Error: rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File:                     LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier:          BkHROpQoQ4jUCFRusPaoqjofYWXWbqkuucIeCBK+cKc=
Subject key identifier:   B5:DB:6B:ED:12:B0:37:A4:ED:43:B3:32:F3:06:CE:B6:1E:47:7B:8F
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer:       /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial:       07C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number:          07C6
Signing time:             Thu 05 Nov 2026 02:15:51 +0000
Manifest this update:     Thu 05 Nov 2026 02:15:50 +0000
Manifest next update:     Sat 07 Nov 2026 02:15:50 +0000
Files and hashes:         1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: jE9XC/JXEycLMUf9Tr9CWxmALANpzl6G03UQu36b9eU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
        Validity
            Not Before: Nov  5 02:15:50 2026 GMT
            Not After : Nov  7 02:15:50 2026 GMT
        Subject: CN=6aebe6d6-a669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4d:25:71:6f:68:c7:bc:e7:5a:1b:b0:88:89:
                    ad:07:71:6e:f9:4b:78:aa:53:a5:dc:89:9b:79:ca:
                    5c:19:ab:29:c1:04:56:20:c2:4c:90:91:c7:0e:fc:
                    87:81:3c:3d:19:bb:ec:9a:9e:40:79:11:7f:14:90:
                    3e:20:b8:10:1a:38:ae:98:3b:52:e2:b8:ca:7a:8c:
                    39:72:a8:b9:29:8a:c6:9a:8a:ad:5a:1a:5a:93:75:
                    5e:b9:fe:08:4f:5c:80:11:f5:4d:7b:5d:be:00:54:
                    35:88:78:cc:da:9a:b3:7f:85:db:de:18:68:22:ee:
                    1b:54:6c:54:d5:6f:ae:f3:c4:81:0f:02:cc:4b:ef:
                    22:ff:58:d8:e3:30:d8:f1:62:9e:a9:56:92:8f:01:
                    38:cd:1f:b8:81:bc:c7:67:29:4f:2f:e1:8e:50:9c:
                    b8:f1:d6:29:d0:9e:bd:24:ee:cd:9f:6c:d3:e1:c0:
                    21:0c:06:88:b2:f8:1c:0a:ac:94:f3:4b:75:da:70:
                    ff:49:0d:0e:2a:01:cc:75:2a:f5:e9:74:a4:f7:45:
                    52:38:bb:dd:f5:fb:2e:a5:5b:d3:3c:98:2e:ea:c2:
                    14:b9:ea:bf:aa:49:32:dc:6a:23:39:78:22:09:1b:
                    d0:d4:b2:15:6d:af:1c:26:eb:48:fd:f2:d9:e8:4b:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DB:6B:ED:12:B0:37:A4:ED:43:B3:32:F3:06:CE:B6:1E:47:7B:8F
            X509v3 Authority Key Identifier:
                keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:59:98:85:2b:23:59:a5:5f:9e:66:15:ae:78:bd:bd:b2:
         9d:43:7b:23:48:d6:21:d3:a3:76:5b:64:31:9d:8a:77:ac:ac:
         0e:b9:19:54:2a:2e:d9:f5:3f:9c:9b:b4:5f:1b:d3:33:14:60:
         d7:e4:01:05:e0:40:4b:e3:25:13:a9:db:e3:50:db:61:a3:29:
         9b:e3:c3:ee:9f:63:9e:3a:01:32:f6:7b:cd:45:ff:69:77:37:
         1b:58:fc:d1:9c:a6:85:ed:57:44:af:95:68:c8:46:0c:30:8f:
         8f:f4:c8:64:5f:aa:8d:a9:0e:28:5d:66:a1:63:ce:87:0e:eb:
         b9:38:0d:ad:ca:3f:30:9d:21:27:e1:8a:5c:25:b6:4a:b4:e1:
         90:86:5d:b6:4e:c7:5d:f2:a4:60:36:20:49:f9:c5:9b:ba:5e:
         b9:09:41:87:38:11:ee:00:6f:c0:61:48:4d:4f:9c:e6:f6:21:
         b6:51:69:71:1e:0e:8b:2d:73:d5:4a:c9:88:df:1f:ab:7f:23:
         bf:9e:fe:14:1d:ff:16:98:e2:3b:9a:34:3b:d2:ef:5e:bd:f4:
         27:31:0b:82:ca:c6:3e:cd:8b:b9:c1:3a:c1:b4:0a:34:8f:0f:
         c7:6e:7b:21:28:d6:0f:f6:22:0d:38:b7:9f:55:2c:19:3d:6b:
         d3:5b:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:47:40 2026 by rpki-client