Error: rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
File:                     CW2z073uu30kcGbciyW5ZMxAmdc.mft (raw, json)
Hash identifier:          HAVYGCNV4Q5zXq02LaUZTOGxmJTZUseTudno+Mv6/mM=
Subject key identifier:   88:46:62:AB:A6:6D:FE:EF:D9:DF:5F:63:7E:7F:41:BB:C1:F6:AC:E5
Authority key identifier: 09:6D:B3:D3:BD:EE:BB:7D:24:70:66:DC:8B:25:B9:64:CC:40:99:D7
Certificate issuer:       /CN=F3654AEEAF/serialNumber=096DB3D3BDEEBB7D247066DC8B25B964CC4099D7
Certificate serial:       03C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
Manifest number:          03C1
Signing time:             Mon 21 Sep 2026 04:03:41 +0000
Manifest this update:     Mon 21 Sep 2026 04:03:40 +0000
Manifest next update:     Wed 23 Sep 2026 04:03:40 +0000
Files and hashes:         1: CW2z073uu30kcGbciyW5ZMxAmdc.crl (hash: TosnIKQc8Ny1LCvGb8Pcar63Fv2kZK5PALbWmDoHjiM=)
                          2: 7DA422ACD4C511F0B1311BECDAE4EC9C.roa (hash: 6V8Z71gkmFS44iG++1MEDpGgXR97Y4NjsKUF87yk400=)
                          3: 788D2BE0D8AC11EE9DB58DA2775412E6.roa (hash: 65eF1Tp/RlXNcWyLpB3YoIRfdS2c/kR79xeADgOJBXo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966 (0x3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654AEEAF, serialNumber=096DB3D3BDEEBB7D247066DC8B25B964CC4099D7
        Validity
            Not Before: Sep 21 04:03:40 2026 GMT
            Not After : Sep 23 04:03:40 2026 GMT
        Subject: CN=6ab0ac9d-3ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:e1:1e:5a:1f:2d:25:2a:8a:60:4d:d4:5b:
                    80:39:3f:f5:5c:58:bd:1f:6c:40:3d:37:fc:11:7f:
                    7d:71:3b:4d:ec:af:eb:e5:de:61:2c:d0:67:36:aa:
                    26:94:29:cf:61:fe:88:a8:76:60:75:90:b5:9e:d2:
                    10:cd:c1:ea:fb:09:b3:66:3c:94:7c:2d:ef:b1:81:
                    21:d9:53:d5:45:4d:90:0c:da:e3:70:61:cc:78:26:
                    4a:86:06:07:10:f2:37:32:01:00:18:d3:f9:21:10:
                    f9:8b:a6:6e:51:aa:80:34:f6:ab:c8:63:4d:8f:3d:
                    74:f4:6f:65:c9:70:32:0f:df:d4:3e:f7:8d:7c:63:
                    3b:d1:73:58:df:81:7e:91:0c:e9:2c:62:0f:18:9f:
                    01:0f:93:a3:6f:87:a6:6f:c8:7d:e5:22:6d:e3:05:
                    b9:09:3c:56:0e:92:51:ec:2e:46:6c:b6:11:26:9b:
                    00:5f:b1:bf:37:fe:a8:ab:58:21:c0:6d:14:1b:38:
                    65:77:62:69:4d:6e:0d:25:bf:1f:e9:7c:b7:1c:1b:
                    95:38:de:e3:2c:cf:2a:91:d2:5a:51:f7:39:f3:2f:
                    30:20:8c:a8:a0:40:a8:27:a5:d5:d3:7e:cc:99:84:
                    f5:f8:af:54:62:bd:e3:d3:12:69:e2:a5:fd:12:39:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:46:62:AB:A6:6D:FE:EF:D9:DF:5F:63:7E:7F:41:BB:C1:F6:AC:E5
            X509v3 Authority Key Identifier:
                keyid:09:6D:B3:D3:BD:EE:BB:7D:24:70:66:DC:8B:25:B9:64:CC:40:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:d8:26:f4:65:0e:fe:22:ee:74:0c:b7:84:f4:e8:e2:a3:5e:
         5b:26:be:89:b6:1a:2d:02:e3:56:cd:2f:20:5d:ab:be:91:f9:
         12:47:9e:53:80:dd:c4:e3:65:9a:aa:ed:1b:30:fd:47:ec:81:
         d8:1b:a6:b9:d4:5b:a7:98:d9:1f:75:cb:4f:68:bc:32:ac:95:
         5b:43:92:14:6f:26:26:64:d7:ab:ef:71:ce:77:ce:74:37:d4:
         21:6c:08:44:88:83:de:be:31:98:7c:df:e5:23:2b:bd:ca:5d:
         20:d8:c7:49:bb:b2:db:cd:06:07:8c:49:59:61:2e:62:b8:59:
         53:48:79:90:d3:21:86:55:55:09:02:e9:d9:50:99:48:19:eb:
         89:3e:ef:b5:ce:52:46:06:77:e1:29:59:18:62:eb:85:94:83:
         7c:3f:1c:40:a7:f7:af:6a:93:44:3b:1e:f7:ef:94:dd:7f:39:
         44:e9:ca:1a:c6:e3:14:9a:03:b8:04:2a:76:c5:44:06:61:43:
         b8:35:ae:26:67:b8:a3:0b:c1:62:00:4a:1f:b8:90:a9:e4:7a:
         25:d6:ba:fa:e9:18:3c:30:a0:60:40:51:1c:6e:10:09:ae:fc:
         bb:53:35:10:0c:e2:f6:44:4f:a9:af:1a:95:df:49:07:53:21:
         90:a7:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:55:45 2026 by rpki-client