Error: rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File:                     LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier:          sNW0l6dIUZWDJuIihvMi2C7qjMT3ElCa2xEpkAUFWj4=
Subject key identifier:   40:CB:89:19:FF:38:BD:91:DC:95:E6:DC:B1:DF:CF:13:D0:78:E4:63
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer:       /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial:       0798
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number:          0798
Signing time:             Sun 20 Sep 2026 02:14:49 +0000
Manifest this update:     Sun 20 Sep 2026 02:14:48 +0000
Manifest next update:     Tue 22 Sep 2026 02:14:48 +0000
Files and hashes:         1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: m5Bw4V/i7kZb56iKZyH+5xSR89aUZPJMMdrY3oLhlW0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944 (0x798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
        Validity
            Not Before: Sep 20 02:14:48 2026 GMT
            Not After : Sep 22 02:14:48 2026 GMT
        Subject: CN=6aaf4199-3712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:1f:1a:c8:ed:eb:2d:d2:d4:77:22:70:20:
                    8f:f2:ff:46:ad:0f:75:cb:02:0e:71:15:2f:9c:f4:
                    59:d6:99:09:93:37:73:82:f0:b3:ab:8c:28:7f:28:
                    eb:a9:1c:30:37:d3:fd:ce:9c:f7:2e:5a:81:0f:6b:
                    e1:bf:5a:52:2f:74:e2:c2:ce:a1:1e:44:d8:e4:b6:
                    b2:f5:07:b1:78:d3:c4:b8:7c:b4:2d:c6:70:20:d2:
                    ba:f6:2f:5a:af:6d:d1:f3:d5:c0:6b:58:e4:e5:11:
                    93:fc:82:f6:fd:d6:91:da:42:49:5a:aa:4b:a8:cc:
                    fd:c1:2d:9c:ec:a2:a8:a5:3e:e1:74:d3:09:51:de:
                    d6:5b:60:e0:64:86:a1:97:5b:74:c5:22:a2:77:a0:
                    be:e2:2e:d3:de:ef:cc:8d:29:a3:fa:16:56:8d:5c:
                    8d:85:4a:ec:09:10:71:4c:0f:69:0a:98:61:14:cf:
                    03:de:5e:14:a4:01:f6:3d:06:34:70:8d:ca:f5:39:
                    24:f1:bc:94:17:17:3a:a9:ed:2f:fa:6e:44:1e:71:
                    f4:a1:68:df:41:e8:10:9d:0f:9b:87:ec:07:e9:e2:
                    49:27:ba:e5:06:14:2e:ca:aa:a3:04:d4:2e:81:df:
                    ef:9b:4c:04:66:30:e1:be:3f:61:b0:63:25:22:13:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CB:89:19:FF:38:BD:91:DC:95:E6:DC:B1:DF:CF:13:D0:78:E4:63
            X509v3 Authority Key Identifier:
                keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:99:1c:01:ae:5d:a7:9a:08:2a:b1:99:16:1e:a3:da:ea:ce:
         1b:b5:20:60:cc:25:f7:12:a6:f2:9a:ba:44:a7:db:09:28:43:
         f4:0c:ea:7c:b2:ae:5f:04:84:37:9b:d3:6a:66:31:90:8d:ab:
         6a:cb:6d:c6:89:f2:7d:77:84:8c:a2:6b:09:5d:49:1b:aa:2b:
         a6:23:90:3b:6d:ac:5d:fd:81:53:9a:23:7b:86:3e:b2:ed:73:
         fb:33:87:6d:b9:7c:6e:ee:44:e2:3a:53:c9:e8:1c:87:71:0f:
         89:f3:65:59:33:73:c6:fd:35:d4:d6:d6:76:f4:04:93:41:b7:
         10:25:81:dd:11:4c:cd:b5:f1:65:26:f4:61:11:8d:87:d1:01:
         09:ff:95:be:ea:4a:4e:46:76:3c:02:2a:7d:5f:87:5c:5b:19:
         76:24:63:cb:d3:45:9c:6f:37:9f:a4:1f:cf:f0:ac:3b:72:7c:
         ca:37:3a:f5:64:70:35:dc:17:ba:bf:d2:4c:c0:0f:41:ab:50:
         a0:1a:2d:56:da:c6:4e:b0:9d:c5:e1:c2:92:f4:40:df:ee:2f:
         af:75:2a:da:ea:58:94:3e:a0:a6:91:aa:9b:5f:6a:74:06:ec:
         ce:78:44:63:ef:89:2b:65:28:bc:32:a9:03:77:6e:cd:e0:cf:
         25:75:99:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:50 2026 by rpki-client