Error: rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
File:                     fsFNfEl2kNywyTPfM9amixuZKo8.mft (raw, json)
Hash identifier:          A+5aHDq7H3/U4+P/lh8FWEbYcg0m5q1OpAVE1XVIAHw=
Subject key identifier:   76:B8:97:9B:36:F9:18:8A:33:68:F0:68:F4:1D:F2:18:72:71:3E:03
Authority key identifier: 7E:C1:4D:7C:49:76:90:DC:B0:C9:33:DF:33:D6:A6:8B:1B:99:2A:8F
Certificate issuer:       /CN=F367E157AF/serialNumber=7EC14D7C497690DCB0C933DF33D6A68B1B992A8F
Certificate serial:       EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
Manifest number:          E7
Signing time:             Sun 27 Sep 2026 05:28:44 +0000
Manifest this update:     Sun 27 Sep 2026 05:28:43 +0000
Manifest next update:     Tue 29 Sep 2026 05:28:43 +0000
Files and hashes:         1: fsFNfEl2kNywyTPfM9amixuZKo8.crl (hash: xBUiImKdvf55kluYwfPiaIVc72Qm+0AyAC8rjM5+IOI=)
                          2: 6810F36643F111F1823505F8CE1D38B0.roa (hash: H49ZmE70fNlQMlXanVHzm7OfawxzBuMK6YRbx0bBsww=)
                          3: CE9FEAFC29E211F19A2F7E84DAE4EC9C.roa (hash: DFioY4TtccPGtKp1xwhCK0Fw8LMx+i//Mg7FbiPkadU=)
                          4: E2AB27880B3711F191969680DAE4EC9C.roa (hash: TV2HllXtBfZyxNjiNtlEzte8OfMxx+gLKAKoslmR1is=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367E157AF, serialNumber=7EC14D7C497690DCB0C933DF33D6A68B1B992A8F
        Validity
            Not Before: Sep 27 05:28:43 2026 GMT
            Not After : Sep 29 05:28:43 2026 GMT
        Subject: CN=6ab8a98c-bb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:8f:e7:18:55:68:a3:fb:23:af:49:f6:73:
                    5e:3c:d9:22:bf:dc:60:ad:73:5c:fd:35:c4:26:2e:
                    a2:bd:81:bd:93:f8:ca:48:9e:ab:7c:db:e5:90:57:
                    6a:f3:88:26:79:75:6f:c3:a9:e5:84:d2:4a:57:2b:
                    b0:69:b5:1a:8f:f6:fd:ea:26:7f:91:b5:d5:45:8f:
                    1b:0e:e3:dd:fd:71:b2:48:55:8f:f7:9b:67:ad:b1:
                    91:f3:af:8e:67:14:11:e8:d1:ea:d8:36:14:14:55:
                    8c:32:50:6a:5d:e7:cb:d0:0b:96:97:de:9d:b6:71:
                    9b:66:15:3e:85:91:3d:81:77:b9:00:9a:88:06:c9:
                    65:5c:b9:c8:46:84:02:cf:f8:52:68:19:2c:cb:09:
                    f7:67:1e:75:7b:17:1b:7d:d9:e5:b5:d7:e1:bb:2d:
                    97:08:9a:fd:b9:5a:d4:10:13:d2:ed:f1:b7:90:3b:
                    54:8d:b1:e2:a8:df:86:23:de:49:af:27:73:6c:60:
                    61:77:34:7c:ad:4b:da:8c:ec:0b:56:e2:95:30:90:
                    1e:d6:6b:7c:65:fb:b1:5a:35:fc:f2:b7:62:96:2e:
                    d4:9d:49:b6:80:ff:2a:2d:33:9f:36:99:a9:08:0d:
                    f9:a0:a5:48:f6:31:a2:2b:32:4c:b3:3b:d1:ee:ab:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B8:97:9B:36:F9:18:8A:33:68:F0:68:F4:1D:F2:18:72:71:3E:03
            X509v3 Authority Key Identifier:
                keyid:7E:C1:4D:7C:49:76:90:DC:B0:C9:33:DF:33:D6:A6:8B:1B:99:2A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:82:43:be:7d:fd:cb:2a:bf:1f:34:46:c3:cf:cb:ba:fa:
         f1:3b:04:95:e4:85:4d:5d:91:44:f3:5d:61:b7:dc:2d:13:06:
         db:c3:36:e1:c0:e3:3b:5b:f6:ec:7b:58:d9:3e:02:8d:c2:68:
         71:85:cf:a1:0c:52:49:0f:55:57:bc:fb:77:5d:75:f9:ee:6f:
         5f:6c:2f:a3:b6:67:89:38:96:f2:e1:d0:25:11:52:4c:37:82:
         29:58:bd:63:72:15:ac:0e:21:09:e2:7b:53:d6:f6:66:bb:b9:
         18:eb:cc:9e:a4:40:ac:dc:ae:fd:30:84:f3:1c:ac:8d:b7:cf:
         81:9b:9f:f2:b4:45:3b:5e:4d:2d:b0:15:9b:e6:b9:07:0f:0e:
         db:81:52:31:d5:e2:3c:2b:f9:b2:6f:78:85:af:f6:6a:a8:c8:
         68:17:9e:d9:ef:22:40:a1:b3:10:0d:66:64:e1:31:d2:3b:6b:
         84:18:93:01:7e:43:82:a2:bd:e9:53:2e:bc:99:ba:73:f5:09:
         35:45:bf:a0:22:a5:40:6a:14:92:87:63:be:fd:ee:9d:1a:3c:
         f9:54:9f:8c:e6:ac:3e:20:31:27:18:40:1a:51:3f:a1:f4:79:
         81:c2:fa:9c:42:02:b4:f3:89:5b:62:89:4d:5b:24:ac:57:c9:
         26:49:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:58:10 2026 by rpki-client