Error: rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
File:                     68SoUZfDK0JWOKbH5YYLWWTmV_4.mft (raw, json)
Hash identifier:          EjlGS/kWAPHwu2wApyry5N2u8ZWBOZEBU52SgTxSUxs=
Subject key identifier:   97:D9:C2:84:5F:2B:FD:A4:D7:15:14:C7:3F:1A:71:AE:08:04:ED:DE
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Certificate issuer:       /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial:       0725
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
Manifest number:          0719
Signing time:             Mon 21 Sep 2026 02:30:40 +0000
Manifest this update:     Mon 21 Sep 2026 02:30:39 +0000
Manifest next update:     Wed 23 Sep 2026 02:30:39 +0000
Files and hashes:         1: 68SoUZfDK0JWOKbH5YYLWWTmV_4.crl (hash: w6Y2mVUulnizgSKD43bbu/u+jAGtZ8ApdP1YsupR+Z4=)
                          2: 6B8C1F5C1CFF11F1AEC2C7DBDAE4EC9C.roa (hash: vVsoBzOgmQJsVgZ4eiWG42vtCjrBwkXB68PKgcK7ZzA=)
                          3: EDDA3E501C6211F1AAA4E2C7DAE4EC9C.roa (hash: lUvvBVjsEjqfAsAmA0WnRzU1lqUEU7lO27ZrISQKKFs=)
                          4: 3A76263A1C6211F1ADDFF9C3DAE4EC9C.roa (hash: REuAOlE2BNzgo7YoEU2hdXZQivK8fOJn7CrtB/+yhKw=)
                          5: 22E9A04A1B8211F18A6803A7DAE4EC9C.roa (hash: o2oSmT5XMRceQB7vvUJ62zJZyK7qqtUp831xxa7NGwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
        Validity
            Not Before: Sep 21 02:30:39 2026 GMT
            Not After : Sep 23 02:30:39 2026 GMT
        Subject: CN=6ab096d0-5f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:e2:c7:bc:0a:33:c6:1a:c9:8f:77:28:db:
                    1f:73:fa:6f:d7:3e:51:96:d1:39:00:ba:3d:45:9c:
                    bc:1e:61:bd:89:05:1e:e4:c5:eb:db:3f:cf:97:b5:
                    db:18:c9:d8:4e:15:2a:f6:51:22:8c:3a:da:64:10:
                    be:92:88:54:bd:ed:76:5a:dd:54:bc:57:65:4d:2a:
                    c5:a1:a8:b0:c3:81:4f:e9:4b:f4:88:e9:2e:21:5e:
                    66:a3:fa:06:b4:b0:20:c1:b8:3e:9f:79:cc:ae:3f:
                    c6:ce:7d:d3:f6:ce:88:c3:ac:a1:9d:12:cf:6a:8f:
                    9b:1d:af:0b:4a:06:b9:b3:24:0c:a2:42:e7:f5:7e:
                    4e:d3:67:3d:70:4b:28:6e:49:cb:7a:c4:35:09:76:
                    e5:12:61:a3:7b:3c:c3:34:87:64:7b:dd:1b:5d:29:
                    24:b2:cd:07:d0:5d:2d:82:9a:e2:85:ac:2e:27:a0:
                    c2:31:a1:cd:29:82:9a:06:a6:6c:67:12:63:ba:54:
                    86:62:a7:da:3e:26:ac:04:49:a0:e3:ee:39:51:76:
                    81:fe:17:1c:c3:42:dd:30:dc:94:d6:0f:1f:5a:bd:
                    3c:33:be:f1:b8:91:0e:7a:21:c3:c5:47:7b:6d:53:
                    20:3e:8d:6f:07:10:ac:db:a1:d1:d5:af:16:0f:e5:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D9:C2:84:5F:2B:FD:A4:D7:15:14:C7:3F:1A:71:AE:08:04:ED:DE
            X509v3 Authority Key Identifier:
                keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:af:c4:33:80:3f:79:23:79:4b:3d:da:54:e9:1c:80:62:a5:
         5a:bd:82:4a:e8:c5:9a:b3:fd:08:bb:7e:13:47:d7:99:76:de:
         de:b0:49:c1:d3:c7:56:a4:ca:0d:8a:0e:b5:7b:9b:08:fe:99:
         4b:d3:95:e2:bf:3e:3e:d1:c9:3c:f6:62:81:53:69:3a:6e:e9:
         91:85:3e:a3:09:a0:07:ee:a2:9f:43:61:1c:2b:d7:fd:58:b5:
         51:7e:2e:94:25:58:d5:d0:9a:09:5d:a8:c1:5c:95:04:bf:78:
         ac:a1:bf:38:03:e2:bb:8b:10:16:81:6e:34:e4:a0:3a:ef:28:
         e5:04:82:16:d7:75:ed:0f:0e:10:9c:1c:0b:4e:13:14:ab:e1:
         4e:04:fd:f9:de:8f:6e:a0:07:b1:67:21:c8:bb:dd:41:c0:4d:
         0a:60:e3:21:11:86:03:f0:2a:66:08:75:ee:10:b6:63:a1:d3:
         56:12:12:4b:02:03:4d:29:e4:e9:51:cc:45:6c:53:42:fb:dd:
         74:3f:a6:8c:38:81:ef:a6:03:bb:3e:ef:1c:64:1b:9d:32:2f:
         b1:87:e6:23:bf:a7:4c:3e:1e:b8:54:e3:83:e8:6f:65:1d:05:
         a9:b4:be:61:1c:6c:c7:b2:22:d6:e5:9f:ef:0a:29:ca:2f:de:
         4a:79:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:12:38 2026 by rpki-client