Error: rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File:                     3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier:          9XfjyjJ9rXFnj6iigjKJcgRQg4v1npiLhZ/whxlo/A0=
Subject key identifier:   B5:1C:9B:39:BE:A6:7B:26:76:0C:B4:83:FB:B0:C3:42:56:82:91:DA
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer:       /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial:       04DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number:          04DA
Signing time:             Sat 14 Nov 2026 03:34:22 +0000
Manifest this update:     Sat 14 Nov 2026 03:34:21 +0000
Manifest next update:     Mon 16 Nov 2026 03:34:21 +0000
Files and hashes:         1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: 93V4gQU8N9dqlw7ZND9+gYk0GlWYacA+Z9ovjfpzvGE=)
                          2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
                          3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
                          4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
                          5: 621AA83C2CED11F1BD66A280DAE4EC9C.roa (hash: aW8sKhCXcHPjuzp5UNhH+Nw6XIrL1+PMzKJWjjR5zDM=)
                          6: F826BE522CEC11F1B5DF3280DAE4EC9C.roa (hash: fi+fPzRV49+4XUClZdX633bw6RHfPVBTJln+gH9qYnw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1247 (0x4df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
        Validity
            Not Before: Nov 14 03:34:21 2026 GMT
            Not After : Nov 16 03:34:21 2026 GMT
        Subject: CN=6af7d6bd-24c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:46:5b:88:91:5e:48:51:29:e5:1b:4e:6c:
                    02:88:1b:af:61:ac:a6:f6:88:cc:3d:25:e5:4f:e3:
                    5a:b2:c0:94:ca:5d:ab:ae:dd:2b:c6:65:2f:a7:4d:
                    a4:b2:6b:10:05:88:89:59:83:5c:2a:0d:37:8a:eb:
                    36:ed:d0:00:49:6e:f6:14:b4:8f:fd:6a:2d:43:ea:
                    e6:94:42:fb:5a:7b:d0:2d:53:15:79:f8:dc:d6:49:
                    76:b6:ea:b4:f5:e2:c8:73:94:95:a6:4d:56:45:35:
                    ed:f6:4e:db:d7:6a:fb:d7:ad:10:2a:6f:6d:59:99:
                    08:ff:78:c1:c7:9f:53:d1:44:05:bc:c3:71:ec:40:
                    e7:5d:de:15:7c:ba:21:75:d2:ef:bc:d7:ad:c4:55:
                    d9:28:d2:fb:c2:91:82:7d:2c:e2:8c:ad:0d:99:17:
                    82:83:f3:90:2a:52:5e:25:14:f6:07:cf:30:44:8c:
                    92:fc:9c:8c:3c:e0:43:ce:58:69:e2:68:b6:68:7f:
                    b0:0c:f4:9c:96:0d:7b:17:db:2f:21:59:dd:16:40:
                    90:8d:be:51:20:6c:ef:a3:81:49:cc:5f:ea:9c:08:
                    20:65:43:0a:d6:17:94:b7:a2:e6:5c:c7:76:84:6a:
                    b8:71:04:e4:94:61:42:43:b9:b7:c9:3f:0c:b1:25:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1C:9B:39:BE:A6:7B:26:76:0C:B4:83:FB:B0:C3:42:56:82:91:DA
            X509v3 Authority Key Identifier:
                keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:40:7c:64:94:9e:a5:86:7c:e8:91:c6:8e:0c:01:1a:7a:dd:
         58:15:80:ad:f9:94:2b:ed:8d:03:73:81:04:f2:79:a5:7c:d0:
         66:b9:89:e0:23:06:58:74:02:64:75:b3:21:fc:5d:a1:2e:36:
         72:67:4f:d9:8a:4a:6d:b8:a8:18:18:74:b4:a1:13:00:e8:cd:
         be:34:38:49:20:c6:ae:2a:06:a6:1a:81:b5:67:81:69:62:c0:
         c3:0d:1b:6a:57:da:5f:dd:10:fe:9b:ae:3e:a2:1a:a5:2c:45:
         91:76:66:d6:dd:43:d5:71:eb:e3:f5:a2:d9:30:dc:60:e2:83:
         fc:65:d6:08:ad:97:94:ab:aa:3c:f6:8a:28:fb:70:5e:8c:8e:
         2e:12:6a:65:a5:68:f4:74:ab:02:07:a1:aa:17:89:a8:4a:2a:
         c6:6c:63:a7:7e:42:85:8c:cc:06:cc:a3:20:fa:fc:4d:14:19:
         2a:61:19:70:a2:a2:77:62:4b:e6:c1:40:4a:db:49:bd:ff:09:
         5b:15:c9:ec:5c:47:be:22:c0:5e:a8:70:3f:2a:a9:56:cb:31:
         47:07:89:9c:6d:a3:a4:59:80:35:c8:1a:1d:51:91:52:01:64:
         1a:2f:8a:74:9b:b1:9f:ab:33:fc:4a:f7:8f:df:0e:88:4a:bc:
         a6:10:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:45:46 2026 by rpki-client