Error: rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft
File:                     7vdTJDjdpqMkdkrK-E72JOF34MU.mft (raw, json)
Hash identifier:          n57aU8B/vw+24IDzJxG7RhyLpB3AgETI2cp1FL2NAvI=
Subject key identifier:   DE:82:ED:40:A4:5A:4E:D3:55:C1:E5:A0:D0:4C:D8:8C:DC:78:0C:6D
Authority key identifier: EE:F7:53:24:38:DD:A6:A3:24:76:4A:CA:F8:4E:F6:24:E1:77:E0:C5
Certificate issuer:       /CN=F3646008AP/serialNumber=EEF7532438DDA6A324764ACAF84EF624E177E0C5
Certificate serial:       08BB
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/7vdTJDjdpqMkdkrK-E72JOF34MU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft
Manifest number:          08BA
Signing time:             Mon 28 Sep 2026 01:54:29 +0000
Manifest this update:     Mon 28 Sep 2026 01:54:28 +0000
Manifest next update:     Wed 30 Sep 2026 01:54:28 +0000
Files and hashes:         1: 7vdTJDjdpqMkdkrK-E72JOF34MU.crl (hash: ugwMdwm8/i/NOuLp8Q+fY8/4HT7QEBUE+pf4X5NY1J0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft
                          rsync://rpki.afrinic.net/repository/apnic/7vdTJDjdpqMkdkrK-E72JOF34MU.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235 (0x8bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646008AP, serialNumber=EEF7532438DDA6A324764ACAF84EF624E177E0C5
        Validity
            Not Before: Sep 28 01:54:28 2026 GMT
            Not After : Sep 30 01:54:28 2026 GMT
        Subject: CN=6ab9c8d5-fa10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:99:7c:fe:55:f3:6e:68:21:1a:74:eb:77:
                    9c:9f:51:17:15:57:6f:6e:43:3a:72:97:a2:b4:a4:
                    95:5f:f8:fe:34:7c:f1:5f:f7:0e:0a:b4:4b:79:75:
                    75:45:77:58:3a:e1:14:93:d2:80:86:67:5c:c5:14:
                    74:e4:98:68:b6:99:a9:cf:e9:0e:54:00:cd:9b:d3:
                    ea:57:03:41:e2:f8:5a:73:5c:dd:27:ad:12:fe:e0:
                    c1:d1:f7:82:55:60:69:ad:57:74:80:34:6f:69:e7:
                    ce:dc:48:77:63:5f:90:f4:d2:34:07:12:a7:16:6a:
                    f7:97:a9:cc:55:04:6e:0c:f4:c1:bb:e6:a6:0d:7c:
                    d1:11:d7:8e:94:59:42:18:83:1f:75:dc:17:e4:1c:
                    9a:40:cf:7f:34:4a:0b:b3:32:73:f4:97:73:46:ad:
                    c4:87:6a:2e:19:9e:3b:7b:25:9b:c5:d9:71:78:51:
                    8a:37:17:db:b7:1a:ce:5e:42:69:18:6c:6a:90:2d:
                    b2:28:dd:57:55:8a:52:2d:a9:1b:39:5a:64:0d:e6:
                    dd:2a:22:ad:ef:07:6b:1c:82:82:f4:42:01:20:86:
                    bf:9b:65:9a:7f:10:f5:99:c9:80:0a:61:f6:0a:c1:
                    bb:aa:ff:fc:4c:1c:ce:18:bc:c7:73:10:37:0c:30:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:82:ED:40:A4:5A:4E:D3:55:C1:E5:A0:D0:4C:D8:8C:DC:78:0C:6D
            X509v3 Authority Key Identifier:
                keyid:EE:F7:53:24:38:DD:A6:A3:24:76:4A:CA:F8:4E:F6:24:E1:77:E0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/7vdTJDjdpqMkdkrK-E72JOF34MU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:54:f7:43:6f:fb:19:b2:4e:36:f4:68:ee:b7:5a:d1:45:f8:
         72:66:48:c4:b0:56:a5:95:b1:6e:f8:ad:ee:ed:b3:1e:0d:dc:
         a9:2b:58:92:2f:43:23:95:a3:34:55:7f:c0:3d:53:c4:d7:74:
         07:6b:b7:58:58:f5:65:f1:f4:ce:e9:7a:51:c2:c9:05:ab:19:
         eb:ca:8e:08:25:86:be:4a:ac:a9:17:a3:52:be:d3:0e:7b:56:
         52:e4:60:80:3f:f8:8f:bb:d7:c4:40:d0:b2:38:2b:71:35:86:
         5a:51:57:c0:74:df:78:98:1e:ca:57:f2:45:fb:e2:f6:36:f0:
         98:1b:9d:8a:46:52:9b:e7:01:da:fa:b5:01:2c:76:e7:2c:59:
         2b:25:48:54:87:7b:c3:24:88:e2:41:c0:e1:6a:f9:a8:c5:cc:
         d5:59:5f:09:c9:09:e2:71:86:40:5b:82:4d:44:3b:8c:02:c7:
         2c:82:05:8b:12:bf:f6:04:ac:ce:e7:da:21:1b:d5:a4:86:79:
         dc:f5:e4:98:f4:29:d0:1c:07:d8:fe:23:5c:9d:bd:6e:d4:d7:
         da:2b:f9:38:c4:ed:64:82:1d:4c:70:0a:16:fc:e8:2e:15:00:
         1b:e6:bc:9c:80:8a:84:d1:6c:c1:a7:97:d6:4c:86:ab:f6:38:
         73:29:5b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:50:55 2026 by rpki-client