Error: rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/ie1fk8YcOcZYhj83TLok0TvDiMg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/ie1fk8YcOcZYhj83TLok0TvDiMg.mft
File:                     ie1fk8YcOcZYhj83TLok0TvDiMg.mft (raw, json)
Hash identifier:          BWHNpI6HdIfa8YxrZx2tnjj35TTXLdmD8B7NeWjfVlg=
Subject key identifier:   96:8A:0F:02:47:90:D0:97:28:CC:C6:6E:B6:8F:FE:2A:E4:2F:12:0D
Authority key identifier: 89:ED:5F:93:C6:1C:39:C6:58:86:3F:37:4C:BA:24:D1:3B:C3:88:C8
Certificate issuer:       /CN=F363918AAF/serialNumber=89ED5F93C61C39C658863F374CBA24D13BC388C8
Certificate serial:       07A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ie1fk8YcOcZYhj83TLok0TvDiMg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/ie1fk8YcOcZYhj83TLok0TvDiMg.mft
Manifest number:          07A0
Signing time:             Wed 14 Oct 2026 02:19:15 +0000
Manifest this update:     Wed 14 Oct 2026 02:19:14 +0000
Manifest next update:     Fri 16 Oct 2026 02:19:14 +0000
Files and hashes:         1: ie1fk8YcOcZYhj83TLok0TvDiMg.crl (hash: ndpqmXChAPFLbcSHUkJ3QTF0OGVe/rpfOlODQRofEsQ=)
                          2: 24D9C1DE358E11F1A3BCE602CF1D38B0.roa (hash: XOKeHt6x+Oc85Cb6mCtnzqoPD1de34Ozs1pzdMu2hMc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/ie1fk8YcOcZYhj83TLok0TvDiMg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/ie1fk8YcOcZYhj83TLok0TvDiMg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ie1fk8YcOcZYhj83TLok0TvDiMg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1956 (0x7a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363918AAF, serialNumber=89ED5F93C61C39C658863F374CBA24D13BC388C8
        Validity
            Not Before: Oct 14 02:19:14 2026 GMT
            Not After : Oct 16 02:19:14 2026 GMT
        Subject: CN=6acee6a3-8824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:3a:e2:e4:92:47:23:48:9e:04:49:cf:c5:
                    78:a6:8c:8f:1d:91:bd:6d:15:b9:af:d5:f8:37:36:
                    31:8f:fe:88:16:00:ab:c1:29:21:41:9f:d1:5e:e8:
                    8b:97:e4:3e:cb:9c:51:46:80:31:3a:0d:c3:e6:2b:
                    d9:43:4c:07:bd:e4:df:7a:4e:a1:3b:a1:ab:d1:00:
                    d8:d9:34:3b:d4:32:91:4f:b3:76:3e:b2:56:49:e6:
                    43:eb:b8:64:0d:b9:0e:94:53:28:e8:69:3a:1a:29:
                    cf:75:e4:7e:23:49:25:6c:74:b9:7c:8a:6f:61:33:
                    24:0c:52:f5:eb:72:5e:e8:1f:b4:6a:fb:2e:60:a5:
                    d5:45:63:fe:d5:63:48:94:0f:e7:e4:61:0e:6c:9d:
                    da:24:7b:3e:d5:92:02:c4:97:06:cd:04:9a:28:67:
                    0f:5e:79:61:3c:4f:ff:b1:3d:e5:a9:47:b9:40:44:
                    b1:5f:1c:94:a2:55:26:f6:d7:b0:89:2e:42:af:10:
                    e8:e0:46:00:65:f4:62:59:39:ab:0d:4f:6e:a6:2c:
                    2a:cf:f9:c8:3d:7b:e4:fa:9e:3b:8c:05:2e:1b:a9:
                    30:9a:4e:5e:16:88:aa:50:db:38:2b:9b:c9:f3:1b:
                    3c:85:5d:03:af:44:b9:f0:17:5f:f8:f6:72:c2:32:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8A:0F:02:47:90:D0:97:28:CC:C6:6E:B6:8F:FE:2A:E4:2F:12:0D
            X509v3 Authority Key Identifier:
                keyid:89:ED:5F:93:C6:1C:39:C6:58:86:3F:37:4C:BA:24:D1:3B:C3:88:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/ie1fk8YcOcZYhj83TLok0TvDiMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ie1fk8YcOcZYhj83TLok0TvDiMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/ie1fk8YcOcZYhj83TLok0TvDiMg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:08:76:40:d6:5a:07:d8:de:54:4f:ec:6f:14:70:7a:6c:9c:
         b8:70:5b:f1:b5:ad:1b:84:4f:ad:b7:37:27:45:e7:19:f5:15:
         db:dd:d6:57:e5:51:32:5d:05:48:a0:2c:4e:93:98:7f:e8:cd:
         48:8f:09:97:83:31:d3:23:41:52:75:83:06:09:df:77:f0:6e:
         1b:6a:45:d4:c7:d2:88:a4:f7:58:5d:bb:49:1f:40:85:56:73:
         96:db:ed:41:bf:2a:99:03:85:5d:44:5e:83:f8:0a:27:b8:d2:
         94:3e:08:58:d2:80:0d:d7:42:ee:19:20:07:41:7c:1e:70:e8:
         41:7c:4d:cf:2b:0d:9d:34:65:f0:dc:c0:ed:db:0b:e3:ed:9a:
         f4:20:07:71:f4:50:bd:ec:68:15:e2:09:b3:a7:4c:11:15:93:
         6d:cc:3a:4b:e9:da:e3:53:85:14:ae:42:9e:2d:7a:cd:e1:62:
         5e:bb:37:7f:ce:17:16:c5:95:f8:0f:9a:6c:b9:c3:02:c4:90:
         72:d6:b9:18:55:3a:06:2f:fe:7a:98:50:9f:83:89:c4:8d:57:
         de:b1:62:a4:64:36:bc:8c:6d:f4:99:31:4e:37:3e:d5:15:f1:
         5e:21:65:67:8c:a6:d1:7b:6e:6b:d4:1a:38:02:9d:7c:4c:51:
         43:50:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:00:27 2026 by rpki-client