Error: rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft
File:                     jNewEiWOlbG4ISGPefClXcSUX5s.mft (raw, json)
Hash identifier:          FAnF2yVWQWaPYJf/oIjsfy6euhZZSJUTnOPqMxV6Gi0=
Subject key identifier:   B3:AE:7B:03:B7:6C:8E:AF:DF:85:D4:A8:1A:95:5A:CE:B2:32:FA:C9
Authority key identifier: 8C:D7:B0:12:25:8E:95:B1:B8:21:21:8F:79:F0:A5:5D:C4:94:5F:9B
Certificate issuer:       /CN=F367B3A6AF/serialNumber=8CD7B012258E95B1B821218F79F0A55DC4945F9B
Certificate serial:       19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jNewEiWOlbG4ISGPefClXcSUX5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft
Manifest number:          17
Signing time:             Sun 15 Nov 2026 06:04:42 +0000
Manifest this update:     Sun 15 Nov 2026 06:04:41 +0000
Manifest next update:     Tue 17 Nov 2026 06:04:41 +0000
Files and hashes:         1: jNewEiWOlbG4ISGPefClXcSUX5s.crl (hash: rqGbpFKnbzq4G53pOQJQaQzrb2NJ5quXpA09FgYx2EU=)
                          2: 294959A0D15B11F181341AACCE1D38B0.roa (hash: trjDKYtQU8IGt67oAsR6CF5W8Ozt6ds0LzVWkCIi2Qs=)
                          3: F8D007C4D15A11F19F3710ACCE1D38B0.roa (hash: ncnn1Fx0/5+q8yYSmPcZe1oM50v+osyKiJWvRf8FleU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jNewEiWOlbG4ISGPefClXcSUX5s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3A6AF, serialNumber=8CD7B012258E95B1B821218F79F0A55DC4945F9B
        Validity
            Not Before: Nov 15 06:04:41 2026 GMT
            Not After : Nov 17 06:04:41 2026 GMT
        Subject: CN=6af94b7a-ca77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7b:9b:bd:10:67:d0:06:f7:d8:74:9c:90:b5:
                    e9:c9:97:9b:45:1a:39:3f:d1:c1:90:27:4c:5c:bb:
                    50:50:01:c2:1e:b0:24:f2:ff:f9:f4:52:8d:07:1e:
                    ef:fd:cb:92:45:94:ac:27:63:e7:8c:69:1f:f5:fd:
                    70:df:2c:95:04:e2:02:81:6e:87:42:89:d1:b8:95:
                    74:8a:fe:6a:96:76:e1:d9:ef:79:01:2a:7f:30:46:
                    5b:dc:c8:47:19:65:92:82:49:76:da:90:5f:ef:73:
                    71:3b:2b:25:d8:7a:e0:e0:50:83:96:f3:e3:f0:dc:
                    95:85:13:c3:4d:c2:d8:b5:61:73:7d:cf:34:57:10:
                    25:22:db:fb:5d:04:54:36:37:e5:72:86:25:df:e6:
                    aa:5f:8b:34:f0:ce:e9:d9:81:94:20:c6:0b:86:92:
                    a5:f0:01:ba:b4:5b:54:54:c8:b3:83:4e:13:67:91:
                    74:b9:a1:99:21:23:9f:e5:9d:64:fa:a8:26:7e:51:
                    c9:a8:74:cc:6f:af:ed:42:42:a6:72:2c:47:cb:3b:
                    e3:e7:22:a5:ea:a1:01:d7:95:ee:9a:18:37:46:60:
                    d2:97:d5:d8:06:cb:ba:42:db:58:11:d8:7d:f5:97:
                    78:51:d8:e3:66:36:95:76:b8:86:2d:b1:ec:23:41:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AE:7B:03:B7:6C:8E:AF:DF:85:D4:A8:1A:95:5A:CE:B2:32:FA:C9
            X509v3 Authority Key Identifier:
                keyid:8C:D7:B0:12:25:8E:95:B1:B8:21:21:8F:79:F0:A5:5D:C4:94:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jNewEiWOlbG4ISGPefClXcSUX5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f0:db:9f:a4:17:cb:3d:03:1a:49:83:27:d5:55:41:18:5a:
         4a:b9:23:e0:ee:f9:af:d1:06:70:86:3f:ed:fa:d9:4b:fa:de:
         aa:6e:f6:27:1e:ab:0d:9c:d2:fc:91:31:9b:3a:d2:39:69:b3:
         57:cc:b3:76:ad:69:1e:0f:a1:f3:dc:12:65:df:d6:23:cb:18:
         e3:02:80:fb:27:ae:52:d0:4d:9c:30:fb:37:da:60:5c:de:10:
         57:b7:ff:b0:78:b1:d9:63:b3:a7:45:cb:fd:12:90:6b:6c:02:
         3f:0d:c9:b2:15:22:27:fe:96:d4:43:f9:67:a6:83:1b:ba:73:
         53:e7:5f:ce:74:1d:7a:ff:85:30:b1:64:04:40:34:14:5f:d5:
         77:c9:7e:6e:a0:e4:d8:73:17:45:95:fa:cb:77:d8:c8:16:84:
         dd:23:c0:0d:64:62:a2:4a:51:40:ce:9f:4b:34:e4:16:d8:e4:
         5a:9f:12:3e:6a:34:d4:eb:ef:64:11:80:1e:e9:0f:04:e2:35:
         31:56:a7:9a:c9:9d:e1:6c:c6:d3:19:41:7e:2b:d4:87:4f:f6:
         89:10:a6:ca:83:3c:46:33:a4:20:46:00:2d:8d:3e:c1:16:24:
         10:a5:80:3b:ce:d3:8f:0d:fa:a7:d9:f6:b0:1b:e9:83:28:31:
         98:8c:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:44 2026 by rpki-client