Error: rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
File:                     yFh1TID6yDlgC6mAc_zwo3zMrOs.mft (raw, json)
Hash identifier:          3e2Nz4GMVx8/fYLTCobKB7F5LY5IlNQ1vUbLWbPLQao=
Subject key identifier:   69:7A:E7:59:D2:17:A2:35:C7:48:C4:EB:A9:43:F4:B2:A0:9F:20:9C
Authority key identifier: C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB
Certificate issuer:       /CN=F36E567DAF/serialNumber=C858754C80FAC839600BA98073FCF0A37CCCACEB
Certificate serial:       0240
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
Manifest number:          023E
Signing time:             Sat 26 Sep 2026 04:48:48 +0000
Manifest this update:     Sat 26 Sep 2026 04:48:47 +0000
Manifest next update:     Mon 28 Sep 2026 04:48:47 +0000
Files and hashes:         1: yFh1TID6yDlgC6mAc_zwo3zMrOs.crl (hash: XvM2bmbsACtkgqFjQ3yYL6gzg9uC3brZzaczEPWMs/k=)
                          2: C3D088FEFE4411EF844C4251762E951A.roa (hash: 8c/UcInEU32uCkkd0bW2sydpnWRZBq/yumh8oAWslXQ=)
                          3: 78CEE0D6FE4311EFAC01C048762E951A.roa (hash: S/ZsWMJD4DtM1oXbegUkV+3ds1wHL2z8dUl+XkcuPAo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 04:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E567DAF, serialNumber=C858754C80FAC839600BA98073FCF0A37CCCACEB
        Validity
            Not Before: Sep 26 04:48:47 2026 GMT
            Not After : Sep 28 04:48:47 2026 GMT
        Subject: CN=6ab74eb0-dec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:4d:df:fb:21:40:38:04:1f:46:85:9c:df:
                    4b:a4:10:33:cf:be:29:61:0a:77:ab:92:c9:54:a7:
                    b3:39:01:3b:ee:61:2f:f3:14:ce:42:36:6b:47:08:
                    7c:41:36:f3:73:dc:1d:96:4d:60:3c:3a:02:00:c3:
                    a1:1c:fb:1f:03:88:0c:81:99:a6:a2:1c:be:68:a5:
                    98:69:a8:30:01:fb:6c:a3:c2:19:82:50:d4:60:9c:
                    5c:94:4b:7c:88:e7:ed:93:fc:df:fc:84:47:20:36:
                    1b:0b:e9:50:6c:b0:b2:1a:b0:fe:8f:14:a3:7b:b5:
                    1a:fe:b9:32:f9:d5:5b:d5:6c:03:93:04:14:ad:94:
                    c4:d6:92:02:aa:c2:23:29:05:c3:e9:15:a6:8e:6a:
                    b5:0d:99:e4:68:ff:39:77:6d:b5:71:d3:1f:df:ef:
                    77:1f:b9:b2:f5:2e:7b:63:8b:f8:37:5d:d9:e5:ff:
                    a0:f1:0a:18:87:ec:da:12:01:dc:05:a3:46:fd:69:
                    4b:c0:74:db:58:d9:0e:f6:b4:34:69:aa:ff:eb:72:
                    47:d3:c8:25:be:56:50:87:e1:53:9d:fc:03:7e:33:
                    5c:6d:ae:26:3c:ab:02:93:18:f8:19:39:ed:bf:a4:
                    0f:33:f1:ce:91:1f:a7:9d:11:b3:5c:0b:92:1b:d3:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:E7:59:D2:17:A2:35:C7:48:C4:EB:A9:43:F4:B2:A0:9F:20:9C
            X509v3 Authority Key Identifier:
                keyid:C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:83:4e:ad:90:1d:a5:30:58:dd:dc:44:83:c2:74:11:2e:
         36:c7:b3:4f:92:82:22:e0:bb:bd:16:e2:4a:06:c4:28:94:4e:
         1b:f1:43:cd:a6:98:f0:63:b8:c2:47:19:98:ee:44:2e:86:41:
         2a:32:b5:a8:bf:87:01:62:e3:a3:c4:e0:47:8a:08:01:d3:7e:
         04:29:a1:bd:f0:f3:7a:06:cf:75:49:f8:b9:ae:be:d5:05:bd:
         f9:0d:ba:1f:1f:44:49:05:01:a1:61:e4:6a:0a:90:91:72:99:
         75:fc:f2:51:f8:ab:2d:f2:41:79:21:ac:b2:0b:2f:e0:55:e5:
         59:21:9f:c7:8c:fc:57:34:12:03:6a:90:91:aa:e0:07:7a:59:
         64:b2:cd:67:fb:39:d4:b8:0d:2f:3b:ba:e5:32:00:97:2b:0a:
         e7:cf:27:20:fd:56:d1:aa:c6:24:1f:2c:45:d3:d1:58:d0:c2:
         b5:54:db:c1:e1:8a:54:30:4d:10:cc:53:c3:82:3d:50:66:23:
         85:d3:03:c1:26:e8:c9:fd:f3:73:8b:15:cd:03:03:e7:75:86:
         20:fc:6e:7f:a3:d0:7e:d8:b4:d1:b6:43:ee:ea:30:c5:98:c2:
         de:68:80:30:d4:f3:35:1e:ca:c4:2d:32:49:75:b3:bb:b8:18:
         70:19:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:07:34 2026 by rpki-client