Error: rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
File:                     Rd8OHH-lNNrKIJKaup5jKPur-1E.mft (raw, json)
Hash identifier:          xY4WLCc+2yZETz/R3BhcrL3hIDSrFJEx4xUducKvKzI=
Subject key identifier:   6F:09:8F:AC:A3:93:69:B7:42:89:BC:C2:19:0F:BC:AA:AB:4B:9D:C8
Authority key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
Certificate issuer:       /CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Certificate serial:       05FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
Manifest number:          0610
Signing time:             Sun 11 Oct 2026 02:59:50 +0000
Manifest this update:     Sun 11 Oct 2026 02:59:49 +0000
Manifest next update:     Tue 13 Oct 2026 02:59:49 +0000
Files and hashes:         1: Rd8OHH-lNNrKIJKaup5jKPur-1E.crl (hash: mCxoPZ4QL5EqwA4ervixjDYi9jG426BLU1TijRIdo8g=)
                          2: 171E9A8816E411F1A88C6BB9DAE4EC9C.roa (hash: vJQ48Pdad/mMI/K9zYFw3poQzcd4T1o72/4e9rHed8k=)
                          3: A572A8A416E111F19EA4E7ACDAE4EC9C.roa (hash: n7gCG2uQxTeIhVaPEx4goN+jApSMUA/WmCugEwzQCJw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE1C1AF, serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
        Validity
            Not Before: Oct 11 02:59:49 2026 GMT
            Not After : Oct 13 02:59:49 2026 GMT
        Subject: CN=6acafba6-90c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:d6:4b:98:6c:3e:b6:46:69:41:ab:e1:a6:
                    27:89:82:e6:51:14:0c:29:f1:21:08:f5:35:90:4a:
                    71:fe:cc:97:a8:23:42:12:69:19:04:c3:ab:e3:57:
                    fa:81:fe:72:23:55:bc:3d:1a:84:f5:1e:0a:51:eb:
                    2a:74:f1:55:7c:cc:c2:b1:38:fb:cf:d6:bb:d6:dd:
                    c2:7d:0d:dc:c2:a0:9e:31:39:bf:a9:64:97:97:86:
                    30:89:ec:ff:d3:b4:de:70:9c:6d:c8:12:ee:94:a7:
                    58:4a:08:37:17:67:9e:25:9e:df:68:a0:b7:53:62:
                    83:86:21:82:fc:4f:bb:9c:2b:6f:e0:00:b3:84:51:
                    b5:f5:92:98:72:f3:a5:98:7d:46:ba:30:5d:67:d0:
                    7b:22:5e:c9:97:fd:07:f1:81:fb:f0:37:15:5d:a7:
                    cd:de:fc:89:7b:84:41:da:4f:f8:07:7c:fb:65:d8:
                    ae:49:43:45:64:28:5e:56:5b:d0:a5:4a:58:0d:7e:
                    b5:14:41:b2:b6:d0:96:6b:90:45:fd:b5:07:04:92:
                    93:49:66:11:0e:06:81:d8:2d:9a:14:86:82:34:c6:
                    8c:d0:9c:18:29:17:2f:4e:04:ba:e7:fd:6b:13:14:
                    10:10:ff:7f:b4:db:7c:97:80:df:12:7e:fa:20:bd:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:09:8F:AC:A3:93:69:B7:42:89:BC:C2:19:0F:BC:AA:AB:4B:9D:C8
            X509v3 Authority Key Identifier:
                keyid:45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ca:e8:6d:07:24:14:f9:48:76:d6:17:e2:a2:f2:db:b0:59:
         46:bf:36:4c:8a:f3:bf:a8:a4:c6:79:0b:69:62:75:ba:b7:02:
         79:4f:e0:e0:68:45:6f:ba:69:2c:b4:94:41:5b:1a:88:a6:e1:
         50:44:32:26:c8:58:17:c1:b1:5e:00:31:c3:f9:c0:db:6e:51:
         de:48:a2:09:a9:78:d3:6b:d8:94:15:7d:53:77:2e:30:68:14:
         08:bd:65:cc:8e:52:28:f5:cd:9b:6b:eb:ac:76:62:c2:cb:36:
         ee:f9:bb:69:ae:c3:d3:8f:d5:ab:58:60:ca:c7:ee:f4:33:58:
         0c:bd:46:22:7e:5e:72:95:69:4e:fc:f4:ed:a1:54:e1:35:1e:
         47:44:4b:41:51:97:96:d6:3f:63:38:fe:ed:a6:68:5c:e2:c6:
         c4:f4:93:29:d7:61:8e:19:eb:e1:b8:de:72:1c:8f:dd:ef:37:
         db:3a:07:71:bd:f6:37:31:86:92:3c:be:45:f8:ac:d5:b8:95:
         ef:ff:18:08:63:42:36:3d:69:c6:95:63:75:70:a3:fd:e1:60:
         73:37:61:47:c1:ad:03:ff:2e:e3:5e:98:fb:28:a0:d0:fb:70:
         44:40:b2:9c:db:c4:41:8c:47:dd:28:27:2a:d4:ce:7e:32:fd:
         bf:33:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:31:42 2026 by rpki-client