Error: rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File:                     lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier:          a0nd7lQQcJ41UvFcU6fukZHXa07RMT2JIGmGCxt+qdQ=
Subject key identifier:   A6:00:08:F4:85:CB:49:AB:26:69:1A:04:E0:AC:BD:EC:66:62:2E:30
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       0AAB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number:          0AA7
Signing time:             Tue 29 Sep 2026 01:30:17 +0000
Manifest this update:     Tue 29 Sep 2026 01:30:17 +0000
Manifest next update:     Thu 01 Oct 2026 01:30:17 +0000
Files and hashes:         1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: AzAUPSo87mDAnY9DNEa2FhsoO894lsF6OV3i4939pFk=)
                          2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
                          3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
                          4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
                          5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2731 (0xaab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Sep 29 01:30:17 2026 GMT
            Not After : Oct  1 01:30:17 2026 GMT
        Subject: CN=6abb14a9-2008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:7e:c4:4d:89:6d:20:bc:1c:f5:77:bc:ff:
                    b7:6f:db:de:af:8e:f7:41:73:41:1d:c5:a7:dc:1d:
                    de:57:67:ff:1b:a0:b7:55:5f:7e:3c:8c:68:93:9c:
                    55:a9:a9:0d:bf:97:35:68:28:03:37:9b:51:e1:6a:
                    15:f5:f7:77:05:d6:18:8e:0e:9b:11:5b:93:bb:82:
                    16:aa:cf:47:b9:c5:c8:a8:ad:d8:97:76:47:90:ce:
                    5c:da:dd:02:2d:b5:c0:13:94:ea:a1:4b:a1:95:68:
                    64:9b:83:2d:0e:8b:3f:e3:30:7a:a3:b4:93:0b:65:
                    2b:94:3c:7b:b9:a4:51:29:9a:4a:6f:51:e9:b1:77:
                    97:ea:c9:8d:74:5c:5e:fc:ce:73:be:05:0e:fb:47:
                    84:8e:a7:44:8d:02:4c:f6:54:c7:09:16:23:a3:24:
                    19:3e:70:5b:7c:e5:e7:79:de:89:72:70:dc:49:cc:
                    07:46:00:d3:74:07:b6:6e:0a:8a:f2:82:37:55:6c:
                    5b:b4:c5:7c:05:8f:6b:d9:bd:39:07:62:27:20:aa:
                    67:20:ad:d9:ca:cd:a5:93:22:6a:1a:56:36:3a:f8:
                    f8:fc:c4:d0:f8:e8:4a:56:f1:2c:7a:32:b8:f2:b0:
                    95:9f:93:ec:33:09:19:ec:32:e1:0f:d2:6d:e0:36:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:00:08:F4:85:CB:49:AB:26:69:1A:04:E0:AC:BD:EC:66:62:2E:30
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7a:25:b2:45:c7:6b:c1:29:43:a7:c2:08:32:46:54:7e:04:
         b7:9c:82:02:40:90:ea:95:9e:b7:82:33:0f:fb:fd:59:b8:e4:
         ca:6e:72:13:ad:e8:01:de:da:76:4d:3b:c2:03:90:30:e4:4d:
         3c:56:64:47:ad:60:6a:13:88:87:4e:67:d5:12:dd:93:7a:2c:
         9d:cc:61:51:e3:99:8a:3d:92:08:58:db:47:ed:ae:7f:7e:d2:
         15:83:62:fe:b3:84:fd:a7:13:5f:15:38:ee:b0:b0:40:32:fb:
         37:5d:75:8c:b1:82:b5:dc:1c:d9:aa:8f:4e:f7:2e:de:1f:ec:
         26:23:a3:30:26:a5:37:5c:92:7d:09:c9:17:f1:a0:3c:9f:8d:
         1f:8b:f0:86:ef:ec:c0:1d:f9:3e:a5:70:42:09:b2:1f:69:7e:
         98:c5:c1:91:60:2a:4e:38:31:16:a2:b8:c0:46:cb:2c:56:3e:
         6a:73:77:6b:ab:c1:27:16:9b:2d:7f:51:d2:05:4a:03:ec:fc:
         72:0d:2b:22:a3:a2:39:5f:ab:bc:1a:21:5c:fc:92:45:6d:79:
         2b:38:9a:8b:78:41:c2:99:2c:5a:01:5f:7a:36:46:19:a0:db:
         69:4b:5c:ba:92:b1:d8:0e:2f:22:0a:92:00:ae:da:f1:8a:8c:
         01:73:11:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:11:41 2026 by rpki-client