Error: rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
File:                     Wo8buWCAiFj8QkqfycBtSBLbpck.mft (raw, json)
Hash identifier:          8EAYbCPkpm/BL2ZqhTRPNAvN4bXSW+JxIm46ZshW2+w=
Subject key identifier:   B9:4D:DE:14:B8:0C:F8:AA:44:31:9B:74:DF:EC:19:52:6B:38:E3:69
Authority key identifier: 5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
Certificate issuer:       /CN=F3674376AF/serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Certificate serial:       0192
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
Manifest number:          0186
Signing time:             Tue 13 Oct 2026 05:11:57 +0000
Manifest this update:     Tue 13 Oct 2026 05:11:57 +0000
Manifest next update:     Thu 15 Oct 2026 05:11:57 +0000
Files and hashes:         1: Wo8buWCAiFj8QkqfycBtSBLbpck.crl (hash: XgZ4NZtwrsdT/zTvikMaWhAtlXW+et4C42EH/k0UCR0=)
                          2: 6BB0CB74A5A711F088912BE0DAE4EC9C.roa (hash: kB1JbNoc3dBbzjmuhT2h2aENGY9tktmvJCxAT5G6HGQ=)
                          3: 348ADDB6DD0A11F0BC9CCCBBDAE4EC9C.roa (hash: N22acFSQsXyjxhKorUA5XDVJ5jLIt1Un/EsFZoIoznw=)
                          4: C684B0C2DD0811F081D755B3DAE4EC9C.roa (hash: YKBW7tCBuCKn9NrFC1UoBGi4Bbn0t6tjegBFUHs2asc=)
                          5: C12F71DCA5A611F0BB0100DCDAE4EC9C.roa (hash: w1R/Z75m4LwLFTF/R9uWaQzBzmjS2340Mo7wnJRbDMU=)
                          6: 8C8563DCA5A711F094950AE4DAE4EC9C.roa (hash: uGJxn0kxFVH+xnXPU0sjbovtNrHfisJTKGGgqWfUSLs=)
                          7: 4C01EE48A5A711F0986AEDDFDAE4EC9C.roa (hash: A7s5OPs1SpF17uQimMrgNTFUslRSjoE44d+zkAoaVyc=)
                          8: 24DDD1C4A5A711F09981CADFDAE4EC9C.roa (hash: VMl5oou874hFWogxEQIYM0u11ETAx2cwP1WKWFliKgk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 05:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674376AF, serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
        Validity
            Not Before: Oct 13 05:11:57 2026 GMT
            Not After : Oct 15 05:11:57 2026 GMT
        Subject: CN=6acdbd9d-0b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:36:55:26:b7:3b:05:80:7a:04:01:8e:2e:89:
                    18:ce:b0:f7:bf:36:b9:4f:95:88:48:dc:28:9e:dc:
                    88:0a:cf:7a:5e:e2:60:3a:0b:09:e9:81:26:40:44:
                    88:cb:e2:f8:74:9c:6f:e8:78:d7:ce:39:f5:b4:7a:
                    b0:c8:34:de:b0:0a:3e:98:b8:90:58:08:18:da:a2:
                    4a:ef:0d:41:31:53:c3:a8:e9:f1:70:db:36:86:76:
                    51:6b:7a:06:b7:51:c6:86:57:6a:ce:40:d2:05:10:
                    9d:c2:01:87:65:63:70:73:2a:49:28:3a:87:2c:3a:
                    33:97:a6:ab:05:7b:f8:29:e7:d7:23:6d:47:a8:1d:
                    84:86:7e:8d:fe:c4:29:4a:a8:6b:2f:a2:4a:59:ef:
                    0f:ab:f5:9d:35:91:14:66:fb:09:0d:c8:b9:63:f0:
                    96:e9:c0:1a:69:1e:21:51:36:82:a7:ac:93:bf:75:
                    bd:23:bf:8e:17:e4:6f:0e:b5:23:df:13:d9:47:58:
                    8c:05:43:36:3f:51:c8:d1:b0:43:39:81:b0:25:dd:
                    88:61:a9:69:26:53:9b:1f:26:23:ef:20:bf:3d:19:
                    74:be:9a:4c:d7:e4:11:72:70:be:a2:60:42:b6:4c:
                    94:4f:df:e3:1c:88:46:11:89:bd:c4:48:73:f7:38:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4D:DE:14:B8:0C:F8:AA:44:31:9B:74:DF:EC:19:52:6B:38:E3:69
            X509v3 Authority Key Identifier:
                keyid:5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:3b:03:a8:ca:2f:4e:66:4d:0c:ff:fb:d1:4b:b6:7b:23:
         00:ce:1a:75:f5:f4:30:93:d4:62:ab:22:e2:29:79:9c:ed:8e:
         31:4d:72:de:d3:5d:e3:db:ac:2d:d2:89:b8:a1:25:cc:9e:e9:
         80:a1:bf:00:56:b7:be:3e:eb:84:12:99:a8:a7:20:ec:1d:73:
         5e:b1:eb:ad:5a:21:8d:d5:1d:43:21:ca:cc:f7:a1:c7:29:d5:
         3b:a8:fe:81:10:21:79:0d:d8:66:80:c5:27:56:c0:c7:61:95:
         ad:f5:7b:45:f0:ee:8c:ee:89:49:33:03:0a:b7:97:75:60:30:
         ef:9a:c2:08:8c:95:a1:f0:45:4f:82:b4:74:b8:15:18:76:f1:
         fa:cc:8a:79:c2:28:16:56:b0:81:bb:dc:6c:c9:da:f9:35:66:
         2b:f2:50:d8:58:25:67:b6:5c:52:44:37:e4:2d:80:55:75:ef:
         69:98:54:dd:6c:81:57:fe:ba:3c:6d:75:0b:db:79:87:db:53:
         a3:8f:a4:41:d8:f0:5f:5f:f6:98:8e:29:b8:99:1b:b3:a8:fe:
         77:16:61:bc:f1:9c:e9:1c:2e:48:05:b0:d5:3b:18:38:e2:89:
         3f:90:40:b0:b2:27:c8:a4:38:20:90:07:d0:40:99:67:9a:6d:
         ec:0b:53:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:05:08 2026 by rpki-client