Error: rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
File:                     RQb8pqpV74TTpMAErIOrtQvu07k.mft (raw, json)
Hash identifier:          UeBxwh/R5SwEooTIuyAeInrLERbovjsnzlNj0TWT2ms=
Subject key identifier:   E4:EE:48:A2:1D:06:44:7F:5B:5E:9E:1B:D7:72:1B:9E:47:3C:AD:02
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Certificate issuer:       /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial:       06C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
Manifest number:          06B9
Signing time:             Sat 26 Sep 2026 02:38:53 +0000
Manifest this update:     Sat 26 Sep 2026 02:38:52 +0000
Manifest next update:     Mon 28 Sep 2026 02:38:52 +0000
Files and hashes:         1: RQb8pqpV74TTpMAErIOrtQvu07k.crl (hash: ZFS+shS9kDIznL3Y3fh9AAzMvO42RD6JOGaEio0cELI=)
                          2: 290659E6874811F19AABACDDCE1D38B0.roa (hash: 9fBt8y0Xy6UZyIDddji6/rEcq1klSN+nmu/tW7BYzKk=)
                          3: 87B506F8874911F199E2E4E5CE1D38B0.roa (hash: 9tTxq1QACIuo30DQkCB9jHWoCiHO40cBdOCKojq+Ma0=)
                          4: 70DB8C14874811F180D694DFCE1D38B0.roa (hash: 7JSK8xsgw3knFJXcsAOvCA2IHW59t6BAODE2PhlWGB8=)
                          5: CC5C4AA6874811F1B341CBE1CE1D38B0.roa (hash: VSsF5uU9Anz9Ng2QWdkuSbSTD2t/84Z3tTY4CZH3wzo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AE0AF, serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
        Validity
            Not Before: Sep 26 02:38:52 2026 GMT
            Not After : Sep 28 02:38:52 2026 GMT
        Subject: CN=6ab7303d-d511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:c2:e5:bd:d4:ae:dc:6f:2a:d5:7b:8c:d3:
                    72:e8:70:4e:3c:27:29:42:cc:75:33:01:46:d9:ba:
                    ba:fe:3e:53:4f:06:0b:46:0b:e1:a5:b2:55:31:b2:
                    76:e1:8e:bf:87:82:d8:4e:76:c2:bd:c7:b2:5b:f2:
                    6e:9b:9d:2b:76:b1:8c:ad:2a:2e:7b:3a:cc:60:78:
                    b9:d6:7e:d8:ad:7c:ed:fe:70:07:d2:fc:55:8a:9a:
                    fb:4e:96:a0:3c:50:d0:e6:d4:18:f0:14:89:30:28:
                    97:1c:3b:bc:2a:58:0d:e5:d2:4c:80:89:4c:6a:16:
                    22:88:8b:59:24:b0:0a:bf:82:cc:49:60:a5:77:1b:
                    8d:65:64:51:e7:c4:39:26:07:c7:da:f6:83:0d:df:
                    16:c6:c6:b6:f7:30:28:51:3b:d8:90:0b:27:39:24:
                    80:d6:b9:4e:cf:da:3c:61:50:80:88:d8:56:31:73:
                    77:f2:9b:74:97:df:ef:3c:f2:84:15:c8:6b:98:fd:
                    40:70:01:19:5a:a4:19:70:c0:35:af:ae:44:dc:90:
                    46:9b:d0:94:e7:18:96:94:b5:03:e6:f8:b1:6d:4e:
                    f2:03:e7:9a:46:79:d8:38:c5:55:ee:48:89:31:20:
                    07:02:74:65:29:54:df:1b:6c:31:92:20:2c:92:76:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EE:48:A2:1D:06:44:7F:5B:5E:9E:1B:D7:72:1B:9E:47:3C:AD:02
            X509v3 Authority Key Identifier:
                keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:51:88:4a:0a:6f:97:3c:24:c7:6e:4b:d9:cc:83:34:8d:14:
         46:d3:4a:3d:6e:78:93:b9:b0:e5:64:ea:43:cc:3b:63:d2:71:
         ca:ec:f1:4a:41:a0:3c:34:7c:aa:28:6d:0d:ba:14:77:71:4c:
         13:0c:9d:8b:0a:59:23:32:0d:9d:ed:46:da:04:35:b4:c4:7f:
         1b:72:41:5f:35:b1:28:c4:1f:ab:ca:bd:0c:19:a1:ba:9d:04:
         a3:2a:47:36:0a:a2:05:34:7c:ce:29:68:fc:5e:5c:4d:de:d1:
         a0:cc:19:41:88:51:29:b9:3b:9a:16:b2:08:cc:4e:38:f1:81:
         9b:d8:ec:b7:01:d8:e2:17:be:af:90:22:52:73:31:fb:29:14:
         3f:f5:06:76:d8:28:89:6f:07:8c:be:f1:0c:cc:f1:46:7e:b2:
         12:93:ad:80:5e:42:fc:ce:7f:0c:00:db:06:1b:cd:4e:85:81:
         cf:25:34:8a:e8:04:f6:37:c8:94:6a:af:4d:17:5c:9f:e5:29:
         f0:1e:c6:d5:d6:ce:22:3d:b8:90:85:fc:55:86:90:52:af:4d:
         a3:98:d0:cf:cf:9a:04:94:c6:19:93:86:b5:1f:b9:3e:a8:0d:
         2e:17:ae:8a:47:30:b5:bd:65:72:1f:a6:b4:af:62:a2:29:ca:
         fa:ea:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:21:35 2026 by rpki-client