Error: rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
File:                     i_LUycasChgyjdPrbLWQRBc3zug.mft (raw, json)
Hash identifier:          Jdp2HAhccQ9M5YgcF5SoF3G0raZFq6aY1DnbzDR/KC4=
Subject key identifier:   10:27:47:F9:E5:61:A7:B9:05:61:27:83:2B:92:9A:58:A8:EF:EB:92
Authority key identifier: 8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8
Certificate issuer:       /CN=F369442EAF/serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
Certificate serial:       0890
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
Manifest number:          088F
Signing time:             Wed 23 Sep 2026 01:57:18 +0000
Manifest this update:     Wed 23 Sep 2026 01:57:17 +0000
Manifest next update:     Fri 25 Sep 2026 01:57:17 +0000
Files and hashes:         1: i_LUycasChgyjdPrbLWQRBc3zug.crl (hash: XamV6LaKNcUFoFxv4l6merNqe8FBheaZeVtmn2uxwVA=)
                          2: CA4847F0260111EBACE81C12F8AEA228.roa (hash: wvHb/Kw9w+IZBIpt5st+Xz0N4A4tUwQJ6TE8L7LFn7U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 01:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192 (0x890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369442EAF, serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
        Validity
            Not Before: Sep 23 01:57:17 2026 GMT
            Not After : Sep 25 01:57:17 2026 GMT
        Subject: CN=6ab331fe-8c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:df:5f:97:5e:f9:a2:b7:cb:d0:5e:ab:f7:5a:
                    5a:fa:22:7e:d8:9f:19:7a:16:58:b9:7c:98:61:f9:
                    d9:d2:a0:22:d3:38:1f:29:8b:a5:19:6f:e2:93:95:
                    fb:f5:98:87:93:3d:60:c5:30:de:23:fb:e3:80:46:
                    10:17:6e:76:a0:e6:d0:89:e5:6a:c9:c0:f3:44:68:
                    39:4f:51:3f:ee:4a:a8:c2:3f:89:92:54:ea:50:f9:
                    33:b0:ee:50:a7:3f:86:fa:67:1f:ec:22:5e:67:b8:
                    41:27:8e:7f:07:ac:1b:70:83:77:b6:a8:ad:42:66:
                    c3:b6:80:a2:38:30:d2:af:af:94:91:64:0a:8d:86:
                    84:62:f8:04:37:86:7b:cd:30:85:fb:1e:ed:4d:77:
                    38:68:f5:c5:8f:7c:d0:2f:88:00:d0:db:de:18:ad:
                    12:a3:ba:c6:a0:a8:ed:71:bb:94:36:32:d7:04:6c:
                    c1:59:2e:6b:dd:64:03:47:46:ee:d4:eb:81:84:21:
                    6b:27:b3:c0:a4:e3:b4:9b:6d:f5:20:91:a1:b1:fc:
                    5a:23:e3:6f:92:f3:22:dc:fc:67:92:82:4d:60:af:
                    9d:6d:a2:b6:ae:78:61:d9:39:08:37:11:db:80:e0:
                    a8:4f:b8:21:7a:5a:08:55:08:3f:82:ac:c5:02:f0:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:27:47:F9:E5:61:A7:B9:05:61:27:83:2B:92:9A:58:A8:EF:EB:92
            X509v3 Authority Key Identifier:
                keyid:8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2c:12:3e:23:f1:89:4d:0b:fd:50:54:7b:e3:72:fa:95:5b:
         da:6d:85:ef:29:2f:aa:82:b5:7e:17:03:75:63:d4:58:b9:87:
         de:e9:48:5c:f2:d7:10:db:e1:cd:68:59:5b:d8:d1:f4:76:d7:
         93:72:0c:cb:69:da:0a:46:a9:71:71:dc:0c:d4:21:97:ff:2e:
         5c:b2:80:74:4e:a3:ef:3c:8b:63:e9:44:d9:7b:af:42:e9:3a:
         c2:65:ec:8b:02:2f:c6:dc:e9:f9:ce:b6:d2:22:45:13:d7:ac:
         32:f4:01:7d:ae:9a:1c:8a:23:30:8c:91:3d:43:75:59:7f:75:
         ec:cb:f8:3e:1d:16:d1:ec:15:b5:fc:41:1e:f7:11:d2:34:4a:
         90:fb:91:18:49:1c:ce:b2:0b:97:47:f6:96:91:9e:22:89:96:
         63:f0:25:32:6b:67:ec:d2:9f:8e:9c:82:eb:cc:c5:e0:1f:80:
         de:f6:f0:98:01:da:b5:20:b5:b6:e6:de:47:5c:65:38:0c:10:
         5b:b0:9a:91:f3:26:44:be:93:0e:dd:3f:62:51:7e:7d:0b:97:
         00:65:74:4e:28:21:2d:eb:c5:b3:51:60:36:bd:e9:20:81:7f:
         4c:60:17:ed:57:f2:28:80:3c:db:03:5a:04:88:dd:80:26:7c:
         04:c8:6a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:57 2026 by rpki-client