Error: rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File:                     XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier:          xmah2oO+mzml4yqpALtPumNCEbIDS7exBeLandMB3G0=
Subject key identifier:   BA:CB:9A:A9:B0:DC:49:C8:F4:8D:E9:10:66:C1:F4:A2:32:54:43:E0
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer:       /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial:       0992
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number:          098C
Signing time:             Sun 11 Oct 2026 01:45:29 +0000
Manifest this update:     Sun 11 Oct 2026 01:45:28 +0000
Manifest next update:     Tue 13 Oct 2026 01:45:28 +0000
Files and hashes:         1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: E2ubgEuD3LmOukdJ4ZgugeQyweewUAxilhqzuif6uaE=)
                          2: 77D590F096FC11F1A67B51E1CE1D38B0.roa (hash: N/uAtR74JfNpLcsvPKuPQbec3Fmc8dUXoAgKh+1azoE=)
                          3: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2450 (0x992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Validity
            Not Before: Oct 11 01:45:28 2026 GMT
            Not After : Oct 13 01:45:28 2026 GMT
        Subject: CN=6acaea39-9bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:9e:32:03:98:52:f4:08:fe:e2:e0:dc:53:
                    d6:56:77:f5:75:53:be:8f:c0:9b:61:e6:83:80:5f:
                    56:10:26:8e:9c:6c:98:e1:c0:e3:23:c8:95:42:e1:
                    a3:23:61:b5:8d:55:bd:3c:bd:97:ae:03:28:7c:a3:
                    78:77:17:4e:68:e2:68:84:0c:9e:45:b4:c2:9c:16:
                    6b:46:c7:8e:ce:f2:db:05:93:33:13:72:d8:9e:48:
                    24:ca:24:7d:e9:10:57:c2:8b:fd:30:64:29:8d:0b:
                    96:f7:4b:d4:96:d1:44:65:dc:e2:e3:c3:f3:c8:9f:
                    08:84:79:39:3b:ef:59:d7:3e:73:cc:15:ba:28:b4:
                    32:37:51:79:8a:1c:2b:5c:b4:3b:2a:a5:df:63:3b:
                    a9:d2:9a:cb:30:ca:06:18:2b:bf:98:38:7c:57:76:
                    d8:76:09:d4:ae:cf:c4:48:a6:2e:0e:c0:d0:cf:b3:
                    73:6f:27:b8:fe:fa:e2:84:55:ca:7f:5f:50:ff:fe:
                    95:12:fe:49:ff:fe:24:5e:b9:c5:d7:58:b3:98:0a:
                    95:fa:a7:bc:a9:c2:34:79:ea:d1:4a:35:35:6c:c7:
                    b5:05:fb:b9:79:66:24:8b:fa:6a:b7:d7:ea:7a:8b:
                    e8:f8:48:59:ec:35:fc:d8:13:ee:db:ec:fb:74:9c:
                    e3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CB:9A:A9:B0:DC:49:C8:F4:8D:E9:10:66:C1:F4:A2:32:54:43:E0
            X509v3 Authority Key Identifier:
                keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:94:75:a6:8a:bc:79:48:d5:a0:a8:52:d8:6b:1f:68:98:ca:
         3e:05:c5:6a:bc:c1:16:a1:dc:8e:3e:a2:d5:33:d3:0c:59:70:
         fd:71:7e:c1:1c:e2:90:b6:85:03:44:40:b8:2d:a5:e6:e5:aa:
         6f:98:72:d5:fb:96:ab:78:f7:26:29:8d:f9:d1:f6:07:5b:94:
         5b:5a:e1:6b:3a:ee:65:b4:0f:27:d3:10:30:d2:5d:c6:ec:f5:
         5e:32:e1:28:e3:2a:09:0f:86:ec:61:7c:e6:e0:c0:38:39:e4:
         57:fc:ec:fd:53:4a:c4:af:30:a0:66:ef:c1:8e:0d:59:0f:10:
         53:da:6d:83:c0:2d:82:d1:99:a6:00:c1:54:91:2a:51:01:14:
         9c:60:f1:ca:b2:b6:2c:f9:37:b9:61:ec:b9:0e:ab:4b:4a:66:
         3e:e7:bd:06:4f:63:36:6b:0d:f7:2f:24:42:f3:63:d6:65:e8:
         02:31:08:8e:08:22:4a:8e:a5:be:73:d9:58:6a:f9:37:fc:58:
         30:ff:20:48:a0:2f:74:6a:96:2a:96:40:96:74:df:9d:84:65:
         ea:3c:8f:43:e2:78:f8:37:5e:04:11:c1:cd:8c:d2:f5:2b:8c:
         f6:ac:16:31:53:ff:4a:ab:67:e3:b5:45:b4:aa:a7:93:fd:63:
         a3:e6:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:16:11 2026 by rpki-client