Error: rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft
File:                     9VOyAq1fvTvj78fy2mkTeqaheOI.mft (raw, json)
Hash identifier:          D0w3Y78EucESxWP+YD+XmBoDPeulTNhM1tMBOu8JW64=
Subject key identifier:   EC:61:AF:17:14:08:78:6B:33:6D:88:4D:6B:D7:7B:FB:4A:DE:21:DF
Authority key identifier: F5:53:B2:02:AD:5F:BD:3B:E3:EF:C7:F2:DA:69:13:7A:A6:A1:78:E2
Certificate issuer:       /CN=F363AA80AF/serialNumber=F553B202AD5FBD3BE3EFC7F2DA69137AA6A178E2
Certificate serial:       6A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9VOyAq1fvTvj78fy2mkTeqaheOI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft
Manifest number:          66
Signing time:             Tue 13 Oct 2026 05:45:01 +0000
Manifest this update:     Tue 13 Oct 2026 05:45:00 +0000
Manifest next update:     Thu 15 Oct 2026 05:45:00 +0000
Files and hashes:         1: 9VOyAq1fvTvj78fy2mkTeqaheOI.crl (hash: G7WNIGG+S/Urv+XL0m7O8a+iKUi9nUoUoXoxCdfTjVc=)
                          2: 483963167BAF11F1B2F0B0ECCE1D38B0.roa (hash: 6ApyC0ohIKCaS38o9cVLyGJCGQ4YR9OpWdNCbGncsd0=)
                          3: C27271467BAE11F1ABF121ECCE1D38B0.roa (hash: VdbMwvTRClcjox2S/2NVOxavdjRQKb5ghNjcYWl7a2w=)
                          4: FA87324C7BAE11F1AB633FECCE1D38B0.roa (hash: Y++5DupkXsebrAc+hbkE3N5d6DZNbyNJZGID+Ut90Ho=)
                          5: 7ACCFA867BAF11F1BA0E46F0CE1D38B0.roa (hash: 5RZFISVxHr6AgVQeWbTly4Y9isbCXo9G2i+AxPE1xgg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9VOyAq1fvTvj78fy2mkTeqaheOI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 05:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363AA80AF, serialNumber=F553B202AD5FBD3BE3EFC7F2DA69137AA6A178E2
        Validity
            Not Before: Oct 13 05:45:00 2026 GMT
            Not After : Oct 15 05:45:00 2026 GMT
        Subject: CN=6acdc55d-db52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:2c:ec:90:be:9e:31:9a:1f:0d:25:ce:52:
                    6d:c6:4d:b8:2c:bd:2c:ba:05:86:41:0f:a0:04:62:
                    00:a5:73:e7:5e:e2:c5:4c:25:d0:7b:37:ae:99:08:
                    9d:5c:4f:f3:08:3d:56:78:8e:8e:ca:6a:dc:de:27:
                    ec:08:ab:7a:c6:61:75:9c:62:8d:72:57:33:30:5e:
                    f9:f1:3f:24:95:12:07:fe:63:a4:37:80:dc:9c:37:
                    75:3e:1c:ad:4b:66:63:54:3d:89:6f:a3:8d:81:8d:
                    61:ae:d3:6d:0e:6b:df:ed:54:1e:55:4c:ed:f8:b1:
                    29:24:11:86:0c:5c:8e:c7:dd:75:a6:57:3d:75:be:
                    45:71:4e:4c:9b:b5:53:99:f0:fa:00:18:60:93:7d:
                    43:ec:df:4e:5c:1e:72:85:4a:a8:4e:a0:bf:7a:de:
                    82:73:af:07:c3:91:3a:81:cf:2c:00:89:e9:34:8f:
                    f7:ba:e8:84:d9:f9:a7:d8:d0:d6:5c:7e:e8:2b:8e:
                    9d:6c:06:6d:22:04:c0:cd:a7:db:6d:d0:c5:2b:cb:
                    4b:fe:c0:f9:a8:3c:57:80:66:55:18:c4:f5:b8:6a:
                    41:80:17:96:9c:92:94:44:0f:0e:af:d5:f1:75:e3:
                    ec:39:fd:a9:f8:03:ea:7c:56:ed:05:78:de:60:4c:
                    9c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:61:AF:17:14:08:78:6B:33:6D:88:4D:6B:D7:7B:FB:4A:DE:21:DF
            X509v3 Authority Key Identifier:
                keyid:F5:53:B2:02:AD:5F:BD:3B:E3:EF:C7:F2:DA:69:13:7A:A6:A1:78:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9VOyAq1fvTvj78fy2mkTeqaheOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:72:73:1f:a6:df:11:5c:7b:fb:a0:e8:1c:c2:25:68:d5:f2:
         9b:19:98:9f:90:07:04:1f:9d:ee:d7:75:25:41:04:a6:40:da:
         0d:47:68:f3:f2:0e:f5:ad:ca:0b:3a:8d:b8:dd:28:cc:84:dc:
         4c:89:d8:b8:28:9e:96:82:09:47:d5:16:1c:8d:3e:16:04:47:
         5d:be:9e:f6:0b:1d:eb:7c:43:7e:a6:6f:29:1b:df:ef:2b:24:
         ed:a1:71:42:87:1d:03:3f:13:c2:63:ea:23:ed:4d:24:7d:04:
         a6:7f:f6:33:e5:b7:78:14:9a:5d:87:90:fb:76:65:38:69:0d:
         ca:e6:d2:31:e4:22:95:2b:a2:e1:30:2f:34:e1:1c:46:82:8e:
         69:70:da:b1:d5:66:77:27:1c:93:54:43:04:70:0d:0a:53:d3:
         bd:29:a5:0b:fb:52:98:26:a5:11:be:d2:a2:46:cd:9d:46:3f:
         19:01:03:84:33:77:f8:c2:b2:e9:a8:ba:f3:cc:4b:41:05:4a:
         0f:b2:76:d2:a1:67:09:dc:ba:ef:27:53:d3:95:fb:6a:66:a1:
         7f:b5:74:31:07:fc:aa:5e:87:9c:0a:0f:04:02:97:a8:69:e0:
         3b:fa:72:1a:76:fa:b5:7a:10:7f:7e:f4:a0:48:8f:44:ed:e6:
         5c:26:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:21:18 2026 by rpki-client