Error: rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
File:                     8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft (raw, json)
Hash identifier:          JGKS7BGMJ7c2ZatwjUp97jAs0oMmX6sClfIi4/hE/lc=
Subject key identifier:   0C:66:FB:16:F4:B7:97:59:76:AA:49:D8:D7:79:DE:6B:4F:71:AE:28
Authority key identifier: F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
Certificate issuer:       /CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Certificate serial:       02E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
Manifest number:          02E0
Signing time:             Wed 14 Oct 2026 04:34:39 +0000
Manifest this update:     Wed 14 Oct 2026 04:34:38 +0000
Manifest next update:     Fri 16 Oct 2026 04:34:38 +0000
Files and hashes:         1: 8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl (hash: bybvn23Wi6NueESNquchCqqfQFoXroeR1DSWgpVOOyc=)
                          2: F56FFE86912911EFAEEF2B78762E951A.roa (hash: CXZk+/Is0OxggDK9eJOwdsU1YQzXuO6D+yTuqbBLE28=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 04:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692292AF, serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
        Validity
            Not Before: Oct 14 04:34:38 2026 GMT
            Not After : Oct 16 04:34:38 2026 GMT
        Subject: CN=6acf065e-29fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:36:96:0b:5d:91:af:c8:0a:08:60:e2:f3:
                    6b:be:ab:29:25:06:a5:51:f6:25:65:48:bc:09:a3:
                    d8:c9:62:e8:97:b9:ff:e6:69:7a:f8:64:ec:cf:48:
                    19:60:b9:f2:30:44:db:2a:f9:80:4a:c8:2c:dd:cc:
                    f3:06:ff:87:17:d8:61:8a:ea:9d:b4:af:70:92:49:
                    02:48:b4:90:5d:40:ac:46:0d:f9:45:89:83:15:73:
                    77:cf:3c:31:a9:05:ab:e0:f5:1e:12:5c:18:74:1a:
                    24:a0:02:27:73:a7:0c:15:59:b5:ec:e5:f9:b6:16:
                    a1:7d:cb:ec:3f:4a:a9:d7:9c:47:85:7c:b2:d5:98:
                    9a:53:46:8d:30:cc:ae:a0:bb:6e:53:9c:27:cd:db:
                    ee:d6:ab:d9:2b:ce:37:05:5f:4b:9e:6e:6b:d7:1a:
                    9a:96:8b:e7:3d:10:dd:56:11:f7:b4:06:d5:d2:94:
                    d2:94:72:15:c7:89:ee:1c:df:b9:f8:7e:12:cf:1a:
                    af:25:57:da:b4:17:00:83:cd:c9:23:6c:aa:03:fd:
                    97:ac:19:b6:78:55:59:bf:54:fe:3f:a9:fa:9b:08:
                    df:07:09:03:bb:03:a4:37:96:cf:90:1d:59:da:fd:
                    14:0c:42:6e:5d:52:44:9c:70:0f:25:0d:07:ca:2f:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:FB:16:F4:B7:97:59:76:AA:49:D8:D7:79:DE:6B:4F:71:AE:28
            X509v3 Authority Key Identifier:
                keyid:F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fa:60:15:46:d0:5c:b1:fb:cc:f0:86:0d:54:03:6a:6b:46:
         25:7b:a3:3e:4a:a6:3f:44:99:0d:48:35:48:c5:4a:2b:c4:15:
         00:b5:35:7f:aa:ff:ed:ce:30:4b:9d:25:72:d4:51:27:bd:d8:
         8d:b7:6c:66:a8:ec:88:9a:b4:0c:56:a1:72:2c:ed:93:9c:2d:
         e4:5b:d3:1d:e8:5a:9a:c6:07:65:b0:85:35:72:82:c6:c5:37:
         aa:d0:f4:b9:fd:e7:2d:57:9b:fe:e9:88:a5:d0:24:b1:8c:69:
         89:cc:d1:ca:ac:4f:fb:9a:c4:23:2c:24:90:ba:c8:d8:38:f5:
         6c:ce:7f:88:07:7b:a8:d3:d3:2e:7c:be:c0:56:40:c1:d7:ba:
         91:69:36:4b:0f:02:d4:2c:07:a7:f2:13:9b:10:04:78:4e:7c:
         9b:2b:70:f9:0b:c8:f0:95:03:a9:22:92:d3:d0:af:d5:78:04:
         90:a4:41:3b:23:a3:22:0d:e8:a0:6f:a9:a9:6c:78:c0:b5:89:
         29:31:5b:0f:e4:53:ed:53:f1:71:dc:1d:9b:9f:b0:d3:24:17:
         90:70:b0:f5:e3:22:da:6f:b9:ac:55:b6:c7:ad:b4:79:75:8c:
         f7:5e:8a:41:ed:1d:8e:d5:17:95:af:07:7a:4b:f7:5c:35:1d:
         98:c6:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:18:53 2026 by rpki-client