Error: rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.mft (raw, json)
Hash identifier:          72MaCuNoih7a9YPlAgWgDFzEMjH2nQNVHudSWA9pC7s=
Subject key identifier:   38:CC:99:F7:CA:BC:AA:E4:CC:24:3B:FD:4E:98:4F:40:E0:10:12:C1
Authority key identifier: A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Certificate issuer:       /CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Certificate serial:       05E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
Manifest number:          05E0
Signing time:             Sat 17 Oct 2026 03:01:28 +0000
Manifest this update:     Sat 17 Oct 2026 03:01:27 +0000
Manifest next update:     Mon 19 Oct 2026 03:01:27 +0000
Files and hashes:         1: poVzBBtD85x4jvNbdksxjIhJyf4.crl (hash: LvpHBH39fUd/pcW15LUpagPcHziPk3441r6MTo7Lfew=)
                          2: 1B35856C195C11F1A4BE1BE6DAE4EC9C.roa (hash: CHaNrBOXzFgVGFou41x3nuG9Yh9iFT+XuvLJW7NRZ94=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AF, serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
        Validity
            Not Before: Oct 17 03:01:27 2026 GMT
            Not After : Oct 19 03:01:27 2026 GMT
        Subject: CN=6ad2e508-0591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:a8:34:23:b5:76:6f:b9:a1:ca:f6:0d:b7:
                    2d:bd:0d:b0:e6:a3:33:77:47:6a:ee:56:c2:6c:f2:
                    6a:f6:4e:05:49:c8:ee:c0:5f:09:7a:66:e0:83:66:
                    e7:50:f7:26:c0:00:29:8a:0e:ed:06:3e:22:e2:0c:
                    af:ac:2c:e2:39:a9:f7:a0:2b:88:17:cb:8f:64:a9:
                    e2:31:f4:28:7e:7f:2f:86:7c:fd:75:6e:8e:f0:f4:
                    7a:b0:3e:56:60:98:5e:ba:65:91:17:2e:ca:f9:d0:
                    40:60:ef:2a:10:90:30:27:e1:19:1a:d4:35:f7:ee:
                    f7:ff:d7:46:b9:7e:bf:14:15:eb:87:3c:bd:dc:99:
                    f6:d8:81:e3:3b:d9:61:df:07:de:48:03:93:00:03:
                    73:69:e3:31:8e:f8:b8:aa:c4:fa:2d:f8:9d:d1:36:
                    4b:07:58:24:d0:89:bc:67:7b:af:02:9b:d6:f2:41:
                    22:8f:99:8e:dd:17:27:e2:ae:a7:cc:35:a8:12:ae:
                    c4:07:51:6f:db:5b:e3:fd:4b:c1:38:82:50:3b:86:
                    88:6d:40:bc:6a:fd:4e:3d:86:7c:b4:56:df:53:ae:
                    99:7a:94:69:2b:29:ff:1a:d6:3a:64:d9:54:5a:3a:
                    e6:99:4d:e3:bb:95:b3:44:ca:39:24:06:ae:89:60:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CC:99:F7:CA:BC:AA:E4:CC:24:3B:FD:4E:98:4F:40:E0:10:12:C1
            X509v3 Authority Key Identifier:
                keyid:A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ca:62:01:84:a5:80:c6:e5:39:70:0c:b9:97:7c:0c:93:8b:
         11:08:c5:43:e9:b1:ff:76:8d:ae:b6:11:06:36:15:ff:95:e6:
         92:40:4a:43:51:60:4c:11:41:21:90:fe:fe:e9:72:d0:bc:9e:
         77:9b:e7:1f:f2:01:d1:8a:7f:ca:d2:be:08:e7:b8:0d:a5:ec:
         67:68:5c:ff:c0:4e:f8:10:92:dc:75:41:a7:bc:0d:df:d8:82:
         4e:6e:92:fd:05:82:2d:e2:a0:a3:dd:84:f7:f0:74:5b:fd:25:
         c7:cd:85:dd:b3:69:6a:95:a1:43:ac:e6:6e:43:5f:3e:73:51:
         8d:57:76:82:a4:80:8c:68:a9:70:82:00:0e:7a:cb:08:76:5c:
         ae:11:3b:d3:54:d0:2a:a2:d4:5b:72:41:dc:c9:fd:3e:ec:85:
         27:02:8d:bd:6a:63:a3:54:79:49:70:a2:ed:45:fb:71:3e:80:
         12:0e:d2:05:30:fe:f6:dd:19:19:63:7d:a1:5b:7e:18:e9:3a:
         32:ca:3a:2f:f3:cc:ae:90:71:c3:e2:78:3a:62:fd:50:fe:76:
         48:49:14:af:49:e9:93:ec:0f:4f:97:b4:3a:12:92:d0:d5:89:
         b6:a5:07:31:0c:d0:b5:01:2d:b9:6a:48:1f:eb:1e:75:3d:01:
         d0:fb:7d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:10:41 2026 by rpki-client