Error: rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File:                     XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier:          Lkvavm1y6TS4CKB+yEMFLW3laBMsCtook5UGIOdeQPc=
Subject key identifier:   FE:F1:66:B0:89:F0:C7:A3:FD:02:7B:8A:E3:AA:4D:FD:84:5D:EA:D8
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer:       /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial:       02FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number:          02FC
Signing time:             Mon 12 Oct 2026 04:32:04 +0000
Manifest this update:     Mon 12 Oct 2026 04:32:03 +0000
Manifest next update:     Wed 14 Oct 2026 04:32:03 +0000
Files and hashes:         1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: bNiu1HWKSN+17suIiyrF1oLTR092mM/2NdsdWD6SWk8=)
                          2: 9643C3ACBFEF11F085B1BFE1DAE4EC9C.roa (hash: 2uFOUkSFKVasJhOLfUiTVE3r4VWf4k4tupX7FNxvep4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 04:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
        Validity
            Not Before: Oct 12 04:32:03 2026 GMT
            Not After : Oct 14 04:32:03 2026 GMT
        Subject: CN=6acc62c4-5353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:93:2d:d3:0b:b3:88:8f:98:d4:f8:d6:02:
                    97:09:63:52:4d:5d:21:0a:e6:87:86:32:94:49:be:
                    a5:45:c2:62:2a:05:55:e8:0d:1a:a7:ac:58:4e:6d:
                    a9:14:41:d3:19:c7:a3:6f:af:df:85:75:9f:45:77:
                    14:34:59:bb:2f:c2:ce:e4:c4:aa:41:4a:ec:67:ef:
                    b0:6e:63:f5:66:47:0e:69:59:b2:e0:ad:b9:a0:4a:
                    5e:15:ee:45:c5:e9:cd:58:1b:c7:c0:3a:1d:3e:5b:
                    a2:bd:f7:fa:d3:80:92:04:93:a4:5e:79:a4:3b:cd:
                    b6:0e:f1:bc:47:19:61:87:d2:ba:03:43:23:5c:36:
                    ac:05:a3:ce:fb:2e:f5:43:5b:97:d1:2f:4c:19:73:
                    a7:4c:07:96:c4:c8:49:10:82:82:96:0c:42:f9:73:
                    5d:03:e9:d2:0b:44:ff:eb:f8:4f:72:a8:97:32:16:
                    dd:a9:8d:95:fe:2b:13:af:04:a1:40:37:c9:0e:d7:
                    56:68:8e:61:02:fc:06:bb:33:8c:aa:c5:30:31:c2:
                    b4:fd:c7:77:3f:85:46:34:d3:c6:a9:df:3b:ca:fd:
                    31:7e:e2:dd:7c:49:29:74:58:43:20:35:6f:d3:47:
                    dc:e7:92:8b:ab:76:96:93:22:53:3d:71:34:a1:97:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F1:66:B0:89:F0:C7:A3:FD:02:7B:8A:E3:AA:4D:FD:84:5D:EA:D8
            X509v3 Authority Key Identifier:
                keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:20:c1:0e:0d:0c:56:62:84:b9:15:e5:c8:53:af:e4:4c:e7:
         d1:a6:44:c8:d1:21:12:e4:a5:56:75:76:8b:25:5b:2b:39:58:
         c3:f8:2b:89:f4:3f:b8:c1:e2:bc:e5:fa:84:46:5a:07:31:d7:
         44:f3:8a:88:dd:5c:78:bc:51:08:9a:a4:76:60:c4:e4:07:a6:
         39:2e:51:96:78:16:e0:8c:d7:93:f8:b5:39:1a:59:cf:4f:34:
         2d:ed:b8:f6:8b:f9:78:2b:f1:6e:18:94:c6:34:42:da:8a:a2:
         07:ff:de:cd:c2:35:ea:e7:11:b3:51:e9:13:63:66:ec:4c:c1:
         bc:4d:22:3e:8a:05:06:69:70:d8:17:05:11:77:83:bb:22:e9:
         98:70:2f:a2:66:3e:32:e5:97:d8:91:06:6c:b3:5d:83:a6:e5:
         bb:29:06:97:b0:8c:49:69:74:4c:7c:15:1b:fa:73:ae:18:a7:
         79:ce:e1:bd:40:58:84:8f:d2:5f:dd:64:4a:40:f7:3d:65:c8:
         33:c6:3d:e4:78:65:36:39:b8:50:2d:69:f7:03:39:6f:43:14:
         98:0f:01:07:88:07:ce:b5:60:1a:ef:19:74:37:2e:80:5a:0e:
         17:bd:cc:2f:83:3d:83:53:4d:a5:24:3b:8f:91:54:35:b8:2e:
         ef:63:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:02:25 2026 by rpki-client