9f:cd:77:61:05:06:5d:5f:43:2f:d0:6b:70:9d:
                    b8:21:48:22:0c:1e:ed:98:a3:c3:5f:e4:e5:73:50:
                    14:15:b3:3e:ac:bc:3b:e7:b1:b0:1c:26:c2:fa:3b:
                    7e:d7:71:41:b1:c5:0c:8d:bd:86:6e:2c:41:82:86:
                    9c:21:6c:d8:6b:82:7e:7b:aa:54:8b:8b:e3:22:b3:
                    f6:55:77:6c:d6:cf:89:61:b0:2c:f7:b8:33:33:a4:
                    8b:08:39:fc:a0:f1:c9:0a:cc:2e:88:23:1f:b7:24:
                    18:12:84:74:f0:55:4f:34:ec:95:80:cc:f7:9b:f0:
                    87:83:19:ce:54:42:75:02:74:1a:e0:88:65:6a:e2:
                    02:0d:67:7f:74:a7:c4:2f:64:71:c7:b2:f1:3f:77:
                    6d:a6:55:20:5b:c2:a7:00:29:ac:df:d7:96:d8:59:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4E:FD:97:D6:77:7D:62:4B:D3:03:BB:43:F7:C3:9D:F3:7E:A0:23
            X509v3 Authority Key Identifier:
                keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:5d:5c:82:0b:a9:e0:9c:2c:67:62:fb:f0:40:34:e7:bb:67:
         50:8f:42:c0:5b:e5:2f:15:f4:4b:47:d2:55:f3:30:96:5c:05:
         1f:32:46:ac:49:8c:d3:bb:7a:1a:d9:f1:d9:44:ae:f9:9c:22:
         69:76:3f:67:1c:8b:35:f1:6b:36:91:98:a5:55:9b:a5:06:27:
         09:85:45:40:eb:fb:f1:21:f9:d7:52:79:32:c1:4a:2b:5b:fa:
         a8:80:01:28:36:76:16:b1:11:8d:60:7b:ff:b9:b8:52:32:09:
         c8:14:71:f1:6c:07:f4:b1:82:54:5c:68:f8:94:8a:00:c6:2c:
         01:be:b2:3f:f7:68:0e:a1:2f:5d:0f:41:fc:db:f7:8f:cb:9d:
         de:5e:c5:f4:9d:0d:ab:66:12:04:a4:b4:78:dd:7f:5c:e8:81:
         dc:01:5d:4c:57:10:57:0a:e5:46:74:07:c2:8a:b2:75:66:0f:
         cc:ad:61:bb:a6:1a:ea:5e:23:48:03:cc:2c:f2:29:a6:59:2a:
         ec:18:9b:20:80:0b:4f:fb:0c:03:17:a5:65:ba:de:fa:c8:e6:
         8e:c3:ef:40:26:f9:84:cf:62:55:7b:67:80:48:7d:62:5c:ab:
         1a:7d:e7:5a:2b:6b:f3:65:11:c3:2e:7c:9a:a3:35:8e:e6:d5:
         86:6e:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:34:18 2026 by rpki-client