Error: rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
File:                     fB-8tURrPURYdKAjdA4kfWIwI10.mft (raw, json)
Hash identifier:          RPqxX8qvKmw5ZmvBZQPqC2Ir68phwFVokQh5VZf/LlM=
Subject key identifier:   F7:6E:50:36:BA:00:6A:44:7E:09:EC:56:5A:46:FE:C4:36:FF:59:2E
Authority key identifier: 7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D
Certificate issuer:       /CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
Certificate serial:       0333
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
Manifest number:          0330
Signing time:             Mon 05 Oct 2026 04:22:32 +0000
Manifest this update:     Mon 05 Oct 2026 04:22:31 +0000
Manifest next update:     Wed 07 Oct 2026 04:22:31 +0000
Files and hashes:         1: fB-8tURrPURYdKAjdA4kfWIwI10.crl (hash: Y3YI31d+eDd1KtMpGjxL4n55AO1vDy2B9pa8m3E4jcs=)
                          2: 69176EDA54B411EF85302264762E951A.roa (hash: aXC5ZcMaKvppj9wFu7iH9bADIONa5jeymvvlcxe0MZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 04:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C154AF, serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
        Validity
            Not Before: Oct  5 04:22:31 2026 GMT
            Not After : Oct  7 04:22:31 2026 GMT
        Subject: CN=6ac32608-e5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:88:d9:80:b4:39:da:e3:73:24:de:17:bd:
                    1f:f6:c4:af:5a:89:e4:a4:f9:c3:3a:41:10:b2:4c:
                    8b:08:34:02:71:4f:60:31:88:b9:ac:31:29:d5:16:
                    4f:8f:9b:78:54:16:09:3c:69:28:5c:17:3e:d0:39:
                    26:40:3d:2f:ee:ba:66:ae:3b:5c:b9:db:08:0f:3d:
                    c9:f9:63:99:c7:3f:94:67:d2:24:e9:30:a3:56:f1:
                    c0:e3:67:b7:a5:9c:c8:b4:71:b4:9a:e6:fa:3a:f8:
                    4b:ab:5c:a7:56:24:55:04:37:08:7c:eb:12:a9:96:
                    cb:33:37:be:9b:37:48:79:67:92:a1:c7:5f:80:e9:
                    48:1b:89:e1:90:38:12:7b:b4:70:61:e4:33:09:d1:
                    0c:04:ac:91:35:8a:61:c9:fa:1e:e0:a1:be:6c:cc:
                    db:60:2e:5c:61:60:87:41:7a:51:93:c9:c1:54:3a:
                    b1:ac:de:12:12:04:42:7d:70:df:a1:fc:e1:58:92:
                    f3:10:a7:b0:e9:ec:5d:ac:86:3c:3d:c2:24:b8:a9:
                    b1:4a:d5:71:24:38:01:c6:38:10:50:b4:d7:0a:6c:
                    45:b6:fb:8d:2f:40:19:ec:aa:3d:ee:46:4b:8d:34:
                    f6:71:61:fa:2d:e4:6f:7c:45:34:f2:0e:40:cf:c7:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6E:50:36:BA:00:6A:44:7E:09:EC:56:5A:46:FE:C4:36:FF:59:2E
            X509v3 Authority Key Identifier:
                keyid:7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d7:cb:2a:a6:07:04:51:0e:e2:65:58:e8:ab:a5:ce:fc:b9:
         f7:49:38:57:21:a3:3b:db:6b:bc:cf:a5:f8:f5:bd:ff:75:48:
         0b:a1:28:b7:d1:a7:93:43:b3:4d:fe:ec:33:b3:cc:93:6b:b3:
         71:8c:49:a4:7c:d2:16:1a:a3:04:97:b0:63:52:fb:62:e1:fb:
         c8:61:bc:5c:af:b8:7c:64:bc:ca:5f:e9:b9:ce:ea:33:e3:cd:
         cb:5f:50:ed:e8:c4:fd:ec:c1:78:94:60:7d:48:9f:78:c3:5a:
         9d:91:e3:ff:44:d1:f9:88:36:51:f0:79:bf:ed:07:df:2d:fa:
         0d:59:7f:c2:5e:f0:f8:13:07:49:bb:48:00:4a:c9:e9:59:bf:
         b5:fe:6c:9b:51:d5:c7:3e:70:a2:e9:d9:0f:af:eb:e7:30:3f:
         93:cf:e5:22:9b:9c:48:92:e7:bd:3f:7f:d0:4b:f8:8f:79:1b:
         06:e2:6f:5b:04:ca:6c:ac:35:f3:83:5e:c9:80:22:b1:7d:35:
         61:a6:64:fa:23:3a:f4:b3:5b:fb:bc:a0:19:e6:0b:6a:cf:7e:
         6f:20:08:d1:63:f4:a7:14:72:92:b2:20:8e:30:83:ec:e0:6b:
         53:80:da:9c:62:46:54:36:d8:f7:9f:09:a5:5f:ea:b1:6e:4a:
         41:e8:26:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:14:55 2026 by rpki-client