Error: rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
File:                     JV9qID5NQpmXaROm9i3oxI7sk70.mft (raw, json)
Hash identifier:          MlrrvP6oxLDV9RUvVY9OhHGcLIXoLFkHGiJYXAHzJsE=
Subject key identifier:   E3:9E:28:F5:38:4C:36:03:17:F6:E1:F6:DA:7C:AF:78:E7:F2:DE:1D
Authority key identifier: 25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD
Certificate issuer:       /CN=F363460FAF/serialNumber=255F6A203E4D4299976913A6F62DE8C48EEC93BD
Certificate serial:       02C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
Manifest number:          02C7
Signing time:             Mon 28 Sep 2026 04:39:11 +0000
Manifest this update:     Mon 28 Sep 2026 04:39:10 +0000
Manifest next update:     Wed 30 Sep 2026 04:39:10 +0000
Files and hashes:         1: JV9qID5NQpmXaROm9i3oxI7sk70.crl (hash: kIdrXLZnuk6H3Pmbkrh2d2Pb3PjGvPthKjkA2oS0Zsg=)
                          2: 81D2A93E986211EF8DC64A77762E951A.roa (hash: XCH2tO5kEYMyiAwzUo8LnwXXodXNXur00bVM7AU5ZV0=)
                          3: 26DC05C4986311EFBE63827B762E951A.roa (hash: 9xkZbyUzhuxbnuEDnds0Ogy4qS4HDRlvSKhOgozHOF4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363460FAF, serialNumber=255F6A203E4D4299976913A6F62DE8C48EEC93BD
        Validity
            Not Before: Sep 28 04:39:10 2026 GMT
            Not After : Sep 30 04:39:10 2026 GMT
        Subject: CN=6ab9ef6e-29e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:01:6f:c4:6a:58:4d:4b:c7:7a:0c:0d:37:
                    6d:56:72:b6:6e:a5:2b:f4:7a:f4:0f:dd:48:38:7a:
                    5d:51:b3:aa:50:0a:57:1b:ef:13:cd:ba:cd:0f:3d:
                    4f:0a:31:22:c7:76:3c:d6:28:c4:0c:97:3b:35:e8:
                    df:16:5c:f4:5e:b5:89:6b:48:99:fb:8c:80:33:04:
                    da:d5:9c:e5:e2:b0:82:84:11:69:c2:f4:c7:31:66:
                    92:e3:2a:89:10:fe:b2:f4:be:97:2b:50:43:4b:9d:
                    51:d7:71:15:ad:3c:3e:6d:4b:26:aa:93:3e:a8:35:
                    2b:e5:b4:c5:26:c4:c1:9f:f4:46:41:2c:4f:b7:2a:
                    fe:b0:af:66:5b:88:73:f4:3e:a7:14:01:5e:0f:d1:
                    ec:ac:a9:2e:24:43:ee:4d:7b:a4:3f:4a:78:d9:ef:
                    ec:2c:d1:86:f7:6b:66:97:0f:13:d3:49:df:a5:9d:
                    38:db:c8:ea:1e:d0:32:e0:16:b1:77:6e:13:68:cc:
                    8b:d8:5a:e7:aa:87:76:0f:28:7b:09:ae:99:09:63:
                    be:27:4c:68:0b:5c:4b:df:a2:d9:b0:0f:cb:37:39:
                    5a:2c:24:0d:2e:96:9a:d3:bc:7b:1a:47:88:35:3f:
                    e6:a4:d8:fb:8e:77:41:02:14:13:8e:22:a4:a0:24:
                    11:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9E:28:F5:38:4C:36:03:17:F6:E1:F6:DA:7C:AF:78:E7:F2:DE:1D
            X509v3 Authority Key Identifier:
                keyid:25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:75:14:70:05:6f:a3:11:29:59:8a:32:c9:a8:51:5e:65:20:
         90:68:ea:f3:37:af:47:81:51:16:76:77:2e:27:4d:ee:f9:90:
         f0:f9:d4:69:82:be:24:be:e6:11:29:0d:93:88:b9:d5:ea:d4:
         df:e8:39:80:da:22:0e:28:67:9a:61:20:22:85:f8:4a:99:77:
         2d:ad:e8:41:9b:80:6d:43:fe:4b:cd:01:49:fc:f9:c8:a0:f8:
         46:c0:1a:4e:27:9d:d5:7d:41:cc:35:a4:b3:08:b0:ff:47:cc:
         03:9e:f6:f7:ac:21:e5:17:50:29:f0:f1:34:1d:98:c4:d9:8c:
         36:b1:1c:8d:96:69:a2:d8:6b:fd:f5:9e:b8:b7:65:3d:1e:6b:
         f7:b4:4c:0b:55:d4:07:a5:a1:33:36:2f:e4:d1:5c:9b:05:68:
         f3:08:21:48:f1:47:15:e5:a8:cb:32:05:4d:36:e6:ac:08:e1:
         94:7b:84:3d:24:5e:a5:e3:d9:3d:79:70:2c:1a:e9:68:ae:b6:
         ec:21:ea:ee:b7:79:c6:fd:85:0e:91:cf:97:7f:08:b9:4a:ac:
         91:85:2f:96:ec:6b:d2:f0:c6:ca:cf:63:23:5c:32:13:e4:a1:
         27:1b:50:5d:b4:4f:e6:e7:d5:fd:5e:38:46:70:6f:07:03:d9:
         e4:0b:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:21:41 2026 by rpki-client