Error: rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft
File:                     9VOyAq1fvTvj78fy2mkTeqaheOI.mft (raw, json)
Hash identifier:          ooPkWAFcGNrUb3AJ82vvSXtCXoxkJZ1TM9r20qAsLXw=
Subject key identifier:   3A:48:A8:FA:24:35:74:AD:83:20:3F:C4:75:A1:B8:FD:6D:56:98:E0
Authority key identifier: F5:53:B2:02:AD:5F:BD:3B:E3:EF:C7:F2:DA:69:13:7A:A6:A1:78:E2
Certificate issuer:       /CN=F363AA80AF/serialNumber=F553B202AD5FBD3BE3EFC7F2DA69137AA6A178E2
Certificate serial:       60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9VOyAq1fvTvj78fy2mkTeqaheOI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft
Manifest number:          5C
Signing time:             Sat 03 Oct 2026 05:43:09 +0000
Manifest this update:     Sat 03 Oct 2026 05:43:08 +0000
Manifest next update:     Mon 05 Oct 2026 05:43:08 +0000
Files and hashes:         1: 9VOyAq1fvTvj78fy2mkTeqaheOI.crl (hash: Kw2dVN776jjPUmQl9ldDMtI5wbq2rZOkq1tIzolHutU=)
                          2: 483963167BAF11F1B2F0B0ECCE1D38B0.roa (hash: 6ApyC0ohIKCaS38o9cVLyGJCGQ4YR9OpWdNCbGncsd0=)
                          3: C27271467BAE11F1ABF121ECCE1D38B0.roa (hash: VdbMwvTRClcjox2S/2NVOxavdjRQKb5ghNjcYWl7a2w=)
                          4: FA87324C7BAE11F1AB633FECCE1D38B0.roa (hash: Y++5DupkXsebrAc+hbkE3N5d6DZNbyNJZGID+Ut90Ho=)
                          5: 7ACCFA867BAF11F1BA0E46F0CE1D38B0.roa (hash: 5RZFISVxHr6AgVQeWbTly4Y9isbCXo9G2i+AxPE1xgg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9VOyAq1fvTvj78fy2mkTeqaheOI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363AA80AF, serialNumber=F553B202AD5FBD3BE3EFC7F2DA69137AA6A178E2
        Validity
            Not Before: Oct  3 05:43:08 2026 GMT
            Not After : Oct  5 05:43:08 2026 GMT
        Subject: CN=6ac095ec-97b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:c6:d6:d1:1f:fe:5c:35:79:be:d0:60:63:
                    a2:cc:0d:06:36:d6:fe:bf:9c:a0:ff:ec:31:0c:83:
                    6a:fa:4d:8f:42:77:cb:2f:d6:7a:8b:10:c7:4f:f6:
                    a0:f0:5f:fd:8a:98:a8:5c:f0:2d:e9:e5:61:bb:c4:
                    ec:10:78:a2:fe:59:cf:98:04:63:da:88:01:40:ac:
                    ef:3a:b7:62:10:f0:c7:62:3d:e6:5e:06:cd:25:de:
                    83:1b:c4:36:e4:26:f4:52:a3:c6:41:3c:0c:bd:a5:
                    4d:fe:1f:96:7b:1e:a4:24:ac:8b:55:04:28:b7:78:
                    d9:2f:45:80:43:6f:a5:fc:6d:2d:c9:46:76:df:22:
                    da:12:b9:3c:93:85:56:cf:54:c3:72:a0:e9:27:ec:
                    80:d9:cb:1d:68:fb:42:0b:ce:50:f3:71:4f:ab:45:
                    ec:63:83:4d:fd:60:92:63:fc:a0:09:a0:09:fc:1f:
                    44:a3:28:4c:f0:a2:c9:79:28:f6:7e:6c:ac:78:1c:
                    41:21:8c:b7:0e:e9:0e:01:0e:de:e0:f9:05:ee:79:
                    d1:b2:eb:74:11:2b:76:cb:7b:b3:59:23:46:72:5a:
                    cb:e7:f4:cf:8c:0b:f6:df:5e:30:9a:eb:81:d0:bc:
                    a4:49:83:38:be:17:10:c4:cb:ee:b4:e6:f1:49:37:
                    f3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:A8:FA:24:35:74:AD:83:20:3F:C4:75:A1:B8:FD:6D:56:98:E0
            X509v3 Authority Key Identifier:
                keyid:F5:53:B2:02:AD:5F:BD:3B:E3:EF:C7:F2:DA:69:13:7A:A6:A1:78:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9VOyAq1fvTvj78fy2mkTeqaheOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:af:42:39:ce:a9:5b:98:bd:30:22:9b:6b:74:f7:7d:b4:4b:
         7a:aa:ee:23:9a:36:36:87:af:ac:5a:28:4a:eb:05:4f:9e:00:
         bd:bc:2b:dd:6e:53:b8:f5:8e:3d:e0:7e:ae:83:a9:ba:29:c0:
         ac:64:38:57:ef:d9:29:08:dc:99:a0:93:f0:38:79:ca:97:f2:
         8f:cf:ba:9d:9e:91:03:ee:56:72:ad:58:30:56:06:71:03:c5:
         6a:bb:86:29:08:bb:2f:87:28:42:62:61:f9:e3:2a:88:e6:3f:
         e7:d7:50:72:f8:90:24:6a:7a:1b:bc:eb:56:08:e9:a2:1e:73:
         f3:ad:29:a3:be:a8:9b:39:3a:fe:32:88:62:15:fa:de:fb:65:
         56:9c:53:66:13:4d:89:5f:3e:de:a5:8d:c8:a4:17:47:5b:f9:
         2d:ad:15:83:2d:5d:9d:8f:11:14:65:0a:31:81:97:d9:48:22:
         da:ba:52:05:e6:00:b3:b1:fc:85:1a:be:59:c8:e9:03:57:97:
         f2:94:2b:7c:77:a9:6a:7e:d7:2b:00:ac:41:63:72:f5:57:eb:
         d5:d8:ad:94:c4:2c:cf:7b:17:5b:88:d0:bb:de:af:75:c4:7b:
         33:6e:70:00:00:1e:83:c4:29:eb:78:02:4e:8e:9b:1c:17:b6:
         55:5d:c6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:51:27 2026 by rpki-client