Error: rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
File:                     cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json)
Hash identifier:          L2ApAsvWAHxN61Fn+bARHqbu91yYmLgQmct3sI5JtqM=
Subject key identifier:   5B:14:7B:8D:0E:7B:11:2C:1B:C0:A9:1D:85:9D:8E:74:D1:22:AE:72
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Certificate issuer:       /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial:       0649
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
Manifest number:          0643
Signing time:             Mon 21 Sep 2026 02:47:13 +0000
Manifest this update:     Mon 21 Sep 2026 02:47:12 +0000
Manifest next update:     Wed 23 Sep 2026 02:47:12 +0000
Files and hashes:         1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: 10bHLHNUwW7l2nvyDHI6CX/Dlv4k7vxuSMQe0FlmVWA=)
                          2: 146B573C60AD11F1AA74EDCDCE1D38B0.roa (hash: b44hl5ns1GejqBDlBZqqeabDZjHSwkcNtGvmLapzA6g=)
                          3: A0ACF8CC60AD11F198FD15D2CE1D38B0.roa (hash: D1G83oNUfroyGNdogOzA5OFUfJuI2+DJ1eGJKNjaIbo=)
                          4: 875A2E2860AB11F1B54351C5CE1D38B0.roa (hash: ivxFjeduGSxxhWdAOPw6gvRhK1fIbKwK86DvK7nxOdw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                          rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
        Validity
            Not Before: Sep 21 02:47:12 2026 GMT
            Not After : Sep 23 02:47:12 2026 GMT
        Subject: CN=6ab09ab1-272f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:a8:4a:15:0a:9c:2d:5b:50:21:a6:ce:0c:
                    cc:51:19:48:30:2f:6e:30:7c:57:1f:ab:95:be:69:
                    30:03:fb:82:42:08:d6:16:55:8b:c2:31:12:95:e6:
                    7e:99:1d:e5:0f:f6:a0:d5:e2:1b:a9:aa:bb:7a:8b:
                    8c:bf:96:a6:b4:d7:8f:10:f9:f0:6d:6f:c2:3a:ff:
                    f4:24:e2:e6:0b:da:34:c1:e9:82:74:c6:1a:61:d9:
                    52:45:e5:93:b3:ff:34:1e:52:82:10:80:13:da:d7:
                    c5:ac:e4:8b:a8:76:48:e8:a1:9c:43:24:3f:7c:c4:
                    af:96:2c:77:5c:da:b0:5f:4c:43:90:9d:15:aa:2e:
                    57:9d:25:13:be:fb:a8:10:4a:e1:4e:56:5b:27:d7:
                    18:bb:dc:31:a9:b4:81:77:95:ed:c3:7f:24:c5:27:
                    09:8e:aa:d7:6b:8f:02:76:5d:52:fd:01:c0:a6:4f:
                    42:24:84:f2:2a:10:6b:36:e7:88:a5:a3:33:c7:45:
                    42:f0:bd:52:eb:da:32:9a:d2:dc:b9:2f:0d:cb:42:
                    06:7a:65:f4:28:4d:5a:6b:36:12:d8:eb:05:64:ad:
                    5c:bc:48:36:43:6c:75:9a:d7:c0:0a:73:95:db:48:
                    4f:2a:5f:e3:6b:c7:4e:c0:78:6a:62:1a:b3:5c:75:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:14:7B:8D:0E:7B:11:2C:1B:C0:A9:1D:85:9D:8E:74:D1:22:AE:72
            X509v3 Authority Key Identifier:
                keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:76:eb:07:ec:2a:c4:5c:24:de:0d:20:11:10:aa:c7:e2:00:
         d1:a2:ad:f6:fd:64:2c:1c:e6:72:ad:e8:00:f9:00:7d:2c:22:
         0b:b3:52:af:39:2e:c1:25:54:cf:e7:ea:79:ca:7a:f9:d6:71:
         8c:db:b7:3c:88:c3:87:b5:df:9d:ac:10:fa:07:20:4d:0a:ef:
         78:1b:71:9e:1c:0a:93:dd:e5:56:cc:3c:b5:fb:6f:63:e6:fe:
         c0:3d:42:1d:44:74:99:18:cb:71:79:ab:70:19:55:2d:70:70:
         28:25:f8:3e:0b:0a:7c:5d:fd:0a:93:8c:47:2f:d5:92:2d:9a:
         ac:31:38:73:a0:18:ab:09:f3:d1:8d:58:84:fb:6a:96:7c:dd:
         e5:44:2e:56:0f:cb:95:a0:58:dc:6f:e7:92:be:9b:d1:05:e9:
         39:1f:84:7f:3f:21:cc:56:3c:7a:52:ad:56:07:b4:fc:cd:3c:
         b1:b4:b9:e3:f3:40:0d:b5:d6:b4:a8:c3:cf:a6:f7:14:9f:80:
         7b:99:6e:df:1a:3e:b4:fe:33:b8:77:c8:fe:ea:2e:a4:70:dd:
         1a:19:55:75:9a:fd:21:50:40:36:77:57:03:d7:56:25:65:59:
         9c:2b:74:0c:5d:ab:46:91:ef:da:b0:af:32:67:43:41:9e:d8:
         80:c0:61:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:05:36 2026 by rpki-client