Error: rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
File:                     w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft (raw, json)
Hash identifier:          jhesEdVhBR4qxBZevFb+YkmoZavihRgAlfWdXvfiG/I=
Subject key identifier:   B2:AF:99:B6:91:09:25:F4:65:F1:D3:98:4D:ED:05:96:7B:8E:67:38
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Certificate issuer:       /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial:       0421
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
Manifest number:          040E
Signing time:             Sun 11 Oct 2026 03:58:37 +0000
Manifest this update:     Sun 11 Oct 2026 03:58:36 +0000
Manifest next update:     Tue 13 Oct 2026 03:58:36 +0000
Files and hashes:         1: w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl (hash: dPn7DQUxTZNwraadGmBoSOu9crOy0ryN6w5B/MAiLT0=)
                          2: 3B737D98EBF411EF92D3FFB8762E951A.roa (hash: pQmnrQ6q9u7W7aARZAIAyyTTaaaxPxFrGBxw2K6Ihk4=)
                          3: 2A9C4F82DB0E11EFB5D5F65C762E951A.roa (hash: NVW3v8GbViH2PMxW79Km4bUGB7n8gRCMb5uUvG/8ofI=)
                          4: 6878DD1E75A311EFB23C5586762E951A.roa (hash: VfrrZSL02g15laDfJe6nTjgG6CAFugYBtX2yjpd5cSA=)
                          5: 136813A8AB0911EFAABAE596762E951A.roa (hash: VwYAHtWC0OwThF8CtKnnBfqtYg/dU1jKuhLvi6pyo64=)
                          6: 3D3FB4EEFD8C11EFBEF68376762E951A.roa (hash: WZ+UxNc2jtefkjQfrz80B/fFxtNwMmYTFahRt37o5SQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BE89AF, serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
        Validity
            Not Before: Oct 11 03:58:36 2026 GMT
            Not After : Oct 13 03:58:36 2026 GMT
        Subject: CN=6acb096d-6440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e2:2e:12:fb:6d:91:e6:ec:a4:c7:d5:13:be:
                    c8:c9:db:18:e5:0e:a7:81:ac:c7:56:56:d4:36:9a:
                    0f:8d:af:84:a6:72:ec:ce:0a:13:08:1d:be:0c:07:
                    91:f4:a8:19:f9:65:b8:b9:80:02:f8:29:1c:ff:83:
                    73:cb:96:3d:3c:41:c6:a1:c6:94:44:3b:d8:77:e2:
                    69:5c:b7:93:4a:de:40:8e:c3:f0:a9:17:f1:55:d7:
                    0b:4a:9b:0b:82:a1:53:57:1a:e4:1d:e9:90:4b:30:
                    1c:78:fb:50:76:68:1d:30:5d:43:78:ac:3a:0a:80:
                    6e:8a:aa:fc:4a:cb:5d:7b:df:c8:68:25:e8:88:f3:
                    53:b7:5d:fe:67:e0:31:17:81:4b:84:9b:46:60:b1:
                    b1:fe:28:7a:52:0a:0c:ac:37:aa:36:2e:8e:6a:0f:
                    be:49:b2:df:c6:bb:6d:6d:cd:ac:63:0c:b2:73:e8:
                    5b:e4:10:e3:c5:7a:55:9b:f7:8f:79:16:89:7c:17:
                    04:24:ff:fe:c5:48:2d:42:ee:9a:04:d0:2a:4e:6e:
                    ea:0c:bd:b3:6c:3d:79:df:7b:ee:88:cf:b2:89:20:
                    5a:12:33:c1:8f:44:43:32:5f:65:5f:12:b6:fb:1d:
                    f3:75:21:1c:e5:d7:ed:8a:4d:8a:ad:b9:df:12:79:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AF:99:B6:91:09:25:F4:65:F1:D3:98:4D:ED:05:96:7B:8E:67:38
            X509v3 Authority Key Identifier:
                keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:39:77:7e:13:dd:5b:7f:d7:72:26:4c:f8:80:5c:44:9f:86:
         e2:a3:38:94:ec:10:96:f1:15:c1:ac:c4:ab:d6:62:72:82:43:
         e4:0e:95:79:46:e9:41:0e:9f:76:61:9e:c9:4f:c2:57:af:4b:
         c5:e5:32:f9:f0:70:b4:b3:46:fb:10:ee:86:59:c7:8a:95:8e:
         81:8f:3a:36:77:32:7a:94:5d:8a:16:95:b0:3b:f0:89:4d:80:
         2f:4d:49:a1:c8:88:b6:f6:23:46:35:61:2e:bb:ab:28:a6:05:
         ab:b7:68:75:a4:de:c7:87:d7:9a:5c:45:92:9d:e0:cc:bb:ab:
         a8:aa:ef:03:0c:7f:ec:e4:42:60:b5:fc:71:83:40:79:65:01:
         4a:43:d4:fc:0c:4c:19:57:ee:35:a9:1e:a7:c1:d9:7c:ce:ff:
         20:ed:8f:58:fc:92:8e:e0:2a:6a:82:d1:a6:80:f6:2b:02:61:
         a5:ec:b2:08:a0:85:8c:4d:80:29:0f:eb:44:79:6b:c3:da:da:
         d0:7b:80:28:33:b8:de:40:a9:9a:68:ef:4b:f8:7c:87:ff:f8:
         70:a6:d2:1f:2b:74:fb:2a:2e:6e:81:b0:6e:92:f9:6c:11:c2:
         80:88:54:91:a9:a6:b1:72:64:5c:d0:5b:42:2c:94:13:c9:46:
         4b:76:d0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:53:19 2026 by rpki-client