Error: rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
File:                     fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft (raw, json)
Hash identifier:          gFzpy8ckL3WpwmCXWdvqrNR3AYICEfqy/584Zb+mxdM=
Subject key identifier:   F9:41:DB:AC:D5:AB:BE:D3:63:4B:9C:14:9D:1A:83:41:CA:89:89:D2
Authority key identifier: 7D:D5:23:58:2E:85:5A:9F:9A:64:76:04:04:13:BE:8E:C6:C0:B6:57
Certificate issuer:       /CN=F367F176AF/serialNumber=7DD523582E855A9F9A6476040413BE8EC6C0B657
Certificate serial:       07A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
Manifest number:          07A3
Signing time:             Sat 14 Nov 2026 02:20:31 +0000
Manifest this update:     Sat 14 Nov 2026 02:20:30 +0000
Manifest next update:     Mon 16 Nov 2026 02:20:30 +0000
Files and hashes:         1: fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl (hash: ap6oqlKlMXAKsUOgmwpqRbTz/HHM0+EQggkbx4FQJ9A=)
                          2: EAD3728A22BB11F1804B79D3DAE4EC9C.roa (hash: L/u9CHVxjHqFq2RkIEdwQz5uVOsNvPvTRN90oLFbdBw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1957 (0x7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F176AF, serialNumber=7DD523582E855A9F9A6476040413BE8EC6C0B657
        Validity
            Not Before: Nov 14 02:20:30 2026 GMT
            Not After : Nov 16 02:20:30 2026 GMT
        Subject: CN=6af7c56e-391b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:33:8b:cf:db:ab:8b:8f:23:c7:3d:23:15:
                    78:e1:df:da:80:f8:1e:cb:1c:87:fa:a3:40:cc:ed:
                    e7:84:8c:ea:aa:1a:e2:b1:87:8c:33:cd:83:db:f7:
                    ad:f1:aa:aa:78:8b:84:1c:44:37:d5:2a:4a:87:2d:
                    e3:a8:77:2f:02:4a:3c:c2:1b:70:c4:38:79:d7:3d:
                    80:ac:db:69:d1:ac:6f:78:15:7c:41:f7:b9:df:37:
                    b5:84:7c:c7:7c:31:15:92:d8:8f:d4:80:f5:da:12:
                    0e:04:40:ca:9a:b7:1c:86:8c:d8:5c:c5:d3:68:12:
                    43:81:8c:cb:6e:19:09:dd:f8:27:6d:31:54:57:4d:
                    e9:2c:88:c3:ab:81:ed:db:01:81:7a:87:80:3a:58:
                    be:cd:02:b0:0f:76:8c:7a:ff:9b:64:87:03:b2:07:
                    8b:a1:1e:12:23:db:2b:c5:49:c1:8d:db:07:00:9a:
                    7a:1f:30:a3:8e:f3:ab:ff:97:fc:99:3f:0a:28:01:
                    b2:14:fe:0b:2b:b0:1e:fb:b0:76:79:91:dc:8f:9a:
                    c0:03:56:d1:53:d1:64:15:35:7e:55:4a:ac:59:6b:
                    25:6a:09:33:8a:cc:7b:ba:88:b5:a5:ea:5b:21:d2:
                    b9:fd:74:73:b0:c4:b5:42:ca:a3:83:81:4b:94:9c:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:41:DB:AC:D5:AB:BE:D3:63:4B:9C:14:9D:1A:83:41:CA:89:89:D2
            X509v3 Authority Key Identifier:
                keyid:7D:D5:23:58:2E:85:5A:9F:9A:64:76:04:04:13:BE:8E:C6:C0:B6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9e:5c:a1:b3:17:88:8b:a2:24:07:0e:09:43:98:4a:ef:55:
         31:7e:bb:a7:09:ce:89:0d:80:6f:3e:15:9b:1b:96:1b:91:83:
         78:04:d6:48:11:07:f2:15:c0:42:b7:6e:78:e1:44:b8:e2:cc:
         3e:d5:f5:6f:e7:7e:f8:ff:01:4b:64:5d:c2:67:2d:d6:77:32:
         24:bb:48:94:b4:92:3d:72:c5:38:9b:7a:e0:32:b7:46:d5:2f:
         6b:b0:6a:14:a4:b8:e7:cb:1e:67:c5:a8:4c:db:16:fd:33:ce:
         4e:d8:2b:d9:3b:bc:cb:62:35:f8:67:26:ff:0d:73:91:2c:7d:
         53:9e:b1:50:90:fb:c4:b5:65:f1:59:cb:79:cd:17:d5:1a:74:
         60:08:3a:2c:98:44:5e:5d:5d:e1:16:b2:19:cf:0c:9d:19:11:
         4f:c0:e8:60:22:ea:c5:e7:41:c6:e4:f1:96:c6:4c:ff:ad:30:
         f3:c2:88:79:4b:d3:3c:20:43:6f:ac:46:77:3e:35:8b:43:35:
         09:0a:66:25:4d:ea:36:f9:8c:05:9c:a1:d6:fa:e4:b4:e5:98:
         9f:ed:0e:e8:d6:ce:34:18:e4:b0:18:1c:2e:af:c0:85:c5:40:
         7c:5b:e4:94:0c:04:2a:af:77:e2:6b:4b:f4:df:97:df:4d:5c:
         17:7e:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:23:31 2026 by rpki-client