Error: rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
File:                     GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft (raw, json)
Hash identifier:          550XnT9DMpxFFWtcMu/0dfBUsi96xlvYfHPYq1JLxLc=
Subject key identifier:   31:43:BE:89:FE:44:54:CE:5E:B5:0A:28:1C:CF:2D:C8:24:3C:0F:4B
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Certificate issuer:       /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial:       0656
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
Manifest number:          0649
Signing time:             Wed 23 Sep 2026 02:49:30 +0000
Manifest this update:     Wed 23 Sep 2026 02:49:29 +0000
Manifest next update:     Fri 25 Sep 2026 02:49:29 +0000
Files and hashes:         1: GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl (hash: +QBRAarmHAYTzz5/+2g/zC/0VJmSRnRxX5nCDkw8StA=)
                          2: C1685DD2963011F1825F4F05CF1D38B0.roa (hash: fhqYnuykGs+Z520AWS4FDBIQhiN3E1HNW402LnbrByo=)
                          3: 55679E90963011F1807BD804CF1D38B0.roa (hash: 3umqNr8IQ+MIJAGZZyaKN9v+B3r8QBaBTRKQUxaThgk=)
                          4: EB112E62962F11F18E641F01CF1D38B0.roa (hash: lXP8jyvsXovBDVh6j5Lrjbv0fp3bHgsldxY2peoYWT4=)
                          5: C3B74EC82F1011F09BA573D8DAE4EC9C.roa (hash: De1WzwEpPZKq8ILtQhTT9NmJyj6jKrMY4SHBZFBEWUQ=)
                          6: E1379B68963111F1AF34890ECF1D38B0.roa (hash: cZ2UyVqYhnL/fYV1jsUwYDl9zBo3chxiEbTI6kmghc0=)
                          7: 76B62D0E963111F18A737009CF1D38B0.roa (hash: yEQI70whalELluED1cSmowIjp+TWQOgx7uMw+XMVnVw=)
                          8: 1DD2C4F4963111F190FF4A09CF1D38B0.roa (hash: r45TeHCOeqThkk/tJFSWz2bLDsF+FEVM5VykTp2GH1o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622 (0x656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9104AF, serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
        Validity
            Not Before: Sep 23 02:49:29 2026 GMT
            Not After : Sep 25 02:49:29 2026 GMT
        Subject: CN=6ab33e3a-b54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:04:7d:5c:72:d2:28:f1:f9:21:50:c6:11:98:
                    25:8b:4c:59:f2:0e:cd:cf:b1:04:b2:ef:e7:f1:ae:
                    3e:4a:f3:a5:7c:3e:67:a3:2d:9f:76:d0:28:ec:58:
                    14:d1:9c:34:00:c5:a0:27:a3:86:c1:98:c9:04:f7:
                    f6:55:d8:39:e5:37:01:e1:c3:3f:e0:4f:4c:95:29:
                    ab:23:9e:2c:77:01:6d:13:8e:55:a3:7f:78:af:e5:
                    d7:b1:41:9a:32:38:3e:d0:33:76:73:cc:68:5f:76:
                    19:7f:c0:bd:ef:45:01:6a:36:07:6e:02:14:ba:82:
                    c1:7d:be:d2:6c:1d:ab:2a:5f:15:23:c4:4e:e3:9c:
                    e8:c8:52:39:20:18:51:22:96:fe:64:47:ba:50:18:
                    a2:d2:9e:59:28:97:ba:1b:8c:91:c0:64:54:ed:11:
                    72:8e:29:a9:39:2b:ef:68:3e:e8:13:91:a8:4e:33:
                    04:74:6f:71:50:e5:ae:92:f8:19:f0:fd:bc:39:27:
                    3b:b2:c8:ee:2c:7b:4f:23:52:4c:46:ea:af:0c:db:
                    92:08:d7:e4:3d:18:57:12:b3:61:72:e0:5e:2c:86:
                    b5:db:a5:2a:a9:14:af:11:64:ce:be:f9:e5:ee:3c:
                    0d:ba:df:28:a3:f6:3a:bc:04:38:b4:0d:9a:59:23:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:43:BE:89:FE:44:54:CE:5E:B5:0A:28:1C:CF:2D:C8:24:3C:0F:4B
            X509v3 Authority Key Identifier:
                keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:51:45:0c:d2:11:d5:5b:ff:24:81:5c:b1:df:e5:43:45:a7:
         75:c7:96:be:28:cf:40:01:c5:40:91:13:9e:84:a2:6f:3d:75:
         ed:c6:05:19:c6:67:8e:62:d1:05:3b:85:f5:9e:1d:8c:99:8f:
         5b:6f:9f:17:57:54:6e:56:7c:0d:16:f5:b4:44:6d:3e:f5:56:
         bb:f6:8d:3f:99:af:e4:0e:0e:51:07:ae:12:60:e8:d2:ba:42:
         64:f5:da:5c:4f:b4:f3:48:59:e0:f4:53:aa:ad:ca:f9:4c:b2:
         4d:b8:57:b0:38:ba:fd:57:90:31:b9:12:43:cb:b5:f2:8d:87:
         0e:d1:04:3c:6f:b4:fc:e2:23:93:81:43:f8:a2:00:d7:db:85:
         27:33:e6:6a:be:84:90:76:9e:4f:1c:2b:17:9f:59:ec:60:3c:
         d0:58:e2:6a:fe:ca:83:6c:51:a1:3d:c8:e2:ec:9c:ae:e5:03:
         13:df:74:cc:62:49:61:4a:70:5b:db:c9:4b:8c:b2:fd:9c:31:
         33:8c:8a:7a:50:a9:93:b5:1a:d0:27:7a:b3:00:7a:59:0e:bc:
         60:14:3d:75:55:1a:e5:59:28:fe:74:bc:64:f0:6f:fc:f4:7e:
         17:4d:58:ce:a9:92:d9:84:89:a9:8c:31:0c:82:59:3e:1b:2c:
         bb:6d:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:48:17 2026 by rpki-client