Error: rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
File:                     7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft (raw, json)
Hash identifier:          Oo/x3nSQIXd4nE8uEvhm1OyEugVLqMwECT4dUPFykNg=
Subject key identifier:   0C:37:F1:3A:C3:C9:A7:2A:4F:C3:DF:51:C8:E0:D9:80:9E:CB:15:B6
Authority key identifier: ED:F8:D8:DA:B4:B2:E6:68:95:4A:40:BA:56:DD:21:C6:45:28:39:DC
Certificate issuer:       /CN=F362F418AF/serialNumber=EDF8D8DAB4B2E668954A40BA56DD21C6452839DC
Certificate serial:       0654
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
Manifest number:          0651
Signing time:             Thu 08 Oct 2026 02:46:26 +0000
Manifest this update:     Thu 08 Oct 2026 02:46:25 +0000
Manifest next update:     Sat 10 Oct 2026 02:46:25 +0000
Files and hashes:         1: 7fjY2rSy5miVSkC6Vt0hxkUoOdw.crl (hash: ElfU9SRgGbLmtNpf3rjBCCmOGbpiYtgr1bB9Nt5l9O4=)
                          2: EB703DBA1BBB11F1999800F1DAE4EC9C.roa (hash: Zumw2o6HFsdqiJoh6ccEDdZSM0dgAvPQLJh0mtf+RgQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 02:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362F418AF, serialNumber=EDF8D8DAB4B2E668954A40BA56DD21C6452839DC
        Validity
            Not Before: Oct  8 02:46:25 2026 GMT
            Not After : Oct 10 02:46:25 2026 GMT
        Subject: CN=6ac70402-03b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:03:d8:f2:b1:d0:ed:15:12:17:1b:9f:67:
                    89:09:75:d0:28:d6:f3:da:29:ac:f3:02:32:9e:b0:
                    d7:b3:30:d4:e6:04:80:69:2c:2a:7f:b6:70:b8:cc:
                    73:46:9a:fc:9e:b5:b0:a5:72:15:4e:c2:b4:83:76:
                    0c:56:cd:47:ed:be:b0:31:35:e6:77:61:53:c3:6e:
                    b7:b0:58:f0:b3:31:3a:f8:39:f2:27:e7:71:90:73:
                    83:46:2c:2e:99:b2:4e:f8:e5:10:20:59:5e:3e:d8:
                    16:20:7b:10:69:2b:17:59:ff:62:a8:51:2e:e8:eb:
                    1f:02:68:9f:49:70:f3:fd:ab:21:3b:8c:59:5c:96:
                    ee:33:dd:c7:c6:7f:af:56:22:64:e6:a3:b8:a1:34:
                    19:45:70:63:81:a7:7a:a4:ae:b6:af:fb:be:a6:e2:
                    fd:fa:8b:74:e8:2a:81:c6:32:81:a5:8e:c8:2c:e8:
                    80:80:69:f3:52:88:b9:21:c7:ba:08:1b:a7:ed:fc:
                    38:99:a8:d0:70:ea:33:e9:24:05:84:ea:60:4d:92:
                    f9:10:83:77:63:f4:c3:d6:8a:58:e5:c2:70:68:dd:
                    f5:26:16:9d:74:00:d7:17:1c:0f:8d:0e:69:ef:c9:
                    5e:67:17:fe:fd:6f:ce:a2:b8:ce:4f:a8:ca:4f:e7:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:F1:3A:C3:C9:A7:2A:4F:C3:DF:51:C8:E0:D9:80:9E:CB:15:B6
            X509v3 Authority Key Identifier:
                keyid:ED:F8:D8:DA:B4:B2:E6:68:95:4A:40:BA:56:DD:21:C6:45:28:39:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e2:cc:8f:b3:08:fd:e9:70:ed:b3:24:ad:46:43:22:ed:9f:
         96:1d:5a:e7:e9:ba:47:b6:d1:be:ad:4e:57:d0:15:6d:ad:e7:
         04:52:31:a9:8b:6e:3e:be:cf:09:8b:f5:2b:9d:68:d9:f2:46:
         1c:9e:e8:3b:0e:f8:79:60:e2:0b:55:76:43:bc:3a:87:7e:b4:
         3f:5e:a4:06:ce:19:29:a3:49:bd:7f:84:a8:04:c4:2b:58:f1:
         09:41:25:0b:80:fb:b2:c0:95:6b:a2:15:92:3e:31:09:bd:cd:
         f5:26:ef:47:cd:f4:33:e7:7d:cd:12:46:de:e4:d7:c0:28:69:
         6f:ad:ea:b0:fb:7c:06:c1:c8:1e:e7:55:02:c1:03:85:56:98:
         c6:8b:a0:79:60:ac:2c:90:de:9c:be:9e:3d:62:86:0e:14:a5:
         55:ee:50:80:c3:60:a8:7f:bf:5a:56:cf:55:c5:fb:1c:42:33:
         4f:bf:d2:7c:5e:f0:0d:8e:ba:4a:59:d1:f1:4f:ec:30:cc:72:
         b3:81:4b:74:a0:80:ea:5d:35:ba:79:7c:00:42:5b:c2:8e:5f:
         69:4b:a0:e3:ed:6a:45:87:e6:96:23:1f:2a:58:41:79:a4:e1:
         3d:a2:2d:e8:91:7a:eb:9e:12:55:21:89:9e:76:a3:3a:fa:67:
         24:51:f1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:57:49 2026 by rpki-client