Error: rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
File:                     EAy9RkqQWltWj3rc7x-dILx1IzE.mft (raw, json)
Hash identifier:          ZP1ocP26/txQGPb8F5HkqLMkF1KLKyaHyy+LlVpO6VA=
Subject key identifier:   CE:53:F5:80:5B:60:4C:39:BA:DA:E7:1B:98:F2:D6:D8:29:ED:F3:7C
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Certificate issuer:       /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial:       0555
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
Manifest number:          054C
Signing time:             Sun 11 Oct 2026 03:19:16 +0000
Manifest this update:     Sun 11 Oct 2026 03:19:15 +0000
Manifest next update:     Tue 13 Oct 2026 03:19:15 +0000
Files and hashes:         1: EAy9RkqQWltWj3rc7x-dILx1IzE.crl (hash: RKyK6Y9tJaWPp2W6mwWmkJT6wxlwt3IRg1V4uowmVSE=)
                          2: C719F080031811F0BCF8A45B762E951A.roa (hash: 79NJnHtzqcMQMYnoSD6NuoCr6AjHcaiwFE26hsB9lSo=)
                          3: E7C40FA68A6711F08E76079BDAE4EC9C.roa (hash: VT6zH98Frb6UtC81E1Tg7fyG8o/UWEDY/xqxWLn85AE=)
                          4: BE98A03E46CD11F08B83E8B4DAE4EC9C.roa (hash: GvbT42KDVOWTxS2JfgWWuD/aGjv1HwP9FkaDOKQ86zw=)
                          5: F6AE29B646C911F0A3352A9CDAE4EC9C.roa (hash: xJc4bxraTn4VMWGp4tujLjr4NYvnFKt/PaHncXl4bO8=)
                          6: 78AAD6F686B811F1AD0338E6CE1D38B0.roa (hash: kggO1PHAaeMi9Iq20hDB0z/CvbOz9LysF/AicQaTOXs=)
                          7: 5110E694031F11F0BEF24185762E951A.roa (hash: WjTHo5/2GMgpz/biHo/PTtID/ZgNKHDsBiz50asiS8I=)
                          8: 8187B4F485CA11F1910971BFCE1D38B0.roa (hash: MUhyY35RIQ7mJxQxOOJkiFFWoyA7V3uNiEOaAsw+ZGQ=)
                          9: 71F0925246CB11F0906DF5A4DAE4EC9C.roa (hash: 4GpwoUFSemgnNHOneEphyunOOkVz96lSUfPWz4U/DVI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365 (0x555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAF, serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
        Validity
            Not Before: Oct 11 03:19:15 2026 GMT
            Not After : Oct 13 03:19:15 2026 GMT
        Subject: CN=6acb0034-26d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:92:34:3a:0a:ea:83:23:f9:de:d2:18:38:
                    02:f1:07:16:2a:d9:82:46:41:f5:ba:b9:65:25:d9:
                    24:0a:a2:51:65:86:7b:c4:07:d1:df:79:a4:9a:06:
                    1f:a9:94:55:c0:5d:90:b2:39:8c:f5:2d:f7:1e:fe:
                    e6:74:a3:9e:58:76:1b:36:d1:4a:9b:df:83:fa:10:
                    3c:81:2b:4c:7a:28:4c:7f:4a:9b:c5:27:58:51:a1:
                    99:73:bb:8c:78:9f:1b:cc:e6:91:c5:08:e4:01:24:
                    12:e2:c8:92:e9:36:55:7e:84:66:5a:cc:15:d5:4c:
                    a8:7b:2f:54:36:30:91:85:c1:62:d2:cb:5e:ce:d8:
                    9d:f0:88:d8:00:86:11:17:69:a6:25:1c:20:23:9f:
                    9e:df:a2:09:a5:e9:58:f9:c2:80:cb:ad:10:5e:d4:
                    29:69:ea:51:34:e4:40:a3:a3:57:36:42:76:ca:69:
                    3f:7b:ba:32:eb:db:26:c9:58:30:42:f4:a1:d8:7e:
                    79:0c:c1:1b:35:12:db:0d:12:bb:67:f1:3b:5f:0f:
                    58:08:53:11:19:88:3e:93:80:ba:37:9a:f7:95:f8:
                    a4:90:a1:bc:7d:20:43:b1:9b:9a:9b:d1:d3:05:bb:
                    27:35:71:97:f3:7a:7d:82:b6:ac:36:e0:e6:d0:48:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:53:F5:80:5B:60:4C:39:BA:DA:E7:1B:98:F2:D6:D8:29:ED:F3:7C
            X509v3 Authority Key Identifier:
                keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:24:89:4d:c7:e7:be:b6:d6:f6:6d:a7:d8:3a:c9:9e:1f:
         c2:4b:21:6e:d5:a3:cf:88:ed:62:00:bc:ac:3a:58:36:44:7b:
         bc:b9:ec:f0:f0:e5:b7:45:53:ee:bf:aa:20:47:de:26:c3:2d:
         7e:47:94:70:e0:dc:59:fe:72:79:bd:34:be:23:f0:f8:b8:5d:
         eb:da:b0:14:3e:1f:bb:c7:b1:f8:e0:0b:cb:31:92:11:90:bb:
         eb:f8:6b:b2:66:aa:d0:37:c0:84:a4:fa:bf:a2:8b:86:9c:86:
         7f:95:b3:a7:df:cc:82:8d:29:72:90:25:1a:86:78:07:80:33:
         92:05:51:55:50:a4:16:71:ee:a8:85:75:a1:9c:8f:ec:84:2c:
         ed:e1:77:2a:32:c4:2b:e1:ae:ca:73:c9:57:5f:81:0b:a2:2d:
         5c:93:bf:8b:b3:3a:9e:a3:3e:4b:c3:42:9b:d5:16:9a:df:1a:
         e3:0c:9a:8b:8a:c0:d4:17:1c:12:b3:7f:cc:4c:ce:d8:71:07:
         4e:e1:4a:ec:9c:03:9a:49:8f:dd:8b:ab:6e:4a:38:2d:6e:11:
         a3:06:2e:a5:f8:d6:2b:24:f1:a7:d3:70:5d:f0:b9:2a:da:45:
         ef:52:e2:c0:fd:e7:ec:49:3a:f1:2a:ae:95:81:cb:44:c7:55:
         77:1a:81:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:57:51 2026 by rpki-client