Error: rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
File:                     saGqcslle0DmFrw3PhPPk7Ip6z8.mft (raw, json)
Hash identifier:          HvN7ZbKqalRak8bEetmG2ewrsWxSImN1REAaEt/snsE=
Subject key identifier:   B9:25:F3:96:96:88:80:70:D7:B2:5E:5B:B8:3A:C7:6D:10:75:46:9F
Authority key identifier: B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
Certificate issuer:       /CN=F366372CAF/serialNumber=B1A1AA72C9657B40E616BC373E13CF93B229EB3F
Certificate serial:       05B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
Manifest number:          05AD
Signing time:             Tue 22 Sep 2026 03:04:57 +0000
Manifest this update:     Tue 22 Sep 2026 03:04:57 +0000
Manifest next update:     Thu 24 Sep 2026 03:04:57 +0000
Files and hashes:         1: saGqcslle0DmFrw3PhPPk7Ip6z8.crl (hash: ZAKv+pv458p44V9uMb91WTrwKki0nKC8EZ4BljUkHXE=)
                          2: 54123DD05A7511F1BEE07500CF1D38B0.roa (hash: agUhsxbceYAgEjDMarWNdbAMdWHcVAaS4JBpKOGvE4A=)
                          3: 95AFAC66427711F184D9F8FACE1D38B0.roa (hash: 0vUwbMIiWuntX3tsjOeOoDZZ0A9t4Qs6SQHIOpOvD/U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366372CAF, serialNumber=B1A1AA72C9657B40E616BC373E13CF93B229EB3F
        Validity
            Not Before: Sep 22 03:04:57 2026 GMT
            Not After : Sep 24 03:04:57 2026 GMT
        Subject: CN=6ab1f059-4d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:f8:b7:4c:07:4d:83:0d:a0:85:7b:78:d1:
                    60:c1:af:06:5c:d3:2d:17:f0:ad:94:40:90:c7:e5:
                    2a:0c:68:f6:d3:93:20:a1:aa:1c:39:27:ae:6b:cd:
                    8c:1b:60:95:8e:b9:c9:c7:34:3d:2e:ad:82:80:1d:
                    d0:e4:e2:a8:fb:36:ca:a7:aa:d5:38:c2:ae:48:24:
                    7f:44:9f:e0:6d:59:11:5b:75:3c:9f:42:63:32:3d:
                    82:68:c3:79:e8:20:04:80:8c:70:e1:98:73:7f:42:
                    21:4c:d7:24:be:26:ca:fb:37:23:76:95:cd:a4:39:
                    b3:16:51:d2:6d:c6:9a:d9:9d:f4:4c:c0:8e:e1:7e:
                    3c:5b:cc:58:b7:0b:8b:30:53:7f:2b:d4:4a:4a:15:
                    70:25:c8:82:16:c3:fb:2c:1a:33:4c:83:bf:04:cf:
                    3f:a1:7e:f9:76:1e:6a:de:df:0d:64:96:5a:73:94:
                    fa:f0:0b:a8:98:fb:51:ae:27:61:68:f2:d1:e9:8b:
                    32:87:09:2c:f5:38:7f:0c:54:d3:8e:d7:40:21:86:
                    27:cf:5c:f3:bb:74:e3:7e:ab:f0:3a:bd:21:3b:73:
                    46:9c:a9:e1:f0:21:4c:4b:f4:18:a4:38:94:b3:d1:
                    d9:99:7a:cf:ee:97:79:35:1a:d6:ec:de:9c:4a:06:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:25:F3:96:96:88:80:70:D7:B2:5E:5B:B8:3A:C7:6D:10:75:46:9F
            X509v3 Authority Key Identifier:
                keyid:B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:57:89:78:19:fd:b8:bc:af:34:e1:a7:6a:d9:7a:ac:60:
         d5:51:8b:ed:cb:da:5e:df:cf:73:c5:63:9a:c7:12:48:45:b0:
         73:ed:db:1c:92:79:63:66:33:e6:47:30:b9:61:22:3c:54:d7:
         49:ed:ad:66:01:e6:66:fc:2b:24:a6:d0:a9:73:55:ff:2a:fc:
         93:f1:cd:de:a1:22:df:52:71:fb:81:ef:f5:c6:8f:55:fd:93:
         0f:14:68:5c:28:e6:a4:cf:c3:a3:85:a3:55:12:3c:e2:ce:51:
         52:d6:f0:b3:62:df:b0:ac:c3:af:ee:f4:39:0a:76:8c:ec:5a:
         0c:c5:eb:23:a3:14:33:58:33:77:86:a4:39:90:36:06:c1:10:
         79:29:94:4a:6a:a8:47:95:35:c4:73:84:9f:a8:06:24:df:14:
         17:1c:f8:70:c4:be:57:3d:da:4f:59:2a:53:95:e9:e4:ab:02:
         9f:f3:9b:17:90:ab:13:4b:34:7a:93:23:aa:a8:41:7a:5c:c4:
         6b:ef:45:6d:30:31:fe:ba:42:68:d5:57:94:ef:52:04:c0:ad:
         5d:ab:6b:c4:03:bb:7f:61:18:fd:d3:3f:3f:00:19:b8:4c:f5:
         ea:5a:e5:c1:12:96:ec:c7:8c:43:09:d0:61:6d:55:33:68:5e:
         23:63:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:37:07 2026 by rpki-client