Error: rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
File:                     Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft (raw, json)
Hash identifier:          IpsEEHTbBptaPEa9OPJAM5BVW15ynpQfOfoaImo0tLw=
Subject key identifier:   72:1E:E3:98:43:CB:AE:6B:2E:4D:D8:6F:37:6A:3E:A7:53:28:57:05
Authority key identifier: 22:CD:6F:18:77:75:C2:3E:27:51:5B:2F:E3:80:82:E4:BF:EA:8F:F4
Certificate issuer:       /CN=F365AA12AF/serialNumber=22CD6F187775C23E27515B2FE38082E4BFEA8FF4
Certificate serial:       07CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
Manifest number:          07CA
Signing time:             Tue 22 Sep 2026 02:10:21 +0000
Manifest this update:     Tue 22 Sep 2026 02:10:20 +0000
Manifest next update:     Thu 24 Sep 2026 02:10:20 +0000
Files and hashes:         1: Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl (hash: 2YTSs0+590oD1/83vV+TTyZlJ9AqhT1olyf6aLwD//A=)
                          2: B663D9A8C37B11EB8DB89456F8AEA228.roa (hash: BanY5OoiK/H0UyDozciFZEgNwlpeFk96ik1kdsHY5gM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365AA12AF, serialNumber=22CD6F187775C23E27515B2FE38082E4BFEA8FF4
        Validity
            Not Before: Sep 22 02:10:20 2026 GMT
            Not After : Sep 24 02:10:20 2026 GMT
        Subject: CN=6ab1e38d-6f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:75:43:ed:08:b3:74:8a:ba:d9:50:42:9a:
                    26:11:5b:e6:40:3e:a2:ff:14:b0:76:7b:38:92:91:
                    85:90:44:d0:ae:7e:5e:9e:df:6c:e4:ef:ce:23:6d:
                    19:bf:c3:8c:b5:62:d8:84:df:02:4a:df:33:63:d3:
                    81:9b:b3:85:97:f7:d0:cc:a0:df:79:30:01:54:82:
                    34:9d:e0:2f:0d:bf:79:b7:fb:d2:31:06:f5:4a:42:
                    09:c4:21:1c:5f:44:53:08:bf:cf:97:fb:18:50:96:
                    a3:d1:e4:19:18:96:d9:72:fc:34:44:fb:6f:99:3a:
                    4e:5b:1f:13:72:cf:8a:5a:cd:65:34:c4:bc:72:3d:
                    07:68:de:97:32:d3:28:dc:65:43:16:96:bd:fb:66:
                    f0:d4:c1:79:d3:32:ac:d3:7a:db:01:54:db:f7:c4:
                    97:73:f2:14:e6:c8:27:7a:49:7e:d9:6f:e9:3c:f0:
                    d0:7e:f9:e5:94:19:69:98:46:35:8b:0a:aa:93:c8:
                    b8:5e:56:5d:f3:40:c1:6c:d8:c5:b1:50:95:ea:e4:
                    f6:d3:3b:15:ff:5d:82:f2:d5:c7:a1:4b:f4:c6:89:
                    2b:d5:93:1a:38:f9:04:59:6b:f6:c9:34:a5:1c:e1:
                    5a:39:07:2f:b8:a9:3c:5b:a2:53:80:26:00:a4:6a:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1E:E3:98:43:CB:AE:6B:2E:4D:D8:6F:37:6A:3E:A7:53:28:57:05
            X509v3 Authority Key Identifier:
                keyid:22:CD:6F:18:77:75:C2:3E:27:51:5B:2F:E3:80:82:E4:BF:EA:8F:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:95:ec:68:ea:8c:59:2e:fd:47:08:fc:36:61:b6:e2:31:
         de:a4:d2:c7:b7:2e:06:f7:00:90:25:2a:28:dd:bd:20:be:38:
         8d:26:a2:33:a9:49:90:90:d3:19:7e:9a:ef:0e:8e:26:33:a1:
         ab:ba:8d:c0:e7:1e:30:1a:37:cd:dc:5c:55:3c:63:93:f9:bd:
         bd:11:95:87:02:a3:78:cc:d3:b6:50:bc:82:0e:eb:23:fc:56:
         92:c1:04:c1:01:3f:3f:f0:18:d6:91:64:5d:3a:c0:0a:d4:38:
         75:77:89:9f:1e:ba:11:c7:3c:fe:d7:a9:bd:29:d1:8c:e3:b1:
         84:b9:81:92:ed:0f:73:5d:9a:12:11:3b:da:14:92:8b:a5:22:
         30:17:45:11:6f:fc:8f:8d:10:f9:f0:0f:df:d4:9b:f1:89:74:
         73:6a:ac:6d:56:e4:f4:3c:58:32:a3:ab:4b:be:54:25:ba:9d:
         ed:81:c5:4e:28:61:7f:df:20:64:fa:09:31:12:a9:cd:8e:c8:
         70:07:d0:44:87:88:fe:0b:bf:b8:ff:71:46:17:2d:6d:7c:d3:
         f7:a8:d8:94:cd:e1:57:d3:b0:51:5c:9e:0a:6c:02:25:1e:ff:
         74:59:71:44:5f:60:9c:47:44:ce:45:b8:a3:be:c9:c1:f2:42:
         e9:3b:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:42:13 2026 by rpki-client