Error: rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
File:                     y4hYdSezg5FswLHYhmZTwzQx5F0.mft (raw, json)
Hash identifier:          jHbZq+W9hFY7TQWG3l+GceWAd6xyZTiAALBhIv9Xbi0=
Subject key identifier:   27:5E:13:07:A9:DC:AD:0E:1B:19:7F:9E:FC:DF:5C:4A:6D:C0:A7:36
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Certificate issuer:       /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial:       097D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
Manifest number:          0976
Signing time:             Sat 03 Oct 2026 01:45:06 +0000
Manifest this update:     Sat 03 Oct 2026 01:45:05 +0000
Manifest next update:     Mon 05 Oct 2026 01:45:05 +0000
Files and hashes:         1: y4hYdSezg5FswLHYhmZTwzQx5F0.crl (hash: n/KwaLEv0HYF/gUn8slKriqoQpCde/26wcJ3x37/Dmk=)
                          2: 7780EF6C630A11F180A1E4B2CE1D38B0.roa (hash: fkIhbGcLK27MDR00HJfXuZdrNmz7WeoBwxqN+OBnQWA=)
                          3: 24B727805CBA11F0A0DBD87DDAE4EC9C.roa (hash: URhpC1wmpxyjiKTCACXMGSDga5+OKiFUmrZJhnhMHo0=)
                          4: 413B19025CBA11F0B3AC387EDAE4EC9C.roa (hash: huhnDHM3c28d4RK7MjVi9V09R1xz37R9RDv4groETcU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429 (0x97d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
        Validity
            Not Before: Oct  3 01:45:05 2026 GMT
            Not After : Oct  5 01:45:05 2026 GMT
        Subject: CN=6ac05e22-2194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4a:84:e5:70:55:7c:d6:7a:0c:ce:97:c4:d2:
                    17:74:7b:48:75:0a:bb:62:53:33:41:02:3e:34:30:
                    ad:d8:7c:a6:64:11:d4:0a:bb:63:4f:b1:7a:33:b5:
                    39:73:2d:5a:ac:b9:c9:2c:97:1f:67:d3:84:87:ba:
                    e5:32:31:61:f0:15:71:24:38:7b:a2:b2:ca:14:8d:
                    5d:2e:6c:2e:7e:72:89:04:a9:fd:82:89:e5:b0:b7:
                    72:52:6e:47:12:dc:ba:e8:c4:5e:0f:91:ca:54:6d:
                    42:d6:d7:02:e4:0f:24:70:51:cb:cd:93:84:42:16:
                    11:b2:bc:c2:98:d9:69:83:e1:a9:85:fc:cd:8e:62:
                    fd:ba:05:41:21:34:da:cf:3b:59:c1:4d:18:da:eb:
                    8d:da:fc:92:a6:c0:df:7f:7d:2e:00:99:76:89:bd:
                    bc:18:44:97:43:df:6a:d2:ec:3d:05:97:7f:07:23:
                    2d:c5:0e:95:91:15:c5:57:fa:16:a6:9b:3d:9e:b7:
                    c6:0e:b1:dd:1d:1e:2e:25:97:df:ee:0d:fc:ab:4e:
                    74:0c:6a:1d:45:bc:c6:0a:03:13:fa:5a:d6:6e:be:
                    c7:ca:fe:51:e3:a5:1c:10:c7:56:62:8a:af:46:e6:
                    47:76:e7:21:d6:d5:36:e1:d6:4d:27:9c:84:74:6f:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5E:13:07:A9:DC:AD:0E:1B:19:7F:9E:FC:DF:5C:4A:6D:C0:A7:36
            X509v3 Authority Key Identifier:
                keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:87:c7:18:36:07:37:74:3f:56:31:cb:aa:2f:7b:2b:f7:f4:
         8d:03:af:ff:6a:5c:75:11:fc:e3:a2:f3:89:d9:e6:af:25:9d:
         cd:e9:b1:3a:5d:6e:8b:88:9e:bc:85:29:60:4e:59:5f:f6:29:
         46:16:67:2c:31:bc:79:c8:78:e3:ac:8b:cf:39:19:62:8c:b5:
         77:81:59:69:94:0d:40:c1:43:2e:76:c6:6f:85:eb:f0:97:f3:
         4b:43:db:1c:e2:40:25:2c:de:4c:5f:97:58:db:25:19:eb:c5:
         b6:68:3a:85:5d:f2:cf:88:9c:d9:2a:da:6d:69:22:f8:dc:31:
         cb:b0:ed:3a:f8:63:2f:9c:e0:47:af:bb:58:e3:ea:f9:1b:df:
         36:66:8d:ca:ed:0f:a8:28:66:81:1e:a6:02:36:11:42:a4:23:
         56:16:d3:65:3b:70:13:a9:52:e8:71:92:31:9a:08:11:fe:12:
         70:d6:e1:98:4d:25:ee:d8:2b:63:94:5b:c2:4f:ec:cd:24:3f:
         9d:35:8e:cc:46:18:5c:0d:03:03:0d:d8:b6:6b:14:0e:45:1e:
         e3:c0:e0:ba:11:11:a0:81:a9:51:d4:1a:b0:1e:eb:c2:72:22:
         3a:dc:ed:60:96:45:34:fb:c8:4f:81:c0:74:e5:b1:4c:96:04:
         71:fd:ab:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:07:29 2026 by rpki-client