Error: rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
File:                     Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft (raw, json)
Hash identifier:          SgyW5i8HNQpcUSd0jRZdrBL0N5mocNJCzgiTa5Eb3LM=
Subject key identifier:   53:F6:0F:1B:B7:02:27:70:80:A9:86:F4:77:8B:98:02:85:65:A0:3D
Authority key identifier: 22:CD:6F:18:77:75:C2:3E:27:51:5B:2F:E3:80:82:E4:BF:EA:8F:F4
Certificate issuer:       /CN=F365AA12AF/serialNumber=22CD6F187775C23E27515B2FE38082E4BFEA8FF4
Certificate serial:       07CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
Manifest number:          07CE
Signing time:             Sat 26 Sep 2026 02:09:30 +0000
Manifest this update:     Sat 26 Sep 2026 02:09:30 +0000
Manifest next update:     Mon 28 Sep 2026 02:09:30 +0000
Files and hashes:         1: Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl (hash: Mw4rxvHELLmLv8jug2BBR4kdZf+/B5aUamy4YBiV5rM=)
                          2: B663D9A8C37B11EB8DB89456F8AEA228.roa (hash: BanY5OoiK/H0UyDozciFZEgNwlpeFk96ik1kdsHY5gM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365AA12AF, serialNumber=22CD6F187775C23E27515B2FE38082E4BFEA8FF4
        Validity
            Not Before: Sep 26 02:09:30 2026 GMT
            Not After : Sep 28 02:09:30 2026 GMT
        Subject: CN=6ab7295a-89fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:2d:3c:8b:76:c0:d9:61:c2:f0:1b:32:bd:
                    f2:06:86:42:ed:54:12:f7:64:fb:1c:2d:12:c3:25:
                    9d:da:3c:60:15:89:ba:b7:85:28:bc:28:c6:2f:cf:
                    74:68:e4:ec:78:fe:87:29:ea:9c:e3:ad:ce:8c:86:
                    da:e0:48:d2:c5:13:72:78:3d:d8:e4:ae:04:60:6b:
                    d1:fc:95:4b:66:3b:47:da:0c:e1:84:eb:26:68:04:
                    3b:28:04:58:97:55:d3:8c:57:db:3e:15:52:d6:94:
                    cd:f3:a7:66:8b:94:fa:83:7f:46:ce:b3:2f:2e:74:
                    8e:1a:71:5a:f8:2e:f7:5b:db:f1:a0:8e:82:a1:35:
                    06:fd:2d:f4:8c:ed:a7:ab:5f:2b:d5:d6:ae:45:ac:
                    f5:9d:a2:9e:0e:5d:6a:7b:43:3c:bd:89:3e:56:b8:
                    cf:52:81:40:28:bc:1f:6d:09:7b:66:fe:c2:55:55:
                    75:5e:31:e0:87:cd:0c:80:9e:b6:c9:14:73:50:81:
                    6a:f7:4d:66:5b:70:a4:e2:55:81:4b:19:f2:f1:0e:
                    e9:d6:3d:a2:6f:ad:80:8e:7c:ae:8b:14:c7:c5:a1:
                    7d:57:6f:2d:93:76:5a:98:05:7f:5c:b9:06:ee:e3:
                    07:79:44:1d:19:f3:b1:97:25:df:ef:59:e4:dc:a1:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F6:0F:1B:B7:02:27:70:80:A9:86:F4:77:8B:98:02:85:65:A0:3D
            X509v3 Authority Key Identifier:
                keyid:22:CD:6F:18:77:75:C2:3E:27:51:5B:2F:E3:80:82:E4:BF:EA:8F:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:03:52:1f:0b:e7:bc:c9:1b:38:e8:c3:44:70:9c:c1:39:1e:
         18:ce:d9:1c:8c:29:5b:b5:42:b2:9e:82:4e:66:67:92:e8:1f:
         a2:93:d9:6a:4c:35:74:c4:ce:ce:26:9f:c5:71:e9:1d:74:e6:
         77:11:8a:91:18:4f:48:3a:04:65:c9:67:f0:01:02:3b:cc:60:
         19:95:e1:96:1c:b4:5e:aa:57:4a:fd:37:6b:13:f6:62:84:10:
         b8:e3:55:95:ef:c8:b5:a0:29:27:63:b3:85:3b:ab:14:02:5a:
         a8:db:ac:cf:d5:bd:c0:29:33:24:82:fe:e1:99:a0:d1:a6:16:
         70:90:d5:be:41:b2:37:67:19:b6:b6:cb:13:07:d9:c0:01:b4:
         73:30:94:da:6d:20:62:32:53:fb:6f:d8:c0:7e:f1:76:e6:25:
         4b:82:2b:49:ae:78:56:cd:67:e7:aa:a2:e2:62:c8:b4:82:00:
         72:7c:e3:ff:8e:01:8a:6f:16:94:ee:a0:38:7b:e2:e6:9b:84:
         a3:33:79:9c:cc:6c:91:db:c3:99:2b:43:d2:c2:2b:21:28:dd:
         63:55:3b:9d:0d:0b:dd:75:91:56:24:7f:31:71:f6:ee:75:23:
         31:9c:5e:7d:2e:d3:e3:58:ea:9e:b2:4d:43:fb:b3:3c:92:55:
         00:ee:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:10:15 2026 by rpki-client