Error: rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
File:                     wMDnGZy4QKJJjB47pWdvngwGKGg.mft (raw, json)
Hash identifier:          XgZs+cdNq8pzcCKtP+6B7px6L3GahhuJi/lk8HgKV50=
Subject key identifier:   1D:2F:94:CD:4C:7A:3F:0B:D9:AE:B1:08:92:4E:72:3C:62:B4:CA:40
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Certificate issuer:       /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial:       0346
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
Manifest number:          0341
Signing time:             Thu 08 Oct 2026 04:19:30 +0000
Manifest this update:     Thu 08 Oct 2026 04:19:29 +0000
Manifest next update:     Sat 10 Oct 2026 04:19:29 +0000
Files and hashes:         1: wMDnGZy4QKJJjB47pWdvngwGKGg.crl (hash: ftxJFRxsZhK8cE7iyOVdfAdZlgCvAzwNcKa9MZRyN+Q=)
                          2: 9005CECEAE5411F0853AF8CFDAE4EC9C.roa (hash: YWZz4QWlH0Bj3OOamSSjFcO7qun04dQhqkzbk6gKKqQ=)
                          3: D2876104AE5411F0AC152FD4DAE4EC9C.roa (hash: kpP94D+u8/tcFFiU+q6BH1AoYrF/Io2l+lqQI9CxNX4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 04:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Validity
            Not Before: Oct  8 04:19:29 2026 GMT
            Not After : Oct 10 04:19:29 2026 GMT
        Subject: CN=6ac719d2-d2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7e:f5:09:8b:f7:40:2a:41:3f:eb:b7:de:85:
                    14:d4:b0:73:13:73:cf:56:5e:e4:8e:74:0f:ec:e8:
                    13:a4:dc:66:c9:60:e1:3d:0b:bc:26:a7:9d:7d:b0:
                    1e:78:b8:0b:c8:af:6f:e0:99:2e:39:66:31:da:c0:
                    fa:77:1d:7a:5d:3f:ae:04:a9:17:57:0c:b5:db:1e:
                    d7:c0:9d:a1:9d:40:06:87:e3:8f:60:9c:b5:54:83:
                    bd:4d:32:8b:18:a4:0b:e0:d1:f4:94:a8:4d:17:f1:
                    25:fe:6b:5b:07:03:54:a7:b5:34:46:0d:51:dc:2f:
                    ae:fd:fe:37:7d:2b:bc:8c:e6:ad:67:f2:5d:86:15:
                    cf:69:c5:3d:35:cd:b7:8a:a1:16:e4:f9:31:7c:ce:
                    6c:66:59:22:9d:9a:e1:ec:3f:c4:6f:54:e2:3e:87:
                    01:eb:a9:0e:78:9a:61:e6:cd:0f:17:ff:39:a4:77:
                    c9:69:4d:dc:ab:e4:8b:0d:bc:bd:fe:7d:b9:32:cb:
                    fc:32:2f:48:ae:c1:7c:98:d9:a6:ba:47:27:ba:85:
                    9b:1d:18:d6:8d:77:16:6b:7d:bb:f7:e3:74:1a:63:
                    fb:f0:92:17:6b:d9:70:a3:6d:02:44:56:0d:0b:3b:
                    eb:72:5b:ce:26:27:9a:26:54:55:ed:12:dd:df:b9:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:94:CD:4C:7A:3F:0B:D9:AE:B1:08:92:4E:72:3C:62:B4:CA:40
            X509v3 Authority Key Identifier:
                keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:02:38:e0:51:f8:2f:1a:cf:58:0a:f7:cb:09:41:6f:32:da:
         fe:15:df:c6:49:c5:aa:48:71:fe:ef:c1:53:a2:78:52:1e:9f:
         1e:71:d5:ea:4e:ab:e4:5d:20:d2:2c:49:3b:8d:43:3a:54:b6:
         43:b8:94:00:c5:f9:f6:70:e3:d0:9c:86:90:65:0b:38:ef:7e:
         78:df:88:0d:5d:d1:9d:b0:ba:59:a7:ed:2f:5c:67:15:ce:93:
         da:99:4e:a4:57:cf:e0:0a:97:dc:3c:4f:73:cc:26:9f:cb:5e:
         59:52:aa:81:b6:90:de:b2:11:00:3d:71:72:b9:53:d9:43:0f:
         72:25:f8:58:a5:30:dd:a2:a1:a6:a6:c7:0e:28:dd:98:c8:89:
         bf:e9:7a:66:d4:f3:62:b6:09:2c:25:73:26:14:e3:55:10:24:
         b5:9a:cb:38:61:3f:0e:32:a0:f5:d9:42:c3:62:29:ab:99:b5:
         95:f0:fd:e3:20:34:97:3d:c7:05:e0:07:f5:1d:b9:47:a4:fc:
         45:61:89:01:7a:cc:8d:79:34:98:d1:68:74:a5:6e:2a:49:02:
         d4:9a:72:5a:01:17:9a:f1:87:97:ff:7f:b0:e2:66:9b:b5:7d:
         fc:e8:5c:6c:ad:03:65:be:75:57:34:56:d4:39:00:e5:a3:8c:
         fe:6f:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:24:09 2026 by rpki-client