Error: rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
File:                     1QtxHNd881kYPT_e5YqZVLbPdwg.mft (raw, json)
Hash identifier:          Jaz/wD7Vazle9IYYBt5Znc8wlPAxZkmwkWowF9J45DQ=
Subject key identifier:   F2:7F:E4:DE:79:26:F1:3B:C4:1D:9B:E5:B4:B4:BA:10:B8:01:90:1F
Authority key identifier: D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
Certificate issuer:       /CN=F367FECCAF/serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Certificate serial:       079B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
Manifest number:          0796
Signing time:             Wed 23 Sep 2026 02:17:05 +0000
Manifest this update:     Wed 23 Sep 2026 02:17:05 +0000
Manifest next update:     Fri 25 Sep 2026 02:17:05 +0000
Files and hashes:         1: 1QtxHNd881kYPT_e5YqZVLbPdwg.crl (hash: 2CKv/zIPj/Tdgt6Irvw2AxJ6ZvUQxxgAiKRor16kZuo=)
                          2: 2D74E6CE2CDE11F1B13255A8DAE4EC9C.roa (hash: +81hzYpM3W36exbMJDzXr2Ri1//pFW7oRixW0r8/AJY=)
                          3: 526901882CE611F1BF63EBD6DAE4EC9C.roa (hash: aw2Z7KwdzkCBr55pTjeJJCbVsjj0x/wKbNsblVOzb6E=)
                          4: FF757B4E2CDD11F19B6540A8DAE4EC9C.roa (hash: 5UlL0ZRX7x5wQWu7za/SUcPB92F6HJ1BFe+lS7nnTtc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FECCAF, serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
        Validity
            Not Before: Sep 23 02:17:05 2026 GMT
            Not After : Sep 25 02:17:05 2026 GMT
        Subject: CN=6ab336a1-45a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:ef:c4:55:43:8e:9e:cd:57:f4:58:8d:f1:
                    a7:fb:ba:2d:f2:7e:ec:e6:67:f3:99:b9:b4:ab:da:
                    15:a9:bd:e6:fd:6a:9b:ea:68:40:a7:19:10:73:48:
                    4d:d0:eb:18:d1:9e:d8:50:2d:09:86:73:1e:80:03:
                    a2:de:7a:6e:ee:ce:e7:6b:06:88:f2:cc:d2:a3:23:
                    54:51:69:e9:7e:7c:59:06:96:8b:d1:e1:2e:be:5f:
                    b3:09:91:c6:87:e2:1b:9e:5d:79:75:72:af:5b:ff:
                    da:dc:9a:00:eb:13:20:59:2b:b2:87:38:5e:8e:19:
                    d8:86:73:39:c4:ab:c9:a2:66:cb:dc:9d:de:f6:10:
                    38:50:20:e0:df:f4:36:c2:8a:8e:a2:9f:54:25:4f:
                    1d:02:a5:a0:05:8c:02:73:5c:69:8a:dd:d6:dd:33:
                    b1:34:a1:62:b1:26:d2:5c:19:64:b6:b9:29:31:f7:
                    a2:19:71:01:5b:ef:93:ed:99:58:42:0d:82:09:4a:
                    ab:d7:35:74:96:f3:70:38:90:8a:af:2e:96:ea:b8:
                    5e:bb:36:e2:26:d6:e2:7f:db:37:2c:69:10:1c:ec:
                    41:1d:49:15:7e:81:7e:c3:f0:43:ae:76:c3:0a:b1:
                    04:0b:a9:27:4e:6a:a4:40:d1:e5:e3:09:6f:ab:41:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7F:E4:DE:79:26:F1:3B:C4:1D:9B:E5:B4:B4:BA:10:B8:01:90:1F
            X509v3 Authority Key Identifier:
                keyid:D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:49:04:7a:f8:b2:e7:a8:36:96:8e:14:3d:61:32:07:fa:39:
         f2:e4:d7:ec:2c:c5:77:62:95:6f:0d:72:44:21:22:59:23:f9:
         c0:20:ae:4e:df:9f:e2:cf:d2:7a:d9:06:0a:32:ae:e4:e5:1b:
         e7:35:40:80:f1:21:7c:b0:98:80:d1:f2:9d:fb:b9:67:8e:7e:
         e7:df:ae:97:80:23:97:cb:d3:02:66:3f:a2:4f:2c:8c:d8:08:
         75:be:f0:98:64:6b:20:f9:57:b9:50:03:6a:bf:f4:d7:11:42:
         fe:06:a4:80:a9:6c:af:ba:1c:18:9a:a7:6d:20:5d:25:4d:50:
         69:31:ad:8d:f8:e5:76:f9:f7:45:3b:c9:96:ae:06:fb:28:93:
         13:b8:17:6b:31:65:34:ed:aa:6a:80:6f:52:ff:d7:41:a1:9a:
         83:25:2a:64:03:99:ca:3e:10:c2:03:81:50:4d:63:51:37:f4:
         08:e3:64:ad:b3:49:07:90:62:4d:3a:c4:80:9b:b3:90:35:d8:
         45:5c:42:56:64:1e:d0:3c:ac:82:3e:96:c5:02:bd:f8:f5:83:
         ee:51:d6:92:95:ce:45:ac:de:d1:53:43:ea:a5:fa:f2:8b:3b:
         85:b0:88:27:76:01:aa:04:21:ca:73:e1:0e:d7:4a:a3:b9:6e:
         c9:9d:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:43:55 2026 by rpki-client