Error: rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
File:                     UJroMu1ribFqno9wWdMQAuvfVRY.mft (raw, json)
Hash identifier:          UfGlHtLNngrdepL9WB5Th0C+6KjmzrmtzoLtmP3j9B8=
Subject key identifier:   1E:10:DF:3A:A8:50:91:E2:08:F0:36:96:85:2A:56:40:32:F0:81:16
Authority key identifier: 50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16
Certificate issuer:       /CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
Certificate serial:       0329
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
Manifest number:          0324
Signing time:             Sat 10 Oct 2026 04:25:47 +0000
Manifest this update:     Sat 10 Oct 2026 04:25:46 +0000
Manifest next update:     Mon 12 Oct 2026 04:25:46 +0000
Files and hashes:         1: UJroMu1ribFqno9wWdMQAuvfVRY.crl (hash: 4VxtziyET2fCppipJOwCWcF/sl0HQk/kx1WB74Zrd2M=)
                          2: 25947A965EEF11EFA8CE8E84762E951A.roa (hash: w3FPrtTUNywICvBHUNi6Z9IDVeEht1kgjHG+aqy64j8=)
                          3: 0B46727E5EF011EF8D699F89762E951A.roa (hash: nreAgp5N7RBReJoLfOebgUnXd2HE0IWmlaF+azLEc+E=)
                          4: D1B2AC1C5EEF11EF93C62C89762E951A.roa (hash: vRmvo/WQ/7K1j/7ZFTOcVY6BLEhOIM6uf+eDFKl2Nlc=)
                          5: D2BD519A6F5F11EFB5A556BC762E951A.roa (hash: eDObOCF32CjsmNceS5K7zEOzteA210reg1RT/KbBTaY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652893AF, serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
        Validity
            Not Before: Oct 10 04:25:46 2026 GMT
            Not After : Oct 12 04:25:46 2026 GMT
        Subject: CN=6ac9be4b-9335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:f2:94:0e:0e:9c:43:af:69:a7:53:c5:5b:
                    be:0e:97:b0:62:13:bc:78:55:7f:18:cb:a6:7f:0d:
                    de:5f:6d:c1:e0:15:28:e1:91:48:b8:21:93:f9:7d:
                    98:48:04:2a:99:c4:55:75:82:64:f3:2f:bc:28:2a:
                    6d:1b:d5:7c:85:56:97:1f:d4:57:b6:1e:76:ed:e5:
                    15:37:61:e5:74:50:af:26:38:89:c3:40:18:fc:20:
                    78:40:d7:33:bb:33:71:f8:c4:4e:51:a1:d4:ad:93:
                    43:c8:1a:ab:29:1b:fd:5c:bf:f1:d4:ce:da:08:81:
                    82:e4:e6:78:c5:f0:bd:15:b5:f2:ee:09:ea:60:7b:
                    5d:32:c3:6f:fb:10:b9:c7:25:b8:f5:a3:54:e1:4a:
                    54:8c:0a:09:14:cb:51:89:e4:4d:81:42:b1:c0:4e:
                    df:d1:a1:28:1a:fe:f3:25:fb:43:d8:02:9f:c9:0a:
                    f1:6c:e2:05:84:fb:be:fb:c0:d1:63:7f:5d:9c:e1:
                    10:45:46:99:ea:ee:56:6f:9a:bd:74:43:aa:8a:55:
                    13:64:e0:99:e3:b6:1c:e0:31:48:e5:39:e3:4c:52:
                    2d:8b:4e:11:6e:71:38:f0:28:a1:59:86:9d:c1:23:
                    49:dd:11:4d:9a:e7:fd:8d:98:2d:0b:d3:26:97:83:
                    c6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:10:DF:3A:A8:50:91:E2:08:F0:36:96:85:2A:56:40:32:F0:81:16
            X509v3 Authority Key Identifier:
                keyid:50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:05:69:d3:76:ab:1d:2f:56:38:3f:59:22:a3:ce:7c:3b:47:
         a4:3c:35:13:2f:61:15:dc:c8:78:b1:5d:ca:ed:ea:5d:38:56:
         7a:b7:94:0b:94:6d:bb:df:f0:c8:ed:e5:d1:2e:ff:ee:ff:0e:
         d4:59:74:a6:26:28:27:fe:48:97:d2:08:0c:b0:66:dc:ed:58:
         d5:da:fc:54:6c:e4:55:5d:62:fb:93:e7:e5:3a:b5:ca:ad:71:
         72:f4:09:a0:65:b2:ec:41:c9:ec:94:29:de:7e:cb:4e:f8:07:
         6d:92:24:99:a8:90:6a:f3:7f:44:a8:70:6f:9e:06:b3:63:de:
         08:40:26:8e:14:9d:d2:fc:a9:96:84:a0:e1:04:14:8b:d0:d7:
         62:52:46:f7:1b:d0:12:a4:79:92:44:88:f5:85:47:bc:d1:05:
         fc:28:90:4d:8f:9a:9b:35:7d:d9:fe:c8:bd:20:81:73:5b:92:
         8e:4b:d2:0e:4c:82:e9:1a:df:21:90:d7:eb:12:da:8d:ca:e7:
         08:f9:be:ff:22:22:29:72:41:93:d2:50:0c:b0:bc:e1:65:50:
         d6:1a:63:95:63:e3:41:b9:93:32:01:21:34:51:db:13:5f:8d:
         30:37:d3:46:66:42:15:a1:92:cf:a3:44:cc:74:9d:30:46:ef:
         98:98:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:28:58 2026 by rpki-client