Error: rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File:                     0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier:          IB9FqmcgCt6bGd4oxhm4ZCmQHKo1hCIH6l/Pne3ZQUs=
Subject key identifier:   E6:FE:07:E6:B3:FB:53:80:0D:C7:9B:77:9A:98:A4:D5:EC:02:BB:E4
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       0756
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number:          0750
Signing time:             Tue 22 Sep 2026 02:26:10 +0000
Manifest this update:     Tue 22 Sep 2026 02:26:09 +0000
Manifest next update:     Thu 24 Sep 2026 02:26:08 +0000
Files and hashes:         1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: E/G+OcFsmB6aX3qVibpWxLEaxNVmEUuCbX1GrJES8Es=)
                          2: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
                          3: FACAEE98703B11F186502B13CF1D38B0.roa (hash: +atnFyNmkEsaCKX9Ro0ZZNx+4LrHBs/bVM1erUMfE6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: Sep 22 02:26:09 2026 GMT
            Not After : Sep 24 02:26:08 2026 GMT
        Subject: CN=6ab1e741-8222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e6:02:91:12:4a:a8:c6:7b:1f:e9:35:e0:73:
                    8f:de:0a:b7:60:24:8b:71:07:33:2e:20:32:0c:db:
                    c3:fa:ad:41:72:f0:4a:98:4c:d6:68:ca:12:07:aa:
                    9c:ee:f2:5f:7b:6e:5a:b5:7d:ba:d4:07:00:5c:bf:
                    48:0c:ca:70:06:8f:6c:60:2c:32:d1:8f:5c:eb:e7:
                    3b:c4:76:25:be:11:15:c6:39:7c:50:2b:f1:34:99:
                    5f:87:ef:08:2a:63:30:9d:63:94:96:82:db:2b:2f:
                    cb:20:fe:f6:8c:98:df:62:38:de:34:a8:f1:ba:de:
                    7a:ac:d0:5a:c9:50:bd:0e:4b:98:f0:17:da:3c:c5:
                    7c:8e:8f:65:0f:8a:a5:c8:50:7a:df:5d:ab:ed:27:
                    6f:02:71:d0:60:95:89:c2:40:49:30:be:8c:ae:65:
                    1f:ad:f8:57:df:7b:d3:17:0a:1c:dd:f7:3a:4c:e2:
                    53:63:ce:5b:df:8f:c4:06:89:3d:0d:36:9a:93:5e:
                    61:15:38:28:61:91:35:e5:a5:7c:19:80:23:80:13:
                    72:64:cc:ad:51:2d:12:11:a9:e9:9d:6b:d8:b8:5c:
                    09:71:c0:4a:18:49:30:5f:c9:61:87:b2:3a:7c:b0:
                    be:56:0d:54:d6:06:34:2d:1b:c7:81:9f:4f:21:3b:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FE:07:E6:B3:FB:53:80:0D:C7:9B:77:9A:98:A4:D5:EC:02:BB:E4
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:00:29:2d:1d:7b:08:26:b3:fd:af:25:6b:c2:67:ad:2a:7a:
         c3:e2:6e:17:f3:b5:4c:ad:f3:a6:29:2b:f5:cc:66:3b:25:d2:
         ed:ee:6c:51:36:c0:2b:13:b0:c5:e9:d5:91:41:31:7d:a4:c2:
         43:0e:bf:87:f7:fe:a8:ce:11:81:2f:2b:8b:fa:f7:eb:50:7f:
         a3:f2:52:97:61:01:89:d6:99:a0:38:b3:fe:bd:e5:52:ac:b9:
         28:bd:bc:29:eb:1c:43:96:bd:c9:f2:4a:f5:f6:ff:75:84:ad:
         1c:41:3b:73:ab:0b:5e:55:9c:81:bb:56:0b:2a:3a:55:fc:cc:
         ea:c4:da:11:97:f3:f8:bb:39:30:e6:92:85:bc:06:48:b4:4b:
         78:d3:14:23:4a:49:bf:12:b4:1a:eb:91:a5:71:8e:32:83:79:
         95:65:e0:66:36:e3:1b:ef:44:0c:17:b5:e4:24:ff:50:86:de:
         11:30:08:85:da:ba:57:6a:d4:0d:48:cf:7f:46:02:50:65:48:
         05:db:43:80:87:c0:58:ce:dc:75:f0:97:87:ef:43:99:3f:ea:
         63:98:86:98:da:8f:18:fc:f8:c9:97:a4:5d:9d:5e:39:8e:0b:
         fd:e1:6d:7f:69:f9:0a:bf:ad:55:03:16:4e:82:a7:bb:df:56:
         6b:1b:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:17:04 2026 by rpki-client