Error: rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
File:                     j29vvKPGNM2_8Exy6bDsgG-YPKg.mft (raw, json)
Hash identifier:          xN1AoDd6bq3INczB2Ik0of2zGSdzPceQvj/jR+BWSIk=
Subject key identifier:   6A:17:59:65:E2:A9:B0:79:3A:78:B6:86:47:CB:56:AD:E0:78:F9:86
Authority key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
Certificate issuer:       /CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Certificate serial:       0600
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
Manifest number:          05F8
Signing time:             Fri 25 Sep 2026 02:57:46 +0000
Manifest this update:     Fri 25 Sep 2026 02:57:46 +0000
Manifest next update:     Sun 27 Sep 2026 02:57:46 +0000
Files and hashes:         1: j29vvKPGNM2_8Exy6bDsgG-YPKg.crl (hash: 2bDd9FcFg1qoi0Vip5c9TGV7fmxd5s7QvhUIMA7iph0=)
                          2: 3DA69D961BCA11F1918555C4DAE4EC9C.roa (hash: 68AnR/th2SY3znbafBTOtTv6a61LmQOlECVH4316gFw=)
                          3: FB14937C4F2711EF830F0C61762E951A.roa (hash: NKUhSMZnwRNOJiKnhnRiI1tGFsbNrt1VXb7ny/WxBiE=)
                          4: 8755280E1BCA11F1B3CC1EC6DAE4EC9C.roa (hash: Oap45mZLKCTOQe7t7Oj2A7/zZC0NwHUyQDZ55kGJhZ4=)
                          5: C2F0ECE01BCA11F18DDC2CC8DAE4EC9C.roa (hash: h7Ql3LItqp4CaZdBMQDX7q3kdhWbiOtdEbHHdlQjWyY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1536 (0x600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B57DFAF, serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
        Validity
            Not Before: Sep 25 02:57:46 2026 GMT
            Not After : Sep 27 02:57:46 2026 GMT
        Subject: CN=6ab5e32a-1f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:40:89:d8:2b:b6:55:e0:b5:be:d1:33:ba:
                    e9:a3:0b:2c:d7:d4:35:0d:40:55:a2:4c:70:17:64:
                    c8:7c:15:d5:2e:02:e6:ca:57:23:f4:9b:ef:f2:af:
                    4a:17:eb:c1:c3:1a:bc:1e:d9:5b:1b:aa:90:69:8d:
                    cc:eb:15:61:ff:2c:44:57:d7:e4:78:49:98:36:2c:
                    e4:43:f6:aa:57:35:5a:1b:10:3b:f0:2f:af:72:66:
                    6b:24:ad:2e:24:d5:b3:1c:ff:85:ea:5e:cc:25:91:
                    22:d1:1c:f6:a5:a1:6d:f1:60:47:0f:4d:3b:8b:5e:
                    98:04:1d:4e:06:d5:55:d1:5a:30:f4:10:8b:4f:56:
                    01:8d:08:7e:0d:27:b0:53:0f:58:b4:22:05:53:f0:
                    d5:46:14:0a:d1:28:11:fc:5a:1d:90:18:3c:c1:e1:
                    d8:14:94:56:2b:2b:10:0a:24:fa:fa:3b:b4:87:a4:
                    71:db:4d:87:7c:45:71:bd:2f:8d:de:fc:9b:c9:de:
                    cd:54:9b:3b:b9:cb:35:61:f4:29:9d:db:aa:a6:3f:
                    2a:6b:6f:f4:62:6a:a9:38:97:a9:6e:0f:1b:7f:2f:
                    d9:7f:1c:ae:48:ca:b2:6c:2d:27:3a:e4:93:d6:26:
                    a9:4b:d8:f6:f5:1a:48:dd:70:c6:1a:9b:d4:bc:bb:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:17:59:65:E2:A9:B0:79:3A:78:B6:86:47:CB:56:AD:E0:78:F9:86
            X509v3 Authority Key Identifier:
                keyid:8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8d:04:b3:85:6e:e2:58:50:02:54:fb:52:55:93:7c:79:41:
         58:b8:34:73:60:87:df:4e:54:05:f7:6d:0a:26:2f:4a:1e:be:
         53:3d:b1:06:46:d0:be:7c:96:aa:11:e0:5e:01:5d:73:a4:2d:
         60:df:3b:6c:3b:e3:3d:5f:0d:c7:d4:19:b7:31:a3:fb:b9:64:
         c2:76:6d:3c:95:d0:08:80:66:42:b9:11:8f:c0:e3:f1:d0:c5:
         43:34:c6:93:3e:50:8d:d6:1a:7f:7e:95:bf:80:32:6b:8b:ac:
         04:22:42:0a:01:76:a8:4d:6a:d5:fd:e5:e9:d5:8c:88:74:10:
         ed:9c:4b:c4:36:19:b5:24:3c:e2:ea:46:6e:5b:a6:3a:d8:63:
         c6:ec:6e:db:80:18:0e:b4:3f:3a:8e:fc:b2:4b:49:a0:18:0a:
         9f:1c:54:1b:5f:17:c4:1e:69:cd:92:5c:a3:f6:35:9e:5d:6c:
         03:d7:15:b5:7f:53:45:7f:6f:d2:e0:c5:50:91:00:e3:32:88:
         7e:9e:67:ae:22:24:07:0b:92:a6:7b:a4:60:1a:69:a8:b1:d0:
         f3:df:9c:19:0d:0f:b4:fd:82:b6:2b:d5:fa:bf:be:e1:73:00:
         d8:09:e3:3d:ea:44:18:9d:5f:78:1d:28:fa:d7:43:e2:b5:91:
         19:33:de:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:30:35 2026 by rpki-client