Error: rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
File:                     zQg69dJxoPLdqw8VC-sAXzipRrE.mft (raw, json)
Hash identifier:          cTfvxxMmorndy7UEfuijeQx3QbKB/MRXZ7n09OSasY4=
Subject key identifier:   56:F3:2D:5B:8F:F4:F1:2D:52:89:9F:D3:6E:90:5A:B0:79:31:61:61
Authority key identifier: CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1
Certificate issuer:       /CN=F36FF546AF/serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
Certificate serial:       0AA9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
Manifest number:          0AA7
Signing time:             Sat 03 Oct 2026 01:29:41 +0000
Manifest this update:     Sat 03 Oct 2026 01:29:40 +0000
Manifest next update:     Mon 05 Oct 2026 01:29:40 +0000
Files and hashes:         1: zQg69dJxoPLdqw8VC-sAXzipRrE.crl (hash: /oFkMlZwFnq+14jPu4+0tzeztxl9jx/jNF9rINUDD0Q=)
                          2: 1C0D37FA91F011E9AE72377FF8AEA228.roa (hash: 1FCw+Y3uXimIvmrFhMWwVuIRqYo1LXHBTvbNdEsq7eQ=)
                          3: FB654B0091EF11E99DA90E7FF8AEA228.roa (hash: nhD+pe2BQnxbsRGwyft8O4mm+dCir5b5n7iU0KS6i3g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2729 (0xaa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FF546AF, serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
        Validity
            Not Before: Oct  3 01:29:40 2026 GMT
            Not After : Oct  5 01:29:40 2026 GMT
        Subject: CN=6ac05a84-ee66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c1:47:14:14:40:f8:71:ed:5e:89:ca:bc:70:
                    18:da:3a:82:0c:1a:26:17:13:e5:e7:27:f4:ac:ea:
                    c2:b3:46:af:41:32:6e:68:03:36:23:b7:61:7d:a1:
                    a9:1d:01:29:b1:cd:fc:dc:a8:ac:c4:38:c9:ef:73:
                    72:6c:7d:61:14:14:ad:1c:87:34:32:76:d9:96:e3:
                    a3:4b:78:5e:d6:65:2b:34:4d:69:31:0a:0c:5a:a3:
                    fc:72:e2:bf:14:e9:fc:7f:ed:5c:bd:3a:db:dd:60:
                    fc:02:e9:57:54:4b:7a:8e:6a:4b:dc:22:a8:80:0e:
                    be:af:82:c6:28:82:3f:50:77:49:2d:92:37:53:90:
                    a8:b7:8c:72:2d:3c:3f:3c:85:60:3c:29:60:e1:67:
                    31:79:67:37:01:f3:e9:21:b0:82:cf:5a:d0:9d:4a:
                    2e:7c:ef:66:55:ca:68:d0:cc:f1:2d:f9:23:7c:42:
                    6c:2a:b4:52:52:03:9b:10:c1:99:9b:29:78:df:4b:
                    f7:99:5f:ad:6b:d8:59:64:e1:86:ca:7c:f6:9b:3a:
                    16:7b:ea:52:ad:42:5a:6e:01:38:47:dc:03:03:ce:
                    bf:4e:6a:80:07:f7:ef:8b:0e:2a:e0:15:c4:56:b3:
                    20:c9:83:e5:10:6c:9d:04:a1:c1:24:e3:50:2d:b3:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F3:2D:5B:8F:F4:F1:2D:52:89:9F:D3:6E:90:5A:B0:79:31:61:61
            X509v3 Authority Key Identifier:
                keyid:CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:ac:d5:aa:3d:e9:bc:3f:3f:8c:d3:05:44:f1:a7:07:09:
         85:ed:5d:07:9d:5a:61:46:40:f2:62:b4:ea:56:49:71:14:a8:
         7e:45:5c:9c:d8:89:65:ba:c1:da:58:e2:5f:11:70:9c:17:27:
         e6:ae:77:82:d8:62:62:9f:8a:92:ab:6b:f6:4c:eb:61:55:a7:
         99:59:91:8f:aa:d6:61:95:c1:20:4b:d3:a3:b6:20:29:fa:bf:
         8e:a9:b6:d1:41:91:81:74:83:c8:a2:2e:a3:61:a9:f5:44:e7:
         87:ff:fe:71:b6:4a:23:83:af:93:25:8d:ad:e8:88:4f:eb:41:
         ba:ea:4e:cf:a2:f1:f1:d0:fa:23:4f:7c:84:e8:3c:a5:9f:7e:
         3a:d5:5b:01:d6:a0:bc:8f:af:12:0a:eb:37:b5:f7:8b:05:25:
         10:47:17:5b:4e:7e:7e:8e:e4:42:12:26:87:e6:39:2c:9e:3b:
         95:4a:71:0d:93:7f:98:c0:e0:ec:f3:fe:02:09:e2:dd:67:ea:
         59:4d:42:aa:8d:b0:3b:7c:6b:fa:97:b4:bb:95:61:14:ed:50:
         ab:fb:21:5c:03:3d:f4:02:70:a4:77:1d:f8:03:8b:8b:5d:52:
         4f:81:e2:27:e9:41:8d:16:82:9e:e1:b1:46:2f:85:46:7a:db:
         81:f3:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:13:52 2026 by rpki-client