Error: rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
File:                     6vTkF_QNHJDUbdlViOspDev7ius.mft (raw, json)
Hash identifier:          5Q7bt4aVrJfZoxjjqLfsemloh32c+gwxC7GDm8L+E4U=
Subject key identifier:   C1:5D:6C:9D:D2:AC:AE:8F:92:F4:48:4D:CF:B6:EB:57:2C:07:3F:2F
Authority key identifier: EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
Certificate issuer:       /CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Certificate serial:       04FD
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
Manifest number:          04FB
Signing time:             Sun 15 Nov 2026 03:30:08 +0000
Manifest this update:     Sun 15 Nov 2026 03:30:07 +0000
Manifest next update:     Tue 17 Nov 2026 03:30:07 +0000
Files and hashes:         1: 6vTkF_QNHJDUbdlViOspDev7ius.crl (hash: jzOElINVDlRG5nYLGte55mnlj1Jr8mknn+PBn1oF+Uc=)
                          2: D505C1903E8F11EFAE9EEE8B762E951A.roa (hash: NwidDV20CYZEDHZ6t+ZNN3IKmoqOlGtHrBQtSGaeJsg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                          rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC8BRI, serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
        Validity
            Not Before: Nov 15 03:30:07 2026 GMT
            Not After : Nov 17 03:30:07 2026 GMT
        Subject: CN=6af9273f-3290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:35:61:f5:51:6b:77:f8:fe:b3:a5:4a:d3:
                    35:2d:56:44:80:4f:65:93:a4:b5:40:48:9e:4c:e2:
                    e6:e3:e7:28:92:dd:4f:f2:ee:fc:48:9f:95:c4:2d:
                    83:c2:66:10:a3:3a:c4:4b:2c:27:7b:18:3a:d4:56:
                    b5:5f:e1:ed:de:e5:c7:d9:d4:c9:c2:bb:30:46:58:
                    72:8b:4f:ad:3a:61:bd:14:12:57:ae:7f:d6:16:0c:
                    11:38:4e:6f:d7:c9:e0:00:83:de:bc:a3:ec:2b:40:
                    5b:32:09:3b:e6:2b:0e:fb:f7:a8:18:22:7c:5a:83:
                    91:66:38:5f:76:14:bd:2e:44:fa:01:7f:2b:23:ff:
                    20:0b:fe:8a:8e:76:51:bb:30:44:58:5c:2e:c8:bf:
                    42:aa:2f:b2:02:5c:36:fa:18:02:a9:18:32:7f:fc:
                    86:a0:03:9c:ad:3b:3f:3d:00:aa:18:a4:d8:91:d4:
                    46:2d:93:28:d5:2c:65:0b:3f:5d:f8:91:13:95:c7:
                    e4:24:5e:79:ee:c4:e7:21:98:76:49:70:a6:c8:5c:
                    e3:77:40:ad:2f:96:2f:0f:98:e6:c6:2f:ec:72:87:
                    3d:f4:84:7b:4f:0b:2b:f5:49:dc:eb:60:62:5c:5d:
                    c5:fe:5b:38:03:9f:2b:66:1f:a4:25:8e:77:06:9b:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5D:6C:9D:D2:AC:AE:8F:92:F4:48:4D:CF:B6:EB:57:2C:07:3F:2F
            X509v3 Authority Key Identifier:
                keyid:EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:4f:5d:e7:80:98:74:70:51:e6:43:61:63:4b:ac:2f:6c:
         90:d1:20:53:61:fb:21:8f:5d:ab:ae:52:a7:84:65:d1:1a:38:
         ad:36:85:ac:97:57:4b:52:34:9a:d7:79:36:67:c9:76:dc:6f:
         fd:d3:c4:b6:68:01:73:45:49:81:2e:51:7f:d5:cd:12:f0:92:
         94:6a:3e:cc:bc:40:00:86:e7:46:ea:25:7d:81:36:d8:2c:94:
         fe:d8:a2:0d:56:4c:c0:44:bf:66:8c:f7:fc:ad:9c:fe:6b:2e:
         be:8b:b6:dc:43:7f:c8:1b:e0:b9:bb:56:52:54:09:f0:ee:5c:
         64:fd:71:5b:4c:14:75:e7:5a:36:50:33:4f:e3:51:0a:96:4b:
         b5:8f:93:d8:0d:19:d1:29:ef:8b:e1:83:0e:7a:34:8d:a1:69:
         77:fb:eb:f7:2c:69:95:14:6a:d8:01:57:63:57:48:67:bb:97:
         a6:c2:8d:d2:b1:c5:ac:a9:ee:cb:63:c1:3c:6f:67:66:c7:35:
         50:2e:25:fb:9c:1e:a8:bd:b0:03:cf:7b:dd:cd:c7:4e:96:9f:
         10:d8:f1:27:31:15:f9:6c:75:ec:8e:18:92:81:94:6c:b6:46:
         ee:39:ef:51:5c:3f:5f:2a:ab:46:16:29:b6:90:99:0a:82:45:
         0b:bf:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:32:04 2026 by rpki-client