Error: rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
File:                     G0qwtyDYObeamJIyOw-r7ZZwWqI.mft (raw, json)
Hash identifier:          w9NYyRsIdhbjCebSthQKlU+FX6jbF4hSMRgyMCMXxwQ=
Subject key identifier:   53:56:39:7E:CC:45:4B:90:F2:CB:4C:3C:62:09:B5:F4:0B:33:7E:F5
Authority key identifier: 1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Certificate issuer:       /CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Certificate serial:       0616
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
Manifest number:          0610
Signing time:             Sun 11 Oct 2026 02:56:13 +0000
Manifest this update:     Sun 11 Oct 2026 02:56:12 +0000
Manifest next update:     Tue 13 Oct 2026 02:56:12 +0000
Files and hashes:         1: G0qwtyDYObeamJIyOw-r7ZZwWqI.crl (hash: OhmMAYHfngEyO0OKPfFOB7NHcV7wipTvkrLAHw5P0d0=)
                          2: D9ED8CAC6EB311EF96086184762E951A.roa (hash: 6w3a+eg92q7dxLHTR3vq9vXUwlds4W9m99UG/J3eEsM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367426AAF, serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
        Validity
            Not Before: Oct 11 02:56:12 2026 GMT
            Not After : Oct 13 02:56:12 2026 GMT
        Subject: CN=6acafacc-bf03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:75:80:be:d4:84:10:18:11:5c:da:22:18:
                    b7:81:54:a3:72:35:2f:ae:1f:6b:c4:e4:01:17:b9:
                    63:95:a3:26:99:42:0b:83:54:3c:6d:0d:0c:10:ab:
                    98:12:17:bc:76:d9:ee:b0:39:3d:61:1a:e4:87:1d:
                    01:9c:48:a6:3e:72:e8:a0:b3:ad:c6:11:83:8d:04:
                    f8:07:85:fb:e5:55:d0:70:a0:d7:a3:10:d3:c7:25:
                    43:e1:a9:ce:f2:95:88:f0:25:d8:e0:7a:60:00:72:
                    ab:af:ec:28:0b:52:bc:a4:32:4f:f2:2a:6c:5b:56:
                    b9:8a:c7:83:38:34:f8:9e:ff:f7:8c:27:e6:ac:84:
                    6f:45:c1:e7:68:67:95:9e:83:62:ce:b7:9e:bb:02:
                    a6:86:22:f0:e9:fa:c1:30:74:bb:a5:2e:82:be:8a:
                    72:44:98:b6:c2:87:49:1b:98:bd:c6:3e:7f:a7:29:
                    03:c9:4e:bd:4a:8e:69:fb:81:55:ce:07:9b:0e:51:
                    a7:87:f5:82:da:11:f4:3f:a4:d9:c1:0a:6b:c1:81:
                    0f:04:5d:06:1d:02:8d:cb:a6:5b:0d:3b:dc:f0:52:
                    a7:84:3e:1f:b8:71:1c:22:43:b0:3b:f0:44:c7:fd:
                    50:73:7b:9d:81:92:0d:ec:8f:27:a6:ee:a2:c9:33:
                    88:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:56:39:7E:CC:45:4B:90:F2:CB:4C:3C:62:09:B5:F4:0B:33:7E:F5
            X509v3 Authority Key Identifier:
                keyid:1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:63:0b:94:a6:6c:c0:41:eb:50:2d:b9:27:65:f0:1d:77:cb:
         35:14:9e:89:ae:89:4f:20:18:e0:91:1c:34:dc:27:70:66:fb:
         37:99:1c:17:53:75:51:4d:8c:c0:e5:49:31:1d:f6:d7:a3:3e:
         f0:7e:e2:5d:e9:a6:70:e4:63:7d:2d:96:56:f9:82:26:7b:f1:
         b8:dc:11:2b:b6:a3:0d:06:97:96:3f:94:89:72:75:67:c8:06:
         df:fa:4e:41:a8:33:a7:49:50:2f:6e:12:32:a4:94:c8:ed:a8:
         cb:25:65:dd:63:db:bc:bf:66:68:85:cc:23:c9:77:9c:73:f1:
         50:0d:cd:68:78:9f:14:3e:47:66:59:13:a2:75:8d:d9:5f:a9:
         d6:38:d3:53:e2:34:89:2a:0a:12:9e:b1:5a:b7:85:28:df:96:
         dc:23:e2:32:5b:e3:8b:40:14:4c:2f:a3:e4:b8:fa:70:54:5d:
         e4:eb:3b:a1:7b:42:24:3c:e6:65:99:f7:d1:56:bf:ea:2f:b3:
         d4:68:d9:f9:da:8a:63:69:d6:d8:77:fe:32:94:11:d0:6a:28:
         cf:02:d6:a7:84:95:67:e7:6b:75:97:13:46:d5:59:14:e8:c9:
         20:80:82:16:d8:9e:43:2c:5a:67:fe:92:54:3a:a2:58:e2:f7:
         df:fb:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:33:45 2026 by rpki-client