Error: rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
File:                     LElzuTCDpISsLUZYJ4UCx4jQZPU.mft (raw, json)
Hash identifier:          to2rnjBH+Fg0yINa6SoNxzKq9oLCLiiDo2QiesRORbw=
Subject key identifier:   AB:35:D0:AA:78:6E:0F:40:A2:E5:0E:4D:2B:E2:EA:B2:93:57:45:44
Authority key identifier: 2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5
Certificate issuer:       /CN=F36D96A0AF/serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
Certificate serial:       0604
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
Manifest number:          05FC
Signing time:             Thu 24 Sep 2026 02:59:10 +0000
Manifest this update:     Thu 24 Sep 2026 02:59:09 +0000
Manifest next update:     Sat 26 Sep 2026 02:59:09 +0000
Files and hashes:         1: LElzuTCDpISsLUZYJ4UCx4jQZPU.crl (hash: yepjxlY9XOyuzy8tqN7T5qEXM0Z0GKI3F25qIDwuWEM=)
                          2: A7068B628CA811F1A92E63BECE1D38B0.roa (hash: T+KaTN7CnFyIm7H8bTLCLoHIYy/qXBnMRWdBkzS66ps=)
                          3: 9BE08B8E8C4E11F1BE755A05CF1D38B0.roa (hash: 07hDoRNRXMySdWEGeDHUnYW4FbI3+O15r72KVP2ufCQ=)
                          4: B8BE38148C4E11F1AE5E6605CF1D38B0.roa (hash: 22CcpPE6x9rKWvgvIIiNQvDytWYoXTxMqBgkQo1sm2M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540 (0x604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D96A0AF, serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
        Validity
            Not Before: Sep 24 02:59:09 2026 GMT
            Not After : Sep 26 02:59:09 2026 GMT
        Subject: CN=6ab491fd-0287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:b4:86:c5:33:47:e3:4a:a3:4c:02:be:21:
                    df:5b:ad:71:a3:d3:87:0d:40:ff:c4:d8:2c:b3:b9:
                    62:91:eb:60:3c:fc:bb:29:5c:ea:12:bf:99:10:d1:
                    60:d9:10:16:23:7c:04:f8:d6:49:ab:9d:ce:3c:56:
                    f9:b1:93:bc:10:1e:e6:dd:23:41:1b:9d:2c:36:44:
                    cf:72:0c:b4:8c:79:43:47:90:d6:f6:40:8b:76:42:
                    1e:eb:de:53:5f:9c:64:d4:5b:8b:df:c8:0a:75:7d:
                    73:56:c1:70:8b:25:d2:b6:a7:6e:d6:e9:4f:e9:9c:
                    e4:63:45:45:3c:ef:05:7d:3b:59:37:51:91:1f:34:
                    ea:05:94:6c:d6:94:d9:72:f6:ac:e2:ef:aa:96:08:
                    72:66:d1:21:e4:14:c5:0b:a1:50:3f:34:9b:f9:77:
                    4a:b9:6d:f3:64:f1:04:6e:15:c7:9d:19:3a:8d:1d:
                    8a:da:76:79:26:13:d4:7e:b5:73:ef:48:82:2d:eb:
                    3c:1f:91:a5:36:47:fa:14:b8:16:ba:95:5d:1d:dc:
                    5d:50:10:10:e6:31:fb:f7:a5:5c:e0:a8:c5:03:06:
                    87:6e:b3:bc:a5:d4:aa:6a:86:a1:6b:38:8b:50:0b:
                    15:79:e7:a6:9a:5a:7d:a8:a8:23:8c:ad:0b:9f:b6:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:35:D0:AA:78:6E:0F:40:A2:E5:0E:4D:2B:E2:EA:B2:93:57:45:44
            X509v3 Authority Key Identifier:
                keyid:2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:d1:9a:8d:99:d6:64:56:88:0f:67:02:40:6c:a1:96:65:
         d6:96:4c:06:3b:6d:27:c8:4b:d5:4d:ea:db:6b:b9:89:08:7e:
         02:85:88:4e:4a:bb:2d:20:fb:95:74:ec:26:9d:ea:f4:43:52:
         51:5f:6c:c9:d3:74:83:e5:40:98:e0:cc:ff:55:67:95:c9:8a:
         99:05:93:65:e9:0f:16:3e:36:16:3c:35:55:89:f8:d7:6a:4a:
         98:fa:14:6d:75:3e:22:3e:0f:77:e8:4a:ae:7a:07:25:1e:10:
         89:31:3d:87:0e:59:bc:ba:d6:f4:5f:05:0e:27:12:4a:b7:b5:
         50:2e:9c:1b:8d:88:0d:ad:ea:15:c8:5f:bb:04:b7:78:d7:eb:
         46:99:b0:55:f9:48:ac:6c:ed:6c:b3:b0:4e:dd:32:85:d3:fb:
         4e:f3:75:80:21:22:4b:26:7a:b3:40:07:19:58:69:2d:5f:a6:
         84:5e:b1:19:29:f9:18:3f:12:eb:7e:3f:cc:38:a1:59:6a:46:
         a5:ef:c9:62:d1:79:c8:ca:36:7a:15:19:6c:1e:0c:e4:17:ad:
         af:cd:64:cb:f3:35:dc:02:8f:66:ab:30:8b:82:c2:14:76:02:
         49:e5:bb:36:f0:6e:a1:55:d3:86:82:2c:f8:99:f2:1d:88:36:
         59:62:69:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:42:15 2026 by rpki-client