Error: rpki.afrinic.net/repository/member_repository/F36CBEF1/391462982B5311ECBB354835D8A014CE/eGxUvbUBC7y_FFNCJ9mnU-9S_ng.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CBEF1/391462982B5311ECBB354835D8A014CE/eGxUvbUBC7y_FFNCJ9mnU-9S_ng.mft
File:                     eGxUvbUBC7y_FFNCJ9mnU-9S_ng.mft (raw, json)
Hash identifier:          v2/d2qvy8HTpcKJlGNvs+ZNF9oT5ok9ObXC1K7B6Hvg=
Subject key identifier:   2A:A5:AE:A7:43:EA:3D:55:9B:FB:EF:13:A9:E6:E2:C2:7D:8C:FF:E6
Authority key identifier: 78:6C:54:BD:B5:01:0B:BC:BF:14:53:42:27:D9:A7:53:EF:52:FE:78
Certificate issuer:       /CN=F36CBEF1AF/serialNumber=786C54BDB5010BBCBF14534227D9A753EF52FE78
Certificate serial:       0739
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eGxUvbUBC7y_FFNCJ9mnU-9S_ng.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CBEF1/391462982B5311ECBB354835D8A014CE/eGxUvbUBC7y_FFNCJ9mnU-9S_ng.mft
Manifest number:          0739
Signing time:             Thu 24 Sep 2026 02:29:06 +0000
Manifest this update:     Thu 24 Sep 2026 02:29:05 +0000
Manifest next update:     Sat 26 Sep 2026 02:29:05 +0000
Files and hashes:         1: eGxUvbUBC7y_FFNCJ9mnU-9S_ng.crl (hash: 9Of+424HP+oE8YkgN2Jsu2ipLY1rtlfLPQ7eE7OyYjM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CBEF1/391462982B5311ECBB354835D8A014CE/eGxUvbUBC7y_FFNCJ9mnU-9S_ng.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CBEF1/391462982B5311ECBB354835D8A014CE/eGxUvbUBC7y_FFNCJ9mnU-9S_ng.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eGxUvbUBC7y_FFNCJ9mnU-9S_ng.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CBEF1AF, serialNumber=786C54BDB5010BBCBF14534227D9A753EF52FE78
        Validity
            Not Before: Sep 24 02:29:05 2026 GMT
            Not After : Sep 26 02:29:05 2026 GMT
        Subject: CN=6ab48af2-2a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:c0:80:72:c3:2f:36:bc:7d:e9:ed:41:e7:
                    db:22:61:63:29:9e:23:f5:1f:6e:26:ad:06:a3:56:
                    cc:5d:65:dc:ee:47:a3:92:2f:84:2d:47:5d:15:33:
                    44:39:b2:96:65:1f:c0:df:88:ed:f9:f7:08:7f:e0:
                    53:75:82:9b:dc:a3:e2:62:68:52:a2:bf:25:58:9b:
                    46:67:92:47:9f:62:0e:61:70:a0:9c:34:69:51:e9:
                    40:5a:4f:ce:4f:b7:3b:be:bd:13:df:42:b5:27:6b:
                    a1:3c:d4:b6:a2:0a:7f:23:ef:c7:59:29:af:ab:f6:
                    8c:ba:19:1a:75:4c:36:e5:14:8d:64:40:5a:fe:28:
                    91:42:26:f2:91:74:b2:18:13:dc:7e:98:3b:69:e2:
                    1c:ee:06:cd:89:ae:7a:46:bf:dc:25:d5:01:8b:d4:
                    2f:1f:aa:ee:04:46:89:5d:66:96:f7:b9:fe:25:57:
                    95:ed:7d:6e:77:33:e6:62:35:3e:34:3d:6e:59:67:
                    58:2b:cd:bb:5f:ea:64:74:34:33:d3:51:67:42:1b:
                    26:ec:8a:61:90:bd:e9:60:45:14:7b:52:b4:4a:5e:
                    48:94:89:b9:0e:bf:0a:ca:ef:91:0f:24:91:08:13:
                    6f:e6:82:87:04:2f:8a:44:ec:48:08:bc:48:c4:d9:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A5:AE:A7:43:EA:3D:55:9B:FB:EF:13:A9:E6:E2:C2:7D:8C:FF:E6
            X509v3 Authority Key Identifier:
                keyid:78:6C:54:BD:B5:01:0B:BC:BF:14:53:42:27:D9:A7:53:EF:52:FE:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CBEF1/391462982B5311ECBB354835D8A014CE/eGxUvbUBC7y_FFNCJ9mnU-9S_ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eGxUvbUBC7y_FFNCJ9mnU-9S_ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CBEF1/391462982B5311ECBB354835D8A014CE/eGxUvbUBC7y_FFNCJ9mnU-9S_ng.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bc:b3:b7:ff:fa:e4:07:aa:08:8a:bc:cf:49:86:83:b5:a9:
         d4:fd:fa:36:26:7b:df:b1:b4:51:b5:0c:a0:1d:d8:5c:16:a7:
         9b:96:dd:41:7e:b7:aa:f9:24:d6:6e:b6:f6:f5:8e:6a:db:d4:
         d1:83:df:03:ed:f0:61:f5:9a:f4:26:45:1d:31:54:69:be:5c:
         92:73:6f:b1:a4:4c:04:24:81:54:59:68:7d:15:38:34:b0:55:
         0d:8a:3b:04:67:64:0f:03:48:77:4b:7e:a1:ed:8d:82:b7:4c:
         34:25:ad:f2:aa:37:27:8a:06:1c:35:ee:8e:78:ba:78:6e:b3:
         87:b0:ce:72:b6:c9:1e:34:1f:6a:d3:bb:c7:85:0f:d3:59:de:
         b1:9b:25:f7:20:68:a5:40:2f:02:f5:48:87:4f:1b:ef:55:d5:
         49:46:36:b6:38:b4:0c:68:dd:ba:10:60:0b:c5:2a:79:90:90:
         d3:d8:51:ea:0e:31:3f:67:63:ee:db:ed:e6:80:9e:46:f1:d1:
         9c:de:75:ec:38:86:03:ab:ef:49:5c:79:4a:ae:2a:6c:9b:9a:
         c6:5a:12:05:15:23:15:c8:85:ea:42:7c:9d:59:4a:1f:1a:5b:
         e7:7c:78:14:fe:5d:7f:63:d9:4a:48:e6:2d:1a:30:2c:6b:87:
         5e:74:18:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:40:58 2026 by rpki-client