Error: rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
File:                     IGKsHBhX7ixX9xZrmADtH4952XE.mft (raw, json)
Hash identifier:          yVoLg5R44qpIRK/O4qkf1z9cI6aojziRZ3nn0cw046Q=
Subject key identifier:   96:0C:D1:52:B5:68:99:8A:96:07:EE:0F:7A:C9:9B:E7:E4:EC:41:92
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Certificate issuer:       /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial:       0315
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
Manifest number:          0311
Signing time:             Sun 11 Oct 2026 04:28:26 +0000
Manifest this update:     Sun 11 Oct 2026 04:28:26 +0000
Manifest next update:     Tue 13 Oct 2026 04:28:26 +0000
Files and hashes:         1: IGKsHBhX7ixX9xZrmADtH4952XE.crl (hash: othUZEAGFPx8SoQXKHhqwXoJuPQjZu/gN3Zyed6Qrhk=)
                          2: C00EBB487EC011F1A02B611BCF1D38B0.roa (hash: gCmNtUdXuEUu53fztVj0ryayk/YMUurBf8PkCG1BN38=)
                          3: 730CF53E6F7811EFB7469458762E951A.roa (hash: 4Xr+HaCJbqAah+5S3H7APXwnc3AnA1LsHigd1Wadgok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 04:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C3F1AF, serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
        Validity
            Not Before: Oct 11 04:28:26 2026 GMT
            Not After : Oct 13 04:28:26 2026 GMT
        Subject: CN=6acb106a-28c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:4d:52:b8:e1:10:5e:86:4a:32:cc:24:74:
                    42:96:3f:16:7f:78:f2:6f:6a:c4:63:07:09:65:2b:
                    0d:97:70:61:77:a3:00:3f:f0:42:ad:be:9c:e7:6e:
                    d0:cc:4a:29:68:b4:a3:75:7d:24:d8:f8:fb:2a:fd:
                    d2:2c:c9:84:a6:0e:76:85:85:91:53:33:1e:bb:e3:
                    60:fb:2a:4b:63:d2:0f:e0:ee:70:df:a7:5f:79:49:
                    f2:8b:82:f0:9b:15:83:c6:b0:f5:98:e1:68:54:75:
                    ac:75:56:75:62:12:cc:88:9d:92:5c:85:13:8c:6e:
                    c0:33:44:2a:83:59:95:7c:4e:a6:56:6a:0e:f8:66:
                    36:a8:8c:60:b7:bf:c6:bc:b7:ad:80:b9:e0:18:a5:
                    e9:bb:8c:aa:61:2e:e4:ea:1e:a9:48:a1:b2:bc:1a:
                    7c:76:e8:2b:32:16:31:c5:eb:18:eb:1b:77:9b:31:
                    a4:67:25:00:6d:0b:f1:2e:ea:c0:96:8b:11:a3:ba:
                    08:34:26:3e:30:dc:03:ba:4c:61:32:64:0b:9d:eb:
                    61:53:eb:5c:77:31:45:ef:26:68:fa:e5:0d:2f:8d:
                    7c:1b:06:34:80:29:17:05:40:b7:65:aa:fb:bb:07:
                    32:9f:ed:5e:49:65:d1:93:17:6d:c1:c5:65:44:d8:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0C:D1:52:B5:68:99:8A:96:07:EE:0F:7A:C9:9B:E7:E4:EC:41:92
            X509v3 Authority Key Identifier:
                keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e3:dd:5d:f8:42:8a:e9:66:57:64:f8:48:c0:f6:2d:99:2c:
         44:f2:22:72:41:fa:17:03:85:40:42:3f:f4:23:2e:81:c7:ca:
         26:bd:6f:03:44:ca:78:54:2b:3a:e4:86:68:df:b8:6b:72:58:
         7d:d2:dc:7e:ae:b1:39:69:95:25:05:8c:3f:b8:0f:28:6b:4d:
         02:2e:34:68:bd:29:27:22:95:fb:97:f2:c5:59:90:25:66:02:
         12:5c:c3:2b:4a:73:77:0d:f3:d9:dc:a3:c3:54:7f:cf:bb:ef:
         b9:41:a4:d7:f5:4e:c5:eb:d1:59:d4:ee:6a:3c:a4:6d:57:ba:
         f0:ef:11:89:db:18:cd:8a:a4:fe:50:ef:73:db:23:ca:9f:4d:
         48:7f:83:dc:1f:ed:c7:88:24:f8:91:49:5e:9a:0b:36:a8:13:
         e8:42:0a:6d:00:28:7d:09:14:63:80:a1:ba:b6:ce:c9:c5:11:
         ea:7a:eb:5d:70:c7:b0:41:80:32:a2:8c:8e:86:90:b7:32:45:
         ae:ff:8b:e9:b9:83:19:05:36:91:b3:b4:14:e5:11:0e:d0:15:
         1c:39:1f:77:8b:00:0f:a6:14:8e:96:45:a6:3a:c5:3e:08:a7:
         29:3b:3f:0a:b2:39:13:2d:35:1b:ce:e5:ca:2c:b8:fc:70:8c:
         af:c6:42:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:18:51 2026 by rpki-client