Error: rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.mft
File:                     OeBYqNzoFjByS4lzRvoEsTIUauc.mft (raw, json)
Hash identifier:          uB7F5J63uOh2NY+lmGZGwq8JotEzmL+U5w/R43LB7uY=
Subject key identifier:   A4:94:56:32:58:F9:BC:D2:2B:BA:81:46:55:71:EB:AE:78:FB:86:11
Authority key identifier: 39:E0:58:A8:DC:E8:16:30:72:4B:89:73:46:FA:04:B1:32:14:6A:E7
Certificate issuer:       /CN=F366D16AAF/serialNumber=39E058A8DCE81630724B897346FA04B132146AE7
Certificate serial:       97
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OeBYqNzoFjByS4lzRvoEsTIUauc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.mft
Manifest number:          95
Signing time:             Sun 11 Oct 2026 05:39:26 +0000
Manifest this update:     Sun 11 Oct 2026 05:39:26 +0000
Manifest next update:     Tue 13 Oct 2026 05:39:26 +0000
Files and hashes:         1: OeBYqNzoFjByS4lzRvoEsTIUauc.crl (hash: TZuevsU33HXIeQX4e29XJz/kpahuHhHBSFPwZU50h2k=)
                          2: D4291DAE76C211F18C647DD1CE1D38B0.roa (hash: zSwihuhEJdulvN21l8njAbqFGOfBgoWTW5PKrcUvFSY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OeBYqNzoFjByS4lzRvoEsTIUauc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366D16AAF, serialNumber=39E058A8DCE81630724B897346FA04B132146AE7
        Validity
            Not Before: Oct 11 05:39:26 2026 GMT
            Not After : Oct 13 05:39:26 2026 GMT
        Subject: CN=6acb210e-a3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:ea:f8:bd:da:19:cc:0e:d1:fa:b1:2a:95:
                    c0:33:b4:5f:35:c6:97:8a:57:bd:19:c6:ed:ba:37:
                    fa:47:f1:6b:c0:36:10:7b:a8:92:4e:89:33:1a:c5:
                    13:94:e4:18:15:1d:e0:2b:16:07:0d:5e:53:91:e2:
                    8e:6d:fc:59:b3:62:a1:a9:66:1b:70:68:c3:28:41:
                    ca:50:fa:43:02:26:53:e4:8b:47:74:dd:25:ce:e1:
                    b4:b8:4f:af:89:b1:f3:c1:cd:5c:d7:f0:a0:e6:c3:
                    fd:e7:cd:32:2f:0a:a8:10:98:5c:8f:a4:eb:3a:9a:
                    f8:69:6d:2c:ed:60:8b:39:a6:9b:d0:7f:1f:79:2b:
                    cb:eb:81:4a:39:b2:59:b5:b4:5c:88:a2:df:6e:8b:
                    7c:17:9b:dc:02:a9:ff:dc:f8:0f:71:18:04:fa:7e:
                    90:16:c4:17:c7:20:db:76:4e:cf:93:bf:df:d3:f8:
                    3c:47:da:53:ff:cc:eb:68:03:90:78:91:d1:91:95:
                    cf:7c:41:32:8c:52:3d:7b:13:b0:85:a3:17:1d:85:
                    82:44:52:43:44:9e:60:85:fd:62:20:11:51:ca:64:
                    b2:cb:ac:62:7e:2d:d1:a4:2a:e6:23:ed:bd:36:45:
                    d3:e2:b8:65:c1:b9:bc:5d:dd:ef:69:7a:4a:eb:83:
                    5b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:94:56:32:58:F9:BC:D2:2B:BA:81:46:55:71:EB:AE:78:FB:86:11
            X509v3 Authority Key Identifier:
                keyid:39:E0:58:A8:DC:E8:16:30:72:4B:89:73:46:FA:04:B1:32:14:6A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OeBYqNzoFjByS4lzRvoEsTIUauc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:93:3f:c8:32:9a:68:0b:9f:4d:4d:be:17:bf:57:1d:46:e9:
         8b:f5:d3:e5:18:f1:12:3d:b0:eb:f8:ff:ce:66:61:7a:1a:d7:
         f3:0d:52:bd:12:51:8b:44:f7:a0:05:d1:9f:93:8d:fd:76:ba:
         dc:6d:59:77:3d:2f:d1:19:f9:aa:82:94:3a:ce:9b:8d:86:40:
         3f:0a:f9:f6:a0:a5:64:0e:3a:42:6c:4b:f6:48:e5:f7:8e:4c:
         3e:38:10:c4:9b:1e:66:fd:ae:0b:5b:8f:4c:55:c4:5a:9b:93:
         ed:21:68:4d:df:66:24:42:4c:56:1f:8c:bd:32:0d:a9:48:51:
         dd:42:f3:9f:41:01:0d:4e:e7:4c:d5:bf:ca:53:c6:7b:85:5f:
         e5:1a:9b:19:53:aa:9b:d9:e3:17:3e:ab:20:24:37:61:72:e4:
         bb:38:78:83:a2:68:4f:49:e7:2d:16:cc:d9:55:81:09:68:53:
         8c:fc:4e:76:c5:88:16:16:50:ed:d5:d0:25:2b:1a:b1:e1:66:
         ba:80:57:83:1a:51:53:47:e5:43:9e:8e:fc:a4:92:a5:5d:e2:
         24:72:78:41:c3:7b:73:40:58:17:d6:1f:c1:f3:b0:91:21:90:
         f6:11:f8:8a:ee:2d:8d:5e:f0:31:c7:b5:0f:37:42:3f:8d:c0:
         ee:0b:a1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:13:18 2026 by rpki-client