Error: rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
File:                     Wo8buWCAiFj8QkqfycBtSBLbpck.mft (raw, json)
Hash identifier:          0I4gREFrtIOLlkkjqseQgTL4WC4zykocX2JZdaHZTmQ=
Subject key identifier:   00:56:F0:2B:8B:F0:0C:B0:FF:37:45:E9:D8:B0:3F:61:EE:44:E7:02
Authority key identifier: 5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
Certificate issuer:       /CN=F3674376AF/serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Certificate serial:       0181
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
Manifest number:          0175
Signing time:             Sat 26 Sep 2026 05:11:17 +0000
Manifest this update:     Sat 26 Sep 2026 05:11:16 +0000
Manifest next update:     Mon 28 Sep 2026 05:11:16 +0000
Files and hashes:         1: Wo8buWCAiFj8QkqfycBtSBLbpck.crl (hash: hbrTCdpvxXeFegsjeOdHuPnN968sIdx5nYg7jS4435Y=)
                          2: 6BB0CB74A5A711F088912BE0DAE4EC9C.roa (hash: kB1JbNoc3dBbzjmuhT2h2aENGY9tktmvJCxAT5G6HGQ=)
                          3: 348ADDB6DD0A11F0BC9CCCBBDAE4EC9C.roa (hash: N22acFSQsXyjxhKorUA5XDVJ5jLIt1Un/EsFZoIoznw=)
                          4: C684B0C2DD0811F081D755B3DAE4EC9C.roa (hash: YKBW7tCBuCKn9NrFC1UoBGi4Bbn0t6tjegBFUHs2asc=)
                          5: C12F71DCA5A611F0BB0100DCDAE4EC9C.roa (hash: w1R/Z75m4LwLFTF/R9uWaQzBzmjS2340Mo7wnJRbDMU=)
                          6: 8C8563DCA5A711F094950AE4DAE4EC9C.roa (hash: uGJxn0kxFVH+xnXPU0sjbovtNrHfisJTKGGgqWfUSLs=)
                          7: 4C01EE48A5A711F0986AEDDFDAE4EC9C.roa (hash: A7s5OPs1SpF17uQimMrgNTFUslRSjoE44d+zkAoaVyc=)
                          8: 24DDD1C4A5A711F09981CADFDAE4EC9C.roa (hash: VMl5oou874hFWogxEQIYM0u11ETAx2cwP1WKWFliKgk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674376AF, serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
        Validity
            Not Before: Sep 26 05:11:16 2026 GMT
            Not After : Sep 28 05:11:16 2026 GMT
        Subject: CN=6ab753f5-2a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:3a:07:f3:9b:42:a4:e2:17:89:d0:63:91:
                    1c:58:a0:56:4a:f8:b0:5a:f2:41:58:ba:1c:a0:3a:
                    f6:1c:5c:d7:d1:ea:cf:11:47:86:fd:4b:00:c5:7e:
                    ce:a7:e1:59:d4:79:ed:ad:b1:09:a0:f1:ea:0f:fc:
                    9f:e9:e5:59:e1:26:70:b0:64:75:d6:16:05:f9:da:
                    27:ae:ad:f2:f7:c1:0b:48:0d:9a:0e:5a:1a:8e:9b:
                    0d:b6:6c:8b:a4:17:95:df:63:66:fc:37:10:41:08:
                    06:09:cf:e8:59:fb:d2:d2:40:30:25:2b:21:28:7b:
                    c0:5a:76:ff:2c:30:44:3d:f5:e1:40:19:a0:f8:c2:
                    45:b5:7a:13:54:9c:ae:db:91:1f:d9:32:a9:f7:8d:
                    81:f8:52:79:e1:74:2d:73:20:86:33:0f:a7:8f:7b:
                    1b:74:00:13:c7:d1:88:e9:7b:30:ca:02:cc:bd:f3:
                    6c:c7:80:7e:91:c6:66:52:1e:36:d1:db:fc:0a:f5:
                    63:b0:f9:e7:f4:f0:06:bd:ef:85:ef:09:ea:b9:62:
                    9f:f0:e2:f3:d2:6a:e9:3d:e3:50:02:cf:7b:ac:0b:
                    c4:cd:95:ed:b1:69:11:47:ea:fc:c7:3f:a6:9c:e5:
                    ca:8b:ec:d1:19:e8:47:21:81:d8:b5:8b:f7:6b:67:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:56:F0:2B:8B:F0:0C:B0:FF:37:45:E9:D8:B0:3F:61:EE:44:E7:02
            X509v3 Authority Key Identifier:
                keyid:5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:cf:19:22:39:43:d7:a6:8e:43:4d:0a:ca:e8:13:4c:8c:eb:
         16:1c:e4:41:15:5c:6f:18:3f:75:aa:4e:12:9b:e5:82:fc:28:
         0a:6d:f5:a6:75:33:a8:49:ed:d8:68:1c:19:c2:04:47:7f:42:
         32:3d:a1:b8:25:83:b9:82:58:30:6c:c6:ae:c4:ef:3e:46:1b:
         89:c5:db:f0:53:7c:65:69:91:b6:75:c9:37:cd:e6:69:ed:e3:
         9a:44:66:b0:12:d4:b9:8b:79:f0:8b:c6:14:1f:50:85:47:8f:
         a9:df:19:27:b7:28:2a:64:1b:fb:7e:75:41:bd:a6:fe:b1:2d:
         47:cb:c0:0f:91:b6:5c:78:e1:8c:65:c9:f0:23:75:7d:35:6d:
         76:17:f5:ca:9f:b7:d3:46:2c:5a:1b:dd:cc:70:36:7f:88:61:
         ea:b4:13:ba:90:bb:a9:22:8e:08:b6:2f:a0:a0:a1:73:83:58:
         fb:73:a2:80:90:89:ba:d8:3b:e0:df:98:ee:64:4b:3a:56:4d:
         00:89:3d:29:6d:82:a4:a2:08:28:42:4d:aa:17:a6:f7:5c:10:
         c8:29:5d:d1:4f:e5:2b:ed:01:2d:0e:84:b5:eb:37:dc:33:15:
         db:b4:9e:18:40:64:28:4a:5d:80:3e:91:1e:36:e1:be:51:44:
         05:ad:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:58:37 2026 by rpki-client