Error: rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
File:                     kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft (raw, json)
Hash identifier:          rB++D/H9gUdrhXe+5BCziBE3Wi231i+5Iwh0HSDhFGs=
Subject key identifier:   F8:F1:76:AE:33:69:62:90:F8:8C:76:04:87:DF:D9:B5:4E:BA:8E:09
Authority key identifier: 92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
Certificate issuer:       /CN=F3611484AF/serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Certificate serial:       03F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
Manifest number:          03F5
Signing time:             Sun 11 Oct 2026 03:57:49 +0000
Manifest this update:     Sun 11 Oct 2026 03:57:49 +0000
Manifest next update:     Tue 13 Oct 2026 03:57:49 +0000
Files and hashes:         1: kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl (hash: KAULbUk48idLW0lWCeUF1HovLBoC7xWEQNfwgOkdXh0=)
                          2: 2908C1DCB9E511EEB9065888775412E6.roa (hash: zUZ7frdCVvRhVt6G1jP6YXP6H0Tz6Q6HJTbMKr0ueno=)
                          3: 60A31C9CB9E411EE910C0687775412E6.roa (hash: k8wj8VzEDiiwJJsRvgprQG7fLZ2kqSdbh1u+v7N4tmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611484AF, serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
        Validity
            Not Before: Oct 11 03:57:49 2026 GMT
            Not After : Oct 13 03:57:49 2026 GMT
        Subject: CN=6acb093d-91a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:9e:cc:02:f0:be:65:41:12:2e:e8:38:a0:
                    fe:f5:6a:44:69:96:a5:bd:d6:b8:52:5a:aa:95:d7:
                    33:0f:83:b3:79:87:8b:6d:0e:e2:10:21:54:d0:bc:
                    90:69:2b:54:16:46:12:55:f7:01:c3:51:e9:23:b0:
                    60:1f:86:08:55:94:03:76:d1:73:da:08:64:ba:fe:
                    21:a4:23:21:cc:68:83:51:ec:a5:30:c1:2a:71:27:
                    85:bd:5c:77:1d:76:bc:48:54:e3:32:11:13:a7:86:
                    d8:17:5e:bc:d0:fb:f8:ff:20:94:6c:83:13:b0:c9:
                    e5:7f:d9:e4:af:76:10:33:da:72:de:b3:d0:bb:a2:
                    64:09:48:e9:5c:d7:54:6b:d7:db:e8:e2:7a:f8:db:
                    68:8a:a2:64:74:59:67:73:72:f3:34:d6:e7:5f:04:
                    be:8b:f3:c1:f6:b7:d1:3d:9c:da:5e:ff:8b:c0:c6:
                    12:ae:8f:31:03:05:db:57:69:2b:99:c0:75:02:2f:
                    aa:1c:f2:a9:ea:c2:e8:9a:be:ee:b1:c4:1c:ef:a2:
                    35:04:46:0d:51:13:66:15:d1:d6:ee:94:eb:79:8f:
                    ee:a7:e2:34:c2:06:fa:f1:72:2b:75:f5:3b:79:21:
                    00:58:1f:20:5e:45:f0:b5:79:1b:60:d9:c4:15:5b:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F1:76:AE:33:69:62:90:F8:8C:76:04:87:DF:D9:B5:4E:BA:8E:09
            X509v3 Authority Key Identifier:
                keyid:92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9d:b3:45:60:f0:f7:6c:49:10:d2:62:c2:9a:f3:bd:6d:c4:
         9e:e4:8f:f9:ac:b5:c9:51:11:bb:72:7c:53:4a:97:b8:54:11:
         31:04:be:ce:28:c1:83:dc:4b:6f:a2:1f:0d:34:05:24:fb:6c:
         91:49:ed:cc:5b:77:95:9a:0d:bb:7f:73:82:2c:78:87:51:f5:
         11:cc:35:05:45:f6:79:39:df:f0:e6:b2:00:c2:77:fb:e1:c5:
         c1:2a:b3:a2:85:05:31:08:9d:b9:7a:87:6b:50:c4:d3:64:c7:
         52:44:24:e7:22:0a:04:76:57:16:5c:43:30:30:99:cc:50:e8:
         0a:7d:ba:1f:fa:e7:e6:8d:b2:17:1f:86:26:14:5d:9b:77:ad:
         77:c2:c7:d7:d2:5a:3b:81:13:20:bb:f6:9c:76:1d:39:32:e7:
         83:e9:87:e5:ef:99:fb:dc:5c:aa:cf:7a:12:b7:55:00:3c:bf:
         e2:14:93:8f:0e:e7:0d:60:cf:d9:a2:70:13:70:cf:b6:15:ed:
         b2:09:54:1b:67:36:42:c3:98:a7:b3:74:3d:1b:db:7b:09:d8:
         45:c8:e3:0a:4b:82:49:bb:05:ad:c8:68:a8:0d:35:3b:e2:28:
         56:ee:4e:da:a3:c6:ac:8b:fa:d3:61:51:be:29:6e:8d:23:db:
         2b:52:39:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:18:50 2026 by rpki-client