Error: rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
File:                     1DoqVLLNNnZCx2hmihOEa4nsje8.mft (raw, json)
Hash identifier:          iaqrvdRNLulhmhVMKZEO0qcRkvqr9vT9vEFkzQW8Rcc=
Subject key identifier:   3C:02:38:6D:0E:EB:03:0C:1E:87:5B:6B:E9:D0:91:8C:45:83:5B:5B
Authority key identifier: D4:3A:2A:54:B2:CD:36:76:42:C7:68:66:8A:13:84:6B:89:EC:8D:EF
Certificate issuer:       /CN=F364EAB0AF/serialNumber=D43A2A54B2CD367642C768668A13846B89EC8DEF
Certificate serial:       032B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
Manifest number:          0329
Signing time:             Fri 25 Sep 2026 04:20:31 +0000
Manifest this update:     Fri 25 Sep 2026 04:20:30 +0000
Manifest next update:     Sun 27 Sep 2026 04:20:30 +0000
Files and hashes:         1: 1DoqVLLNNnZCx2hmihOEa4nsje8.crl (hash: 7QZ525/trDdWu/FhV6nIby7MnLsd2UEEVHQlmdDfoA8=)
                          2: 7DA8929649D011EF8540F4B5762E951A.roa (hash: YovCsrPwXRshmsWk3A69TUGehERZxXiw2xy+oTe5v1Y=)
                          3: ECC95BD248EB11EF9E6AB0A8762E951A.roa (hash: oLh1HXERxgDkZE8Kx15N1v8Oh2muKtEvQ5qn9c925Ag=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364EAB0AF, serialNumber=D43A2A54B2CD367642C768668A13846B89EC8DEF
        Validity
            Not Before: Sep 25 04:20:30 2026 GMT
            Not After : Sep 27 04:20:30 2026 GMT
        Subject: CN=6ab5f68f-3679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:25:bf:66:80:86:f8:c1:fe:7f:ea:9a:71:
                    07:c5:a1:06:8c:2e:53:f9:51:12:85:e2:8f:15:92:
                    f8:53:44:ac:c1:e6:77:fe:82:86:36:fa:34:89:2d:
                    d2:24:24:77:ea:7c:26:81:12:ed:8b:ff:b5:b2:f7:
                    85:ed:14:81:82:f8:0f:b0:e1:5b:92:5d:93:63:1a:
                    05:eb:0c:b4:46:e3:fc:26:77:a3:b5:a2:45:9e:c1:
                    6c:c5:0e:4d:a0:dd:66:f8:92:6c:cf:ae:41:54:8c:
                    2a:77:99:0c:c6:c6:5e:9f:54:5e:08:fb:75:c5:0f:
                    90:bc:f4:d8:21:46:a3:78:3c:41:13:2e:95:3b:80:
                    1c:cf:f4:0b:34:f1:9c:e2:6d:c3:c0:01:59:e3:b4:
                    a1:20:da:86:dc:e4:25:ad:0d:28:ca:b4:ef:1c:9e:
                    f7:41:5b:bf:5a:9c:ea:b2:44:b2:73:e3:c5:f0:5c:
                    69:7b:c8:de:ce:e3:15:4d:c7:41:7e:d0:89:4a:87:
                    07:69:30:a3:1d:76:30:16:f5:7d:47:d2:ae:b1:8d:
                    e8:57:85:d3:d0:d5:0d:c5:7e:e0:6a:f1:3f:89:fb:
                    20:1f:f4:9f:67:05:6d:c0:62:94:29:06:f7:d8:7e:
                    a3:9b:71:00:d1:18:e7:05:cc:aa:1f:46:f9:03:1f:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:02:38:6D:0E:EB:03:0C:1E:87:5B:6B:E9:D0:91:8C:45:83:5B:5B
            X509v3 Authority Key Identifier:
                keyid:D4:3A:2A:54:B2:CD:36:76:42:C7:68:66:8A:13:84:6B:89:EC:8D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:f3:2d:4b:b1:19:b4:f8:8a:67:0f:cc:fb:68:31:da:44:
         4a:a7:15:af:ce:cb:44:b0:01:69:96:54:36:07:e2:cf:65:ca:
         a2:37:0b:ab:5d:be:9d:3a:a9:fc:50:58:e5:c8:fd:5e:26:ac:
         94:86:12:02:f5:0b:f7:d2:cd:f3:6a:44:29:f2:2c:4f:24:06:
         ef:e5:9f:1e:51:68:65:46:10:7f:59:fb:a9:27:16:84:b5:c6:
         63:86:8e:63:30:19:74:fc:3a:ac:b4:81:59:c1:86:5a:cf:7e:
         e8:45:e9:27:a9:14:7d:90:b8:03:3c:bd:42:bd:c3:23:d6:ed:
         25:6a:c2:5c:a3:cb:c2:50:de:97:14:14:9f:c3:77:00:98:50:
         dd:c9:e1:45:68:c0:2f:dd:24:de:2b:c4:f6:6e:27:82:02:ba:
         d9:91:37:9a:e0:ae:25:e5:c0:97:cf:b0:83:51:5e:30:e2:24:
         0a:da:60:c1:ec:f4:00:26:a4:f7:ad:b1:0b:9a:de:18:c6:b5:
         8a:0a:e7:1e:7d:2a:30:ae:c0:c6:07:8b:ae:39:ee:67:3e:b2:
         e1:93:85:be:50:bb:80:86:b3:8b:41:1f:e7:8f:c8:5e:a2:6c:
         cb:25:a5:b0:b5:a4:34:55:b2:56:f3:c8:05:ec:d5:b1:32:9c:
         c5:5f:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:49:03 2026 by rpki-client