Error: rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
File:                     z29NYNDVwubTeacR0bavARMMKmw.mft (raw, json)
Hash identifier:          J3yMxzfZUOD403E7BclPNXag6CI7BqKxoUslWh26cnU=
Subject key identifier:   56:06:0A:D7:45:B9:EA:C2:08:28:80:1A:FA:1D:93:E9:7A:E8:11:45
Authority key identifier: CF:6F:4D:60:D0:D5:C2:E6:D3:79:A7:11:D1:B6:AF:01:13:0C:2A:6C
Certificate issuer:       /CN=F367C385AF/serialNumber=CF6F4D60D0D5C2E6D379A711D1B6AF01130C2A6C
Certificate serial:       0916
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
Manifest number:          0911
Signing time:             Wed 23 Sep 2026 01:53:15 +0000
Manifest this update:     Wed 23 Sep 2026 01:53:15 +0000
Manifest next update:     Fri 25 Sep 2026 01:53:15 +0000
Files and hashes:         1: z29NYNDVwubTeacR0bavARMMKmw.crl (hash: TUf9Gaq6+LVO4LsfCnSEwn33EsbaJzY0ACJ7/uxJYtA=)
                          2: 7B87C448C60111EA86B4873EF8AEA228.roa (hash: 8s32B8dMmFio0RMWbrESmIIs0504hiJMh4Fs90vcTTY=)
                          3: C64DD7E8CF4C11EF8EE31B5A762E951A.roa (hash: AJpZ6v6uVOfjIm3aP0rB1cSE45popgVvvbWH4IKlOfw=)
                          4: AE4BC78AC60111EA82B1BE3EF8AEA228.roa (hash: pyY/EVidRCr9GBFzwtVx7kYqYWYP30k2C6JFA5pk9G4=)
                          5: 3EAACEF8C60111EAA251483EF8AEA228.roa (hash: Nv6f6c3Twv+vS/nsoIGBs8lzaY3R98pljU3B+YdTgI4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 01:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326 (0x916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C385AF, serialNumber=CF6F4D60D0D5C2E6D379A711D1B6AF01130C2A6C
        Validity
            Not Before: Sep 23 01:53:15 2026 GMT
            Not After : Sep 25 01:53:15 2026 GMT
        Subject: CN=6ab3310b-02df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:3b:c8:38:04:6c:c1:bc:4a:82:fe:08:f7:
                    1a:9b:ee:9d:73:27:a1:4f:69:8d:1d:6c:c3:4d:46:
                    5e:c8:1b:71:95:8d:9d:f8:81:a5:44:bd:57:6d:87:
                    c5:8b:67:3c:1c:17:db:9d:3c:a8:ba:5b:24:da:86:
                    70:34:aa:aa:0d:4c:91:ff:c9:64:06:c7:fa:1d:42:
                    85:0a:4e:2c:aa:79:fa:32:cc:9e:08:72:c1:9c:f4:
                    45:31:d1:e7:7a:59:9f:f5:08:d4:d7:9b:ff:22:39:
                    13:62:f6:99:41:66:88:da:03:36:53:d0:8c:78:db:
                    46:b5:35:8d:d6:53:b6:70:2a:66:73:5a:e7:51:7c:
                    fd:43:bb:c1:74:c1:79:63:94:ac:6b:d5:4f:de:f2:
                    55:a7:49:87:32:45:65:d3:0d:5b:59:11:bc:5f:50:
                    e3:b6:46:cd:28:da:ec:96:e3:ad:f4:24:07:34:8c:
                    c7:ba:d1:04:43:48:fe:53:24:14:fc:c3:71:89:15:
                    a7:69:1c:15:5d:90:09:dc:3a:01:f7:fc:68:56:86:
                    6d:7b:4d:8d:ee:12:f6:21:fc:29:58:21:dd:c1:31:
                    0f:6f:76:87:31:5a:fe:65:d5:30:22:70:63:09:00:
                    51:55:18:41:d8:76:89:8a:7e:21:6b:de:ba:a3:24:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:06:0A:D7:45:B9:EA:C2:08:28:80:1A:FA:1D:93:E9:7A:E8:11:45
            X509v3 Authority Key Identifier:
                keyid:CF:6F:4D:60:D0:D5:C2:E6:D3:79:A7:11:D1:B6:AF:01:13:0C:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:41:8c:3e:83:04:49:00:45:73:34:c4:d5:54:ac:f4:84:e9:
         b4:41:07:98:0a:c4:80:dd:f8:65:38:41:08:2b:e0:d0:f9:f4:
         3e:8f:12:2f:db:da:f4:af:3b:b0:95:5b:23:94:cd:8a:81:a4:
         ab:78:df:c9:ce:91:63:d7:3b:c4:bb:79:f6:fb:35:41:74:0e:
         d2:92:c5:1e:93:a9:a5:a2:2c:ba:ae:95:27:82:9a:f4:b7:09:
         aa:86:b1:9a:72:a7:93:f5:ec:cf:17:8e:85:14:59:a1:ef:68:
         de:88:6b:7a:b8:ea:75:10:16:dd:cc:7f:7f:c9:d6:d3:5e:8a:
         48:df:6e:94:9b:01:c2:eb:50:f6:6a:08:0e:28:8e:49:bb:03:
         f9:9d:79:0d:9a:2f:a2:10:a4:ac:ed:ec:ef:fa:40:f6:64:e7:
         1c:ed:73:dc:b2:25:a9:ae:a9:6e:67:1f:b1:a8:b7:08:90:40:
         0f:ed:80:aa:2b:c5:1b:90:08:31:9b:d5:e2:84:93:84:b7:24:
         7f:91:3f:b3:48:cd:95:de:96:b1:fc:0b:29:45:d0:a5:60:2b:
         1d:e0:3b:e8:ab:7f:18:69:12:36:1a:02:d2:b5:e3:d6:4b:e5:
         9f:84:2a:d5:6f:1b:46:ab:80:66:5a:a0:d7:5b:04:64:a7:cf:
         80:86:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:01:15 2026 by rpki-client