Error: rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
File:                     k84fICcYK4EpqwxxOo_1IcE9RI8.mft (raw, json)
Hash identifier:          Eg27WCAxekXV4NR0XyOslxkJYdXpVCpDD1mVQIEj9XE=
Subject key identifier:   39:BE:A9:EB:97:C8:91:63:6D:3C:42:D9:69:41:0B:71:54:76:C3:CF
Authority key identifier: 93:CE:1F:20:27:18:2B:81:29:AB:0C:71:3A:8F:F5:21:C1:3D:44:8F
Certificate issuer:       /CN=F365FB04AF/serialNumber=93CE1F2027182B8129AB0C713A8FF521C13D448F
Certificate serial:       03FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
Manifest number:          03F6
Signing time:             Tue 13 Oct 2026 03:58:56 +0000
Manifest this update:     Tue 13 Oct 2026 03:58:55 +0000
Manifest next update:     Thu 15 Oct 2026 03:58:55 +0000
Files and hashes:         1: k84fICcYK4EpqwxxOo_1IcE9RI8.crl (hash: m5h5/CqbQEnKuR5DVhcWQmYrpN6z1QGX7hlMBeRH/ro=)
                          2: 84F4D7E4C01E11EE96125668775412E6.roa (hash: foQPn6FWgsOZWx9YjKT409OmY84gXqjIzpo0LoTYpbM=)
                          3: 318B732EC01E11EE8B99BA67775412E6.roa (hash: EvtUtlYSfWZNzMNqGozZFQ05R7pmC383dcyBeyy04bo=)
                          4: B3968148BF7811EEB0ABC6B6775412E6.roa (hash: nQGeEEKitg0zBrxMzLb+bML7Bdg6QLf+TUFkV5DPzoE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 03:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FB04AF, serialNumber=93CE1F2027182B8129AB0C713A8FF521C13D448F
        Validity
            Not Before: Oct 13 03:58:55 2026 GMT
            Not After : Oct 15 03:58:55 2026 GMT
        Subject: CN=6acdac80-e8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:56:e3:82:54:ec:bc:cb:a8:3f:38:f1:a1:
                    67:b0:35:b2:51:0a:ff:c3:9b:30:78:d0:6e:7f:42:
                    68:dc:88:93:33:87:52:4c:e2:72:c9:ad:61:1a:dd:
                    fb:0c:43:23:6e:59:8b:52:e5:16:fa:5e:00:38:89:
                    f6:92:96:fa:30:8b:e3:5d:f8:43:1e:fc:3a:05:b8:
                    81:ab:8c:2d:f4:08:48:07:eb:81:e2:ef:05:ba:ba:
                    89:70:d2:40:e8:32:56:cf:5c:a3:6c:a1:4d:26:04:
                    b7:18:6a:9c:23:2a:18:38:64:c1:3c:2f:02:68:70:
                    4a:e0:5f:95:d6:3e:a4:f1:e9:c2:0a:99:7a:ae:5e:
                    d6:bd:d3:78:62:95:18:6a:69:8f:9d:85:aa:a6:89:
                    24:6c:db:89:6c:34:88:55:53:ca:0e:02:37:15:83:
                    e1:cf:fc:10:13:50:bc:c3:5f:bf:7c:ba:b1:d7:df:
                    4f:04:e6:2d:f6:bb:d8:5c:00:d4:25:29:ef:46:81:
                    3d:bb:bb:fa:6f:7d:ec:ec:a7:ca:f3:e6:c4:12:f7:
                    47:90:a7:e1:3d:a3:f9:f9:3a:c6:c7:ca:83:9e:dd:
                    7a:10:35:23:a9:98:c6:b4:85:93:fb:9e:38:53:df:
                    32:c8:82:10:42:0f:66:8c:71:da:31:6d:94:e4:cd:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:A9:EB:97:C8:91:63:6D:3C:42:D9:69:41:0B:71:54:76:C3:CF
            X509v3 Authority Key Identifier:
                keyid:93:CE:1F:20:27:18:2B:81:29:AB:0C:71:3A:8F:F5:21:C1:3D:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:75:f4:7f:1d:9c:46:59:09:d9:74:45:4e:e1:04:22:f1:30:
         6d:4c:42:f1:74:76:d6:57:f3:e7:18:8c:9b:6e:38:9a:33:79:
         cc:54:4c:8c:b7:8c:5d:f2:52:62:c0:47:3e:2a:bb:62:57:17:
         25:b1:9d:bd:07:c2:9a:29:04:b7:09:f3:9a:88:57:a2:2d:a6:
         d9:5a:fe:2e:7b:36:04:fb:bf:3a:90:70:c2:e3:55:a5:6c:c1:
         a8:13:d3:34:5e:f8:1f:e6:89:2a:21:84:4b:d7:17:81:0c:f1:
         79:01:e4:38:47:0a:47:40:04:55:67:b0:a5:ad:ed:07:e9:84:
         c1:e3:a9:38:5f:5b:89:66:32:5a:46:7d:3e:23:2f:7e:1c:ad:
         d4:d4:24:c9:c4:37:7a:58:3d:02:8a:70:6f:0d:c4:6c:28:8e:
         09:fb:cc:f7:c6:e9:dd:9e:48:b1:53:64:dc:3c:ee:35:26:a7:
         47:1d:1e:1c:c9:ea:0c:30:8b:bb:a1:6d:ce:90:99:28:60:88:
         cd:50:ee:c5:34:8b:01:97:36:1b:9e:f7:1f:ce:64:67:5c:46:
         8d:1d:a2:87:0d:7d:2a:3b:4e:aa:3a:e8:65:15:78:58:a2:e8:
         d5:87:66:9f:a2:3a:e3:93:a6:92:02:91:a0:db:20:14:a9:69:
         bf:71:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:48:54 2026 by rpki-client