Error: rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
File:                     PTg51e4dl7STFVYoMdygQJMxSB8.mft (raw, json)
Hash identifier:          FyiVUXyVz1WIJwS9hkVUjx/bIV0PsmnruEayJJ8XJYE=
Subject key identifier:   F3:24:C4:C4:57:17:7B:B2:DD:AF:BE:79:D0:D0:EA:04:E7:8F:59:B8
Authority key identifier: 3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F
Certificate issuer:       /CN=F36763E5AF/serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
Certificate serial:       0A49
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
Manifest number:          0A39
Signing time:             Sun 04 Oct 2026 01:36:49 +0000
Manifest this update:     Sun 04 Oct 2026 01:36:49 +0000
Manifest next update:     Tue 06 Oct 2026 01:36:49 +0000
Files and hashes:         1: PTg51e4dl7STFVYoMdygQJMxSB8.crl (hash: j7+9aVJSLgmaavhVY/BQKp/X7mjn2KjVPbZXpt6RW5M=)
                          2: EBE9D8E4002911F1B948E098DAE4EC9C.roa (hash: A27M1xspmH5ryATJrqn4YiVO/fe+mYlUQpMbMsLJvnw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 01:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2633 (0xa49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36763E5AF, serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
        Validity
            Not Before: Oct  4 01:36:49 2026 GMT
            Not After : Oct  6 01:36:49 2026 GMT
        Subject: CN=6ac1adb1-0fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:02:01:7d:b3:1f:da:b7:d3:19:16:2b:7f:
                    97:42:24:08:32:80:f6:dd:ab:5e:77:8c:bc:cf:c9:
                    09:1d:f6:e2:41:ab:bb:78:e0:c2:bd:a0:df:50:43:
                    b3:1e:ed:03:d5:17:b0:ae:84:d8:f9:ce:ff:93:5e:
                    4b:b6:9a:ee:48:74:23:1d:0d:2f:be:3d:16:ae:3d:
                    59:24:7c:e0:e0:b5:b5:7d:c4:6c:9e:37:d0:95:09:
                    d5:7b:44:df:fb:00:ea:6f:69:21:d1:8e:76:6f:42:
                    ca:7f:48:f8:60:41:2b:d8:9f:5e:b2:5f:05:7e:c2:
                    1c:7a:86:1e:e9:5c:01:d3:c7:99:22:14:ea:63:a6:
                    ed:14:ac:3a:ef:d4:97:b8:ec:d6:57:84:9c:7b:0e:
                    b1:fb:f0:1b:61:f3:ff:08:21:8a:d3:43:0b:2b:e6:
                    a0:6a:06:54:27:40:d1:f2:05:5e:2a:8e:ca:21:9b:
                    b8:68:59:6f:97:41:e5:f0:91:59:bd:9c:ad:04:d7:
                    cd:67:80:c2:bb:bb:ad:e3:4b:e9:d7:2d:4c:81:df:
                    b2:53:d6:36:6a:c8:6e:d5:19:50:ea:86:03:55:f9:
                    6b:3a:0e:67:d4:46:1c:c5:5d:11:68:61:5a:cf:94:
                    f0:65:77:21:2e:05:da:3b:28:9f:5a:3b:15:e7:90:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:C4:C4:57:17:7B:B2:DD:AF:BE:79:D0:D0:EA:04:E7:8F:59:B8
            X509v3 Authority Key Identifier:
                keyid:3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:dd:5d:91:42:7f:78:b6:12:ad:c1:c7:cb:9a:4e:00:09:24:
         74:2e:14:fe:a7:79:f1:d9:ca:3d:f3:a1:f7:9b:1d:2c:73:ff:
         8d:f0:ac:8f:b5:66:49:91:41:4b:21:01:19:8c:d9:07:42:91:
         67:17:ac:c3:02:9a:90:b1:e0:25:3e:06:9c:26:c5:9d:0e:20:
         7e:f4:fa:39:3c:ff:98:86:33:f4:64:8c:7f:ff:fe:db:ef:92:
         93:d7:44:b5:7d:54:89:47:38:e6:60:4e:05:0f:9e:57:de:b2:
         be:16:a4:41:39:ee:b6:ca:c5:81:4a:dc:59:d8:44:53:1c:c6:
         92:06:37:73:3b:f4:9a:bb:f9:be:4d:9b:ad:4f:b0:8d:d3:9c:
         8b:d3:7d:5d:f2:5a:60:05:67:db:8a:8d:f7:4a:bb:1c:72:ee:
         44:59:52:02:71:b6:e8:f1:5d:a4:f8:8f:0f:85:5c:a2:97:20:
         44:12:92:61:3b:37:22:ed:d1:8c:f5:81:64:f5:f4:b8:b5:7f:
         0f:08:f9:0f:1a:cb:85:60:e8:0e:74:91:51:fc:b4:08:48:d1:
         0f:52:15:c4:7e:90:6d:51:35:f8:19:cf:44:e0:74:73:b9:69:
         1f:12:f9:7b:7a:a3:dc:00:0f:8d:2e:bf:81:c3:6a:bd:ab:ef:
         45:3f:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:53:14 2026 by rpki-client