Error: rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
File:                     gBdkcAW5GRQgyZGxrgeYtayhTQw.mft (raw, json)
Hash identifier:          9pCg449NjJfwsS/Qql0Vkh8XdHx54sVLRRHsnPiQcdQ=
Subject key identifier:   E9:C4:9E:26:2C:8D:CE:7D:B2:53:DA:4F:B7:D8:F1:20:A1:AA:5C:B3
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Certificate issuer:       /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial:       0848
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
Manifest number:          083C
Signing time:             Sun 11 Oct 2026 02:02:49 +0000
Manifest this update:     Sun 11 Oct 2026 02:02:48 +0000
Manifest next update:     Tue 13 Oct 2026 02:02:48 +0000
Files and hashes:         1: gBdkcAW5GRQgyZGxrgeYtayhTQw.crl (hash: zaTsqItgVrXmjcQh2r5mpznzoMdQc4GKkeb2A37kzMw=)
                          2: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (hash: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=)
                          3: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (hash: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=)
                          4: 10C8FFEEE29F11EBAA580947F8AEA228.roa (hash: 387HhPDysnyOhc8pmgAp8wGABIBNWQ6h4D9Qi4Iokv0=)
                          5: 7A4D6530E0D411EB863D3F12F8AEA228.roa (hash: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=)
                          6: 254A1146DE4A11EB99E5AD21F8AEA228.roa (hash: +hq36BifBeCSUhyFbBupJ4tam0DEvG9eurBQqxlzAcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120 (0x848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632CFEAF, serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
        Validity
            Not Before: Oct 11 02:02:48 2026 GMT
            Not After : Oct 13 02:02:48 2026 GMT
        Subject: CN=6acaee49-221e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:2c:ea:55:d9:96:b5:f3:2a:5d:5c:af:f7:
                    c3:5d:88:7b:bd:16:0c:de:fa:07:d3:91:3a:5e:92:
                    04:ac:a6:4f:aa:33:d0:42:b4:ab:1d:64:0d:de:a1:
                    b0:d6:82:16:b0:fe:e6:b8:9f:ee:a7:8d:6f:83:ee:
                    ae:e8:28:38:db:45:5e:03:45:3d:33:1a:6f:fb:96:
                    1d:86:85:4e:23:f2:f4:b8:3e:c7:03:36:93:e2:b3:
                    2a:bf:50:67:ce:63:08:83:fd:2c:d9:06:74:15:36:
                    74:08:3b:48:67:76:f0:c7:9d:fb:e3:be:c5:23:cc:
                    ac:e4:c9:4b:e2:45:24:e9:12:c0:9e:c5:31:d9:dc:
                    5b:a6:52:22:69:08:94:bb:a1:7a:3f:a0:44:00:38:
                    e4:c4:31:1b:64:67:a0:e6:32:8e:87:70:31:89:db:
                    b1:78:f4:d8:aa:dd:c0:ac:00:8e:de:13:61:93:03:
                    27:ec:0f:d5:ba:6e:48:3c:f1:d8:b0:34:46:41:63:
                    ae:29:60:a4:91:6f:1a:a4:2a:e6:fc:aa:8a:e9:b4:
                    97:ba:5b:f1:96:e1:de:09:8a:f0:c9:b8:51:06:23:
                    56:5e:23:82:40:0b:ef:79:f4:35:11:b9:4e:ef:70:
                    93:0a:b8:72:89:ed:d3:c2:f7:2a:5d:57:8c:0c:c5:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C4:9E:26:2C:8D:CE:7D:B2:53:DA:4F:B7:D8:F1:20:A1:AA:5C:B3
            X509v3 Authority Key Identifier:
                keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a2:6c:18:64:0f:6b:62:00:46:5f:3e:4d:a6:0b:8f:9a:10:
         af:1e:cf:d5:67:c0:9b:c8:64:db:04:7f:46:82:95:9e:72:8b:
         1c:85:e9:c2:db:21:48:d4:e1:75:c0:72:67:33:9c:ed:16:1e:
         34:1c:11:23:0a:33:b4:c6:ee:a3:f8:cd:78:de:67:c5:3e:e4:
         8a:a4:18:64:80:95:5b:31:15:83:1c:28:8f:2b:91:be:33:18:
         d5:f6:f8:ed:ce:26:e8:30:31:e6:e3:f8:22:bc:6a:4c:76:92:
         4c:a1:48:79:aa:f1:ad:c9:ca:2c:c5:db:c2:b7:89:c7:d7:cb:
         66:da:18:81:25:54:d6:04:4d:df:3e:19:5a:6d:d2:66:79:49:
         61:5a:7f:59:cd:b0:20:d0:db:ed:d7:ed:ed:60:c9:c3:b0:65:
         68:57:fe:f0:e5:e7:e2:bf:61:9f:0c:4a:e0:e1:22:8d:47:e4:
         cf:2b:38:3a:90:e4:b9:49:57:a2:71:90:cb:df:3a:87:43:03:
         3c:6e:a5:d4:c0:6a:c5:0c:c0:b0:30:2d:54:8f:cc:6d:eb:7e:
         83:15:dd:40:fd:8b:4c:4f:a9:92:65:74:b9:89:00:10:e1:0f:
         f4:a4:66:9d:4b:d7:76:b0:a0:e9:0d:18:e5:51:1c:4d:13:a0:
         e2:8e:8a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:33:00 2026 by rpki-client