Error: rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.mft
File:                     P7W-Pd2uYUvp0eYugJg24jAucRg.mft (raw, json)
Hash identifier:          qf5L4yS7svv2g9Ch9Gbx8Q4o7vM7cnhFET0sWUmAVTA=
Subject key identifier:   B1:73:BB:E8:9B:AA:8A:84:AA:B5:45:70:C1:42:E6:0F:12:30:B7:66
Authority key identifier: 3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18
Certificate issuer:       /CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
Certificate serial:       0305
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.mft
Manifest number:          02FF
Signing time:             Sat 26 Sep 2026 04:30:02 +0000
Manifest this update:     Sat 26 Sep 2026 04:30:01 +0000
Manifest next update:     Mon 28 Sep 2026 04:30:01 +0000
Files and hashes:         1: P7W-Pd2uYUvp0eYugJg24jAucRg.crl (hash: rEJV4W6VcRkvVfx4ccofrL64EdDuDEDNi5RlpFNQIwA=)
                          2: A75F7B928AF111EFB2CB67BF762E951A.roa (hash: 1y9725X7pI3fDYKtzxGjKxLFQQ2D7BEYifnvUVyDT5g=)
                          3: 7AA8E23C8AF111EF819141BF762E951A.roa (hash: WA1vTy837ja/SSXdE4yDJ6r+9rLSH6HSYjYFhAhnYN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE001AF, serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
        Validity
            Not Before: Sep 26 04:30:01 2026 GMT
            Not After : Sep 28 04:30:01 2026 GMT
        Subject: CN=6ab74a49-e6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:e8:6c:ff:09:53:e7:a7:f3:12:5f:95:3f:
                    88:ce:d5:2f:66:88:0c:ec:a1:cf:89:e3:0e:0a:35:
                    8e:1e:ff:d2:3b:65:9a:61:f8:a2:93:8d:18:64:3b:
                    fb:7c:c4:9f:a7:ad:46:f8:3d:3a:db:b8:15:02:4a:
                    ef:4a:56:5e:e5:c7:5e:da:66:03:8b:a8:32:94:08:
                    27:86:83:52:eb:09:f2:5c:40:c1:0e:57:13:5a:f2:
                    a3:4e:5e:ee:d9:cb:4a:14:07:1a:5d:b2:56:bb:ac:
                    3f:37:c4:8e:1d:ac:9b:e1:7e:08:d3:f5:9e:25:97:
                    41:81:13:ba:49:39:d5:e1:e9:32:56:e7:9e:e4:06:
                    8f:d7:c3:4d:64:e9:4c:0a:8c:c3:de:6b:fe:5e:01:
                    39:f0:2f:c9:f3:96:b8:d2:05:d7:5e:83:3d:b6:c2:
                    26:b3:9c:2e:b6:01:1f:e8:9a:40:b3:de:fa:74:2a:
                    31:97:9b:57:c2:a1:a8:17:aa:ea:bf:24:d6:e5:3e:
                    3f:85:fc:39:5c:1f:f2:ed:77:da:a3:ae:92:3f:15:
                    bf:cf:9e:a8:67:67:c6:5f:65:61:b4:15:7e:a5:21:
                    e9:a1:d7:2b:ba:ec:7c:f9:13:61:34:21:f4:0c:a2:
                    47:22:e1:43:8c:67:63:3a:57:b6:d4:7a:ce:25:96:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:73:BB:E8:9B:AA:8A:84:AA:B5:45:70:C1:42:E6:0F:12:30:B7:66
            X509v3 Authority Key Identifier:
                keyid:3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:98:d7:10:ed:58:47:5e:79:20:5e:64:01:25:f9:ec:41:46:
         bc:9e:1e:57:21:de:2d:ae:da:d2:ae:e3:0f:9c:17:dc:2d:85:
         f0:e8:b1:56:71:72:51:51:70:cf:10:b5:e7:7a:15:7e:01:3b:
         e2:dd:ed:a1:99:7e:55:28:1d:2f:83:f4:d7:3f:b7:60:cd:63:
         de:50:45:e7:2b:33:fd:06:da:23:a9:7c:73:44:fa:e6:50:80:
         cf:fd:8d:c9:87:ef:ef:8b:b4:fb:06:3c:5d:35:ee:a4:6d:e9:
         3e:e2:c1:02:6a:d6:36:a4:30:dc:b0:64:72:39:03:9c:0a:3d:
         6b:0c:e2:ae:8c:9e:c9:1b:2e:4f:7a:df:da:2d:a3:5e:45:99:
         2d:18:73:85:81:1f:1c:0e:68:9e:ff:b5:04:bd:54:ff:3c:51:
         de:6c:41:c0:9b:3d:8b:de:47:e5:02:31:a9:ca:a2:80:7e:14:
         b5:6a:12:13:7d:fe:1c:b3:76:d7:b7:d3:54:9f:18:98:c7:2a:
         34:ac:f6:fb:31:19:82:81:91:67:af:a5:5b:ce:6d:f5:c7:77:
         30:95:12:aa:2b:9c:7b:24:98:23:f0:24:13:64:cd:65:90:4e:
         c0:90:d8:d3:f7:fa:e0:37:d9:92:a5:fb:dc:3c:6a:b5:da:7d:
         c9:d2:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:05:46 2026 by rpki-client