Error: rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
File:                     cEamUnYMjpA1cB1qRNwnGg4zAVw.mft (raw, json)
Hash identifier:          D0oFFPEYhT5ks9hxzPhP2XAEfR8mUsHg7A+erm6r+AU=
Subject key identifier:   B5:0A:C6:BC:70:1B:C7:82:B8:BC:E3:97:5F:16:0C:B4:7E:A6:61:9B
Authority key identifier: 70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C
Certificate issuer:       /CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
Certificate serial:       0ADE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
Manifest number:          0ADA
Signing time:             Tue 13 Oct 2026 01:19:45 +0000
Manifest this update:     Tue 13 Oct 2026 01:19:44 +0000
Manifest next update:     Thu 15 Oct 2026 01:19:44 +0000
Files and hashes:         1: cEamUnYMjpA1cB1qRNwnGg4zAVw.crl (hash: 5yRJmAcgpHl6WAZsXwNLjb7i8vWMdzM4raGonS+PWJ4=)
                          2: 0530CDFC45F511F0B8D116B4DAE4EC9C.roa (hash: NAagYOuoz83gJBbc9yz2V2e+hj5eern7tDyLsDy4nYU=)
                          3: 83E8C882ABE211EAB75B5884F8AEA228.roa (hash: RmYidaSanSrUDIijG3Hos1aIo1Mry4vynEz6zaj5KdQ=)
                          4: 59A177F88DCF11EA93675420F8AEA228.roa (hash: iJ4bpcIMbfbrSSynUTnD1MYU3E3BFy11GDgoP7CyilU=)
                          5: ACCF80A0725A11E9A4F37F71F8AEA228.roa (hash: /cq3b3YEjHQKJ7r9oxTK2L2hH6NQ1gLsW5kWro4hp5c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 01:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2782 (0xade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610674AF, serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
        Validity
            Not Before: Oct 13 01:19:44 2026 GMT
            Not After : Oct 15 01:19:44 2026 GMT
        Subject: CN=6acd8731-a679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:da:7e:9c:0e:de:05:93:67:9d:9d:93:09:
                    b7:e3:b4:66:0e:84:f0:12:94:99:8f:81:ab:5c:7a:
                    79:90:1e:85:b0:88:47:9e:dd:bc:ca:33:cd:5c:29:
                    37:95:8e:82:9d:73:be:d2:00:7f:5a:18:bb:d5:42:
                    6a:59:8e:24:a8:5d:62:49:5d:43:a2:67:0a:a7:97:
                    fa:16:a5:38:6f:2d:61:a8:f2:27:d8:49:41:71:cc:
                    8e:db:c8:c6:a4:94:41:6c:d1:80:b5:1b:12:2e:e9:
                    90:84:6a:99:e3:e2:bd:71:67:a4:59:70:8b:01:d3:
                    86:0f:10:30:6e:4f:da:50:e5:27:08:a0:99:ea:4b:
                    11:1b:31:3c:39:6f:89:19:71:a1:f7:9d:ff:86:1b:
                    d1:c2:20:68:d3:ff:71:6c:ad:29:7f:40:19:05:37:
                    11:a2:4f:e8:a5:41:8a:0e:ad:9e:0c:fa:5e:be:7a:
                    cd:14:74:23:02:c6:31:dc:1e:00:c0:42:96:9f:9a:
                    04:51:69:de:a7:03:cf:e5:08:c5:ab:e5:c4:97:67:
                    93:13:fe:a1:4b:8e:32:20:cc:99:16:d9:7b:b8:9d:
                    91:d0:2e:fa:5a:14:fc:9f:c2:e1:88:1b:57:b3:22:
                    25:35:73:e6:ed:bc:70:09:c8:4e:aa:8d:2c:e9:f2:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0A:C6:BC:70:1B:C7:82:B8:BC:E3:97:5F:16:0C:B4:7E:A6:61:9B
            X509v3 Authority Key Identifier:
                keyid:70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:97:7c:0b:9c:e1:08:ae:80:2a:e7:ae:86:e1:c8:be:7c:
         07:1f:af:ef:b7:42:9d:fe:22:b2:ff:cf:7e:00:08:0c:08:29:
         a7:4f:b3:83:c4:6e:44:bc:2a:4b:3d:2a:6f:6e:ec:0c:87:aa:
         13:c0:77:07:d1:60:ec:cd:d1:46:42:1f:0e:2e:0e:15:36:15:
         07:74:84:f7:fc:c6:4d:2e:b8:12:3a:82:08:0b:8b:d0:35:72:
         63:bb:f2:63:d0:5c:73:50:ab:30:a5:33:0e:92:5c:ed:78:61:
         20:ad:af:02:87:6a:25:91:c1:e6:f3:75:8f:0d:bd:0f:2d:ac:
         15:96:f3:bd:62:2e:81:19:e1:cc:d9:47:ac:ac:ba:56:06:2f:
         81:0a:81:dd:91:63:8b:ce:25:99:f4:64:fc:b5:3a:91:3b:d5:
         45:7d:71:65:9b:75:b0:c1:20:d9:64:33:40:52:06:c1:59:06:
         f6:15:ab:8f:a1:4d:65:c6:e5:4f:4c:38:48:c8:b5:1a:a1:aa:
         ff:d3:ae:45:ff:8f:6c:97:c4:6a:b6:b0:72:2c:0f:85:e1:e2:
         4b:2d:f5:be:1c:ca:67:fd:14:bf:2a:03:2b:81:71:43:b0:88:
         4d:6f:af:57:86:55:40:4f:71:3b:e1:3d:0b:6e:9c:b0:17:77:
         32:b3:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:16:48 2026 by rpki-client