Error: rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ffau-nWRitW0DplWXglmq0Pb4Yg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ffau-nWRitW0DplWXglmq0Pb4Yg.mft
File:                     ffau-nWRitW0DplWXglmq0Pb4Yg.mft (raw, json)
Hash identifier:          Ir8xv/EqHqaRtkfSC+BJ2lc2CKFkMbOC65nm8WjzIkg=
Subject key identifier:   9E:28:EF:2F:0C:B8:AD:1B:38:6E:75:B9:D7:F5:91:6F:7D:84:D3:C1
Authority key identifier: 7D:F6:AE:FA:75:91:8A:D5:B4:0E:99:56:5E:09:66:AB:43:DB:E1:88
Certificate issuer:       /CN=F36F64ABAF/serialNumber=7DF6AEFA75918AD5B40E99565E0966AB43DBE188
Certificate serial:       07DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ffau-nWRitW0DplWXglmq0Pb4Yg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ffau-nWRitW0DplWXglmq0Pb4Yg.mft
Manifest number:          07D4
Signing time:             Fri 25 Sep 2026 02:11:50 +0000
Manifest this update:     Fri 25 Sep 2026 02:11:49 +0000
Manifest next update:     Sun 27 Sep 2026 02:11:49 +0000
Files and hashes:         1: ffau-nWRitW0DplWXglmq0Pb4Yg.crl (hash: ddRdTuxbNNNh0FFT69FKtbY/0y46F4bdOfQadb0W93w=)
                          2: F56D26047B8611F1ADC1BCFBCE1D38B0.roa (hash: Oh3GriEXNdFMeWNuWJUkYWkQ51H24rK2Lz06mnjCTvU=)
                          3: 4899E0ACD4D811EB8DA9EC3CF8AEA228.roa (hash: 3pJ4HB7wITUTkgYu8cl/NNvjNYppyF94Z1pyAadIaYI=)
                          4: 77D9BDCED4D811EBAD051F3DF8AEA228.roa (hash: yUuPocVkMY09lQgg4elqOJbxuto4SWI0OrW7iMkufmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ffau-nWRitW0DplWXglmq0Pb4Yg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ffau-nWRitW0DplWXglmq0Pb4Yg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ffau-nWRitW0DplWXglmq0Pb4Yg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F64ABAF, serialNumber=7DF6AEFA75918AD5B40E99565E0966AB43DBE188
        Validity
            Not Before: Sep 25 02:11:49 2026 GMT
            Not After : Sep 27 02:11:49 2026 GMT
        Subject: CN=6ab5d866-9598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:f9:c6:70:c0:14:29:08:23:63:89:ab:25:
                    8b:8f:df:0e:5b:3c:94:1b:94:9d:e8:04:97:8f:0c:
                    58:92:5c:68:ff:5e:1b:ce:c5:fe:78:32:ab:e7:5d:
                    f7:4a:c9:38:b4:83:f1:2f:fd:e6:9b:bd:69:93:05:
                    98:74:a8:db:fb:8c:8e:7c:d9:26:53:ec:15:48:f0:
                    02:d2:be:7a:d6:cc:17:fa:5b:0f:27:81:54:62:ff:
                    51:31:47:74:82:a1:7d:23:a2:97:28:8c:f5:12:55:
                    3e:f7:36:09:8d:c8:f3:d3:d1:db:cd:0b:c6:17:b3:
                    5b:98:26:64:10:96:0b:bb:58:90:4f:87:11:0f:26:
                    c3:45:06:4b:64:f5:c6:33:9f:46:3f:cd:6b:9c:6a:
                    d9:46:bc:6f:f5:3a:cf:72:f5:bf:37:9d:7d:b7:ce:
                    c7:37:c5:bd:f6:cb:9e:b0:c9:e0:e0:6e:bd:5f:87:
                    3c:02:b8:11:f2:3e:83:ef:29:e6:83:a8:62:de:77:
                    ca:8a:07:53:7b:3a:db:e5:35:54:8c:3e:39:48:ab:
                    db:ad:35:33:b8:f8:87:be:c8:33:fe:36:27:59:ea:
                    fe:53:df:da:a9:ba:90:c5:50:b5:6e:25:c3:fd:50:
                    ff:c9:a3:ee:73:90:1f:4d:8b:3c:f5:42:04:4a:2f:
                    df:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:28:EF:2F:0C:B8:AD:1B:38:6E:75:B9:D7:F5:91:6F:7D:84:D3:C1
            X509v3 Authority Key Identifier:
                keyid:7D:F6:AE:FA:75:91:8A:D5:B4:0E:99:56:5E:09:66:AB:43:DB:E1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ffau-nWRitW0DplWXglmq0Pb4Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ffau-nWRitW0DplWXglmq0Pb4Yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ffau-nWRitW0DplWXglmq0Pb4Yg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c4:30:07:14:8e:f3:25:81:03:0a:ba:f9:d6:53:28:2a:6e:
         25:2d:e3:78:30:5e:a9:ad:fb:16:19:1e:38:bf:bc:9b:5c:d0:
         d2:ce:12:1e:6d:e1:cc:de:a3:2f:8f:bd:81:c5:c3:1f:47:df:
         a0:b3:5e:a6:0e:e6:0c:f3:11:cc:39:1a:de:ab:ec:5b:79:62:
         1b:3d:96:c2:1f:e3:c9:a4:7c:f1:44:b0:e1:21:d9:f3:44:0b:
         10:0f:c2:df:e1:46:9f:33:f4:50:4d:98:66:19:8a:76:70:3d:
         7d:44:af:60:80:64:eb:d6:ad:b9:12:87:30:5f:75:23:76:ea:
         c5:42:5b:da:bf:89:ff:e2:50:e8:92:9d:9f:0f:e7:59:36:be:
         37:95:7c:74:3a:6b:70:c4:18:f2:4a:0c:97:05:62:e7:43:4a:
         a2:66:7d:5f:67:9e:c1:78:03:43:9e:e2:c0:56:b9:cc:a2:98:
         a0:c0:df:c7:93:f3:ac:d9:6b:42:47:eb:41:ad:8b:e9:6d:20:
         26:f2:d3:15:42:db:95:bc:2f:39:17:d3:24:c2:85:2d:72:e9:
         a6:53:67:52:8c:45:35:dc:d4:d5:ec:6e:93:89:08:d4:82:ec:
         23:d5:32:69:79:db:25:15:81:e5:d2:aa:81:25:16:63:9d:9c:
         f0:1a:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:57:40 2026 by rpki-client