Error: rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft
File:                     6PGxJJvlwqpW85t1sE69AeTGnRM.mft (raw, json)
Hash identifier:          lAXbxA1wMaHB+8KH3EB0Ofis+torbFj0gJ35/LtTdyY=
Subject key identifier:   B8:E5:68:1F:56:29:1B:36:F8:EE:47:CB:42:DD:B9:D3:EC:D7:32:EB
Authority key identifier: E8:F1:B1:24:9B:E5:C2:AA:56:F3:9B:75:B0:4E:BD:01:E4:C6:9D:13
Certificate issuer:       /CN=F363BEDEAF/serialNumber=E8F1B1249BE5C2AA56F39B75B04EBD01E4C69D13
Certificate serial:       0307
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft
Manifest number:          0304
Signing time:             Tue 13 Oct 2026 04:30:17 +0000
Manifest this update:     Tue 13 Oct 2026 04:30:16 +0000
Manifest next update:     Thu 15 Oct 2026 04:30:16 +0000
Files and hashes:         1: 6PGxJJvlwqpW85t1sE69AeTGnRM.crl (hash: FmX9PfROVaaE1oL1S4qM0oTkPHTVP40GnHd9g51sYMg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775 (0x307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BEDEAF, serialNumber=E8F1B1249BE5C2AA56F39B75B04EBD01E4C69D13
        Validity
            Not Before: Oct 13 04:30:16 2026 GMT
            Not After : Oct 15 04:30:16 2026 GMT
        Subject: CN=6acdb3d8-9e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:68:0f:9d:6d:02:e7:f0:e1:f2:7d:f1:8c:
                    8b:ff:1c:52:4b:0b:31:c0:7e:18:32:0c:e5:c5:32:
                    d7:06:ff:03:e5:e3:bb:68:a0:cd:e8:58:40:42:bf:
                    1e:80:8e:af:6b:b6:4c:eb:f5:9c:99:66:3e:02:27:
                    64:16:f0:08:3b:b3:54:a6:de:91:95:66:ef:03:03:
                    1b:6b:42:c2:09:93:3e:2f:c0:28:c8:78:27:f3:fe:
                    a2:7e:fc:92:c4:74:f5:ba:ed:9a:02:b3:32:d3:d9:
                    82:84:54:1c:92:b4:e8:04:f5:c6:c6:e5:1f:aa:cf:
                    97:77:97:2b:7a:ba:22:83:67:8c:57:af:c7:b9:19:
                    be:11:a5:d6:e7:c1:1b:02:87:63:81:0b:13:f7:cb:
                    e8:85:68:4d:3b:77:53:99:33:74:10:bd:a0:5d:b0:
                    7e:67:aa:6b:f6:2f:75:4d:4f:fb:09:64:0c:dc:64:
                    a0:3b:26:32:a4:23:7c:90:00:52:26:71:46:52:b2:
                    ca:9a:d2:16:5d:8f:49:67:db:33:87:3a:ff:7f:1f:
                    64:e3:57:bd:ec:21:ea:47:04:6d:a2:18:3b:f4:e5:
                    77:00:87:2b:62:d8:0b:74:00:b0:9e:b8:19:f6:ac:
                    12:f2:3b:a5:ee:d5:1e:bb:2b:6f:35:4c:0a:e2:6f:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E5:68:1F:56:29:1B:36:F8:EE:47:CB:42:DD:B9:D3:EC:D7:32:EB
            X509v3 Authority Key Identifier:
                keyid:E8:F1:B1:24:9B:E5:C2:AA:56:F3:9B:75:B0:4E:BD:01:E4:C6:9D:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:42:86:13:0e:df:25:7c:1d:25:5b:74:82:a7:56:54:53:
         be:b4:f4:e5:6f:15:1a:76:93:03:ca:cb:b1:5d:cf:3e:a7:16:
         c5:69:22:c5:13:0d:6b:42:b5:67:fc:e0:4a:da:e8:8d:6f:f9:
         d3:31:a1:fc:78:fd:8a:e9:9d:78:b8:3d:56:66:ae:53:14:55:
         3f:22:a8:62:ff:b7:57:c7:d3:09:7d:88:45:76:a7:5d:f2:d7:
         27:e5:3c:b5:8a:3d:7e:0f:ce:ee:36:4b:bd:de:4b:47:cf:dd:
         7f:58:70:81:8c:cd:13:6d:b0:b6:ec:6b:43:f9:fe:e6:2f:2a:
         1b:a0:d8:c3:a2:c4:00:37:ad:fb:21:52:f6:38:77:28:4b:32:
         47:23:9c:94:b2:3d:18:80:70:e1:26:17:62:0a:21:ad:bd:80:
         05:68:52:b6:ae:8f:12:47:a7:42:b9:93:44:e2:97:fb:40:44:
         08:60:43:83:cb:24:3d:db:4f:a7:8c:83:5a:b5:c2:f0:23:de:
         f0:6e:04:8a:a9:b5:b5:bd:01:d2:17:4c:94:65:ba:e9:dd:31:
         de:bb:16:ee:43:83:46:e2:10:20:ed:de:08:cd:49:9a:cf:1f:
         77:5f:78:91:de:66:5e:a0:39:7a:ca:ec:33:65:22:79:56:db:
         26:60:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:19:22 2026 by rpki-client