Error: rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          fkrwa1lyFTGz0uxj/VGntvK3+ViHIIaBmVoxTjRFDVI=
Subject key identifier:   34:9C:89:83:3F:7B:C5:79:97:73:38:5B:28:D2:50:E6:A7:8F:1F:CB
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       0744
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          0740
Signing time:             Tue 06 Oct 2026 02:29:30 +0000
Manifest this update:     Tue 06 Oct 2026 02:29:30 +0000
Manifest next update:     Thu 08 Oct 2026 02:29:30 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: 5niCu0Skq/1bRmrCJ/+NABIagyCkpA4NLLrVpl7cfqY=)
                          2: A727C4428B6F11F1BB2BB2B7CE1D38B0.roa (hash: XawFZJaxnzvq5b0Rtz7wsotNQ+4PwTnD6TvOuVmsVCg=)
                          3: 6AE6E2A0899511F1836059E9CE1D38B0.roa (hash: Ke0DyeeNvPUu3/HySu88mHg8fSTxD3OWYshhFWO+3pE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 02:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Oct  6 02:29:30 2026 GMT
            Not After : Oct  8 02:29:30 2026 GMT
        Subject: CN=6ac45d0a-c03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:52:a2:f9:73:36:12:14:16:90:01:ab:5e:
                    02:6a:c1:b4:3f:af:5d:a7:d0:20:ab:9f:c5:38:cb:
                    1f:12:6b:02:ad:98:50:bb:9a:ae:b4:53:75:e1:c0:
                    8a:14:a5:66:17:a7:6a:29:51:57:3b:ab:6e:49:da:
                    18:85:8f:ec:c9:0b:fb:17:b1:ee:5d:45:4b:74:df:
                    52:44:43:f2:c8:d1:8b:a0:38:ac:49:8c:a3:70:14:
                    77:eb:15:7c:48:00:f2:2f:57:78:0d:d2:0a:bc:74:
                    0f:d7:15:07:ab:68:c2:b0:89:a7:2c:73:7c:ee:f7:
                    e2:71:c1:51:66:f4:cb:d3:9b:06:b9:8a:25:fe:95:
                    dd:a4:f0:c2:aa:d1:f0:d1:b0:c9:e4:b8:3f:0e:09:
                    05:57:32:99:67:e1:f2:c1:57:7e:e3:da:f1:d0:d0:
                    d9:cb:00:cc:35:0a:c5:cc:c8:81:25:00:68:d1:08:
                    e8:87:ca:0b:04:f2:f9:7e:93:59:d2:e9:2a:4e:7f:
                    ec:79:7c:a8:d8:a2:a2:74:90:04:63:6d:33:3c:3c:
                    0c:98:3f:76:7d:59:25:49:85:02:7a:e4:43:33:4f:
                    8c:82:ca:88:1b:22:03:84:3d:18:e8:47:8c:1e:61:
                    a3:f3:1b:f2:14:47:90:4e:1b:2c:c6:d0:2a:18:f3:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9C:89:83:3F:7B:C5:79:97:73:38:5B:28:D2:50:E6:A7:8F:1F:CB
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4b:51:4b:76:dd:a9:fd:f8:bb:8a:e2:06:6d:a1:32:e5:9d:
         a1:c5:18:fb:6a:c8:cc:f3:45:29:b6:60:19:69:8e:21:c7:43:
         a0:b6:24:6c:bc:c6:5a:14:d5:73:24:6d:88:1c:91:49:b4:a6:
         11:db:38:f3:f8:cc:94:c7:d4:b6:e7:3b:05:83:8d:80:e4:08:
         eb:89:ad:b1:8e:d2:65:78:8e:84:c7:59:0e:c7:e5:81:8c:94:
         f5:ff:91:8e:3e:d6:b3:48:19:52:13:76:1a:89:1e:d4:a3:90:
         8e:09:4c:bc:07:d4:25:db:62:d5:4a:8f:19:a8:e8:4b:f9:73:
         1e:52:d1:47:d9:8e:eb:e2:cb:13:f9:3b:27:64:26:d9:a5:ab:
         60:f1:c8:2d:c1:3d:e8:79:f4:aa:cf:59:8f:4b:2c:1c:b6:6d:
         ff:e6:cc:62:ec:2c:30:f4:ba:d9:67:e4:14:8a:a2:b0:e1:0a:
         ab:9d:40:c1:86:4e:b4:61:41:e2:a4:87:f0:35:27:ac:18:58:
         49:65:26:46:2b:8f:da:cc:53:1b:ae:f1:42:5d:00:9b:e7:0d:
         1b:b9:ca:5a:77:56:6f:3e:ae:a9:ce:6e:09:25:c4:82:10:d7:
         ed:69:50:6d:1f:ad:5d:66:96:a4:df:b6:bd:15:7e:ae:c9:eb:
         fe:3f:f0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:35:07 2026 by rpki-client