Error: rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft
File:                     k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft (raw, json)
Hash identifier:          Xa6iqgkhwTVYup27LfqJCiq+55LJoZ4w3VsImISLIEc=
Subject key identifier:   51:E7:8D:2E:35:11:D3:28:13:1E:9B:69:A9:C1:45:A8:A5:8C:3A:96
Authority key identifier: 93:C9:B2:1F:C8:54:30:38:BF:B4:25:F3:D9:0D:5C:47:44:DD:77:4A
Certificate issuer:       /CN=F363F81FAF/serialNumber=93C9B21FC8543038BFB425F3D90D5C4744DD774A
Certificate serial:       44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft
Manifest number:          42
Signing time:             Sun 20 Sep 2026 05:45:46 +0000
Manifest this update:     Sun 20 Sep 2026 05:45:46 +0000
Manifest next update:     Tue 22 Sep 2026 05:45:46 +0000
Files and hashes:         1: k8myH8hUMDi_tCXz2Q1cR0Tdd0o.crl (hash: 7vPzBShhoy4KxV+jYG2PCpFxBkrpvWfLebVWahW6cXE=)
                          2: E9E4135E846611F190C3AABECE1D38B0.roa (hash: QZ6J7q1ijc+soc8o1wXWWKMcX9fKVLJpvIDMUk+E0Xk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 05:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363F81FAF, serialNumber=93C9B21FC8543038BFB425F3D90D5C4744DD774A
        Validity
            Not Before: Sep 20 05:45:46 2026 GMT
            Not After : Sep 22 05:45:46 2026 GMT
        Subject: CN=6aaf730a-ea80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:2e:5c:e2:39:ba:cc:a7:8d:38:ae:9c:10:
                    75:30:8d:ba:ec:9d:ed:1f:24:59:51:22:16:3d:9b:
                    94:54:dd:02:55:c9:f1:4e:61:6e:37:64:b0:12:ba:
                    49:63:0d:0d:6a:ba:79:88:3b:6a:f4:8e:fa:d5:65:
                    5d:0e:ad:08:ea:dd:7d:85:20:7d:ec:84:55:e2:5e:
                    51:db:34:0d:4f:83:bc:ef:62:4a:52:c0:fe:76:d6:
                    7f:7c:2a:9b:94:66:3e:7e:41:0f:2c:de:87:3c:55:
                    e7:dc:bb:a3:ba:ef:d0:b8:a7:e5:26:0a:40:f4:e9:
                    a2:46:cc:23:f6:d7:de:38:20:d7:77:88:5a:e3:83:
                    4f:bc:44:2e:bf:22:76:7e:5e:1b:26:db:c6:f0:25:
                    29:b5:7e:fa:27:d6:2e:a0:ca:0b:b1:d3:12:9e:93:
                    7e:be:67:ab:2b:79:25:43:28:ec:c5:94:a2:95:7d:
                    84:43:bd:80:57:da:bc:da:bb:1a:20:5e:37:43:1a:
                    74:aa:c9:5a:9d:62:dc:23:ff:56:91:db:68:8c:07:
                    fa:58:44:b8:1b:75:69:d9:49:ef:c2:57:dd:df:1f:
                    af:a9:23:ce:ac:c5:1e:02:2f:fc:5b:9e:a3:f4:45:
                    db:04:78:3a:c3:53:78:b0:67:78:26:63:8d:bd:4a:
                    e2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E7:8D:2E:35:11:D3:28:13:1E:9B:69:A9:C1:45:A8:A5:8C:3A:96
            X509v3 Authority Key Identifier:
                keyid:93:C9:B2:1F:C8:54:30:38:BF:B4:25:F3:D9:0D:5C:47:44:DD:77:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e5:40:45:a2:f1:30:40:2b:4c:41:44:36:2d:85:a0:8c:65:
         d8:cf:c1:19:78:74:a0:2c:aa:db:92:4d:da:f6:ec:68:93:3b:
         de:ad:24:bc:ed:6f:77:ea:c7:3d:ae:02:13:0c:04:9d:dc:04:
         32:3b:a9:b7:66:f8:47:48:53:ca:65:de:dc:2a:9b:ef:22:81:
         c0:fa:7d:32:ba:59:f5:0f:fd:3c:23:e1:77:cc:53:85:1d:52:
         c2:eb:ae:06:96:30:98:0e:da:e0:93:39:98:5d:e3:0f:61:d3:
         8f:ca:fd:be:7e:96:12:e9:28:a4:02:16:4c:a2:cd:8c:54:d5:
         41:d0:86:32:9d:ff:55:e2:35:c7:90:9c:68:39:83:fe:67:c4:
         f3:eb:6e:64:e5:40:b4:c7:8f:2f:eb:6d:8c:d1:dc:a6:c9:1c:
         b4:37:68:c4:1c:1b:54:98:41:d1:a2:4b:19:30:04:7b:16:ea:
         65:93:47:81:1d:1c:83:0a:b4:2f:23:16:d5:19:60:a4:2b:b1:
         70:d2:21:14:48:6a:f1:fc:c5:d1:5e:1c:b2:59:e4:5c:06:5c:
         cd:ff:2e:66:1e:26:48:5c:e0:f5:6c:08:43:6e:bc:f9:e7:24:
         20:20:41:7f:f6:19:f5:ae:6e:91:be:f5:b1:59:59:65:ff:26:
         93:0a:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:13:20 2026 by rpki-client