Error: rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft
File:                     LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft (raw, json)
Hash identifier:          eroji2H3AXdd0Q/JvSVjnLHwRsknFtQKpHnrusSqRdU=
Subject key identifier:   D7:94:EF:0C:05:86:1B:02:36:6B:52:32:4A:AB:0A:B8:63:86:73:5C
Authority key identifier: 2E:2B:56:1C:30:BC:AD:47:18:34:80:1A:54:58:6A:5C:28:36:36:5D
Certificate issuer:       /CN=F3699F17AF/serialNumber=2E2B561C30BCAD471834801A54586A5C2836365D
Certificate serial:       0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LitWHDC8rUcYNIAaVFhqXCg2Nl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft
Manifest number:          0C
Signing time:             Sun 15 Nov 2026 06:06:42 +0000
Manifest this update:     Sun 15 Nov 2026 06:06:41 +0000
Manifest next update:     Tue 17 Nov 2026 06:06:41 +0000
Files and hashes:         1: LitWHDC8rUcYNIAaVFhqXCg2Nl0.crl (hash: Uz9ij7jKujb5QR4TtQU3TP7MaSGp+IhY+d+jBSw3PbY=)
                          2: 8163911CD93C11F1B3DC98A4CE1D38B0.roa (hash: 66zaA10c2aiO/6pgAuIt1Omee7TvaHhOKzoczOgimNE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LitWHDC8rUcYNIAaVFhqXCg2Nl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699F17AF, serialNumber=2E2B561C30BCAD471834801A54586A5C2836365D
        Validity
            Not Before: Nov 15 06:06:41 2026 GMT
            Not After : Nov 17 06:06:41 2026 GMT
        Subject: CN=6af94bf2-c990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fa:8e:c9:dd:0c:48:ff:8a:81:28:c3:38:77:
                    de:ea:9b:d9:4b:2c:05:8e:fd:03:54:44:ce:a5:ad:
                    69:14:14:7f:ec:2c:2c:03:e8:f6:3a:4d:96:6b:d5:
                    0c:0c:0e:55:ec:19:c7:1b:6f:e9:4f:98:1b:50:33:
                    60:b4:a4:08:41:83:d1:d5:c4:1c:02:c6:bb:0f:50:
                    91:a6:77:e3:71:54:41:1d:57:41:00:29:ba:ad:8d:
                    bf:8d:89:ad:fc:3e:7e:06:13:fa:f2:d1:11:1e:9b:
                    bf:88:81:10:5b:aa:f8:86:68:55:7e:a3:dc:67:e4:
                    c2:32:e6:51:44:d4:79:4a:2c:cb:f5:20:e9:a9:e5:
                    73:b1:dd:6c:58:82:ec:6e:2e:d1:32:09:d5:ca:cf:
                    c2:ba:7b:85:e7:19:fe:c7:3a:a5:9a:70:8d:b2:d3:
                    5a:70:dc:42:9e:0f:fc:e5:c3:52:d8:38:37:e3:82:
                    d9:78:76:72:22:22:4c:61:cc:95:f6:fe:ee:8f:af:
                    27:b4:e2:5a:de:a1:2b:78:22:63:aa:96:94:6a:24:
                    fc:82:76:bf:29:a0:eb:4b:4e:78:3e:b5:4c:50:a3:
                    5e:1c:39:bb:1d:e9:32:cf:af:a0:d2:09:3e:ff:74:
                    23:b2:cc:be:1b:55:4d:c7:ad:a8:45:a8:59:a2:da:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:94:EF:0C:05:86:1B:02:36:6B:52:32:4A:AB:0A:B8:63:86:73:5C
            X509v3 Authority Key Identifier:
                keyid:2E:2B:56:1C:30:BC:AD:47:18:34:80:1A:54:58:6A:5C:28:36:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LitWHDC8rUcYNIAaVFhqXCg2Nl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e3:2e:0a:b0:ef:bd:c3:dd:ba:e4:46:8c:41:0f:f5:d9:fd:
         c1:35:cc:de:94:87:3f:49:1b:92:06:bd:aa:4f:3b:61:56:77:
         5e:37:cd:1b:4f:02:b1:3e:fd:ee:4e:bf:d6:14:35:6b:a7:8d:
         08:ec:a1:dc:c9:4a:fa:1b:59:87:44:d3:a7:47:69:fa:06:0a:
         0c:96:f7:57:aa:a9:63:1a:be:5b:da:aa:36:7a:d9:4d:85:c7:
         db:c0:f4:af:78:26:df:02:98:c8:16:77:03:36:96:41:d2:8e:
         79:10:00:fc:14:80:1b:c8:29:a0:85:cf:33:22:3d:a9:eb:1e:
         64:69:af:88:f8:02:6a:b3:af:41:a6:59:97:65:e7:b6:45:c4:
         88:32:3e:ef:78:c0:9e:46:34:1e:a0:d3:14:da:3d:54:a5:b7:
         54:42:b8:09:2a:a9:16:5e:bd:b8:92:74:d8:db:7d:17:30:95:
         42:e3:4f:1d:e8:05:28:f6:fe:cb:95:7c:b7:d7:da:4f:c6:d7:
         48:82:92:4e:dd:ad:55:41:d2:e4:8f:94:51:27:fa:6e:85:b1:
         5f:d7:d5:ff:58:10:20:0c:51:d8:40:7e:ea:03:fa:22:71:37:
         9a:8f:f4:e0:cd:51:b8:f2:59:a4:b7:c0:4b:22:34:cc:2c:f4:
         4b:ba:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:08:48 2026 by rpki-client