Error: rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier:          tRrJCyYmZXx3R9v2SSuGPyeptfRwsFBrXnMiwVYefCY=
Subject key identifier:   3B:DF:3F:95:8F:6D:3D:43:44:A8:A1:2F:EC:BB:3B:94:0B:8B:DB:1D
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer:       /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial:       087C
Authority info access:    rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number:          0879
Signing time:             Sun 11 Oct 2026 02:03:19 +0000
Manifest this update:     Sun 11 Oct 2026 02:03:18 +0000
Manifest next update:     Tue 13 Oct 2026 02:03:18 +0000
Files and hashes:         1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: kVCCwOl/+XIBKRB7+W+tf+JadH+bxVDX5I9sLTDlwmU=)
                          2: 3D93A998876811F18427031ECF1D38B0.roa (hash: ED++UQzskmFMrBOiAcPQY8inrGju/ayfk7tJLhTNd6I=)
                          3: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                          rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
        Validity
            Not Before: Oct 11 02:03:18 2026 GMT
            Not After : Oct 13 02:03:18 2026 GMT
        Subject: CN=6acaee67-cf45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:c4:87:8e:3c:90:a0:0d:25:c7:a8:47:c2:
                    7d:33:8b:b8:40:f6:4f:87:b7:a7:e7:9e:a0:f5:79:
                    7f:79:74:57:1f:17:92:fb:12:8a:66:45:27:40:c3:
                    9d:e3:35:8a:6e:9c:64:f9:d6:ad:60:08:15:d7:37:
                    cc:c3:ec:02:86:09:e1:a6:32:3e:c5:40:fe:f6:0f:
                    15:6e:65:ef:0b:8d:3b:8d:2d:3b:df:eb:a3:c2:f4:
                    4d:f7:6c:f6:24:60:2e:90:18:23:8e:a2:0c:7e:5a:
                    6b:69:52:a4:1b:88:e9:9e:74:e2:4d:a6:4f:9f:55:
                    75:d3:c7:38:80:14:fc:f5:4d:62:32:11:41:3f:a4:
                    0a:9c:ff:0e:f3:85:c4:2b:9f:c9:1e:51:0a:29:50:
                    08:8a:38:08:62:ef:dc:43:79:e9:98:46:db:83:c1:
                    17:5a:48:4e:df:07:78:cc:a8:38:d6:72:e9:17:09:
                    4c:a4:c7:bc:a2:64:7b:48:9d:fe:a4:74:4b:35:48:
                    1e:a1:d9:d1:5a:01:35:5b:4d:66:12:53:25:c5:c2:
                    50:63:89:09:d4:a1:e2:4a:e4:cb:b7:4d:f7:18:69:
                    bb:b7:85:43:3c:ca:ec:7d:7e:b3:4a:f7:77:f1:32:
                    33:33:cc:d4:56:0a:81:0d:f1:50:fa:33:58:5e:fa:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DF:3F:95:8F:6D:3D:43:44:A8:A1:2F:EC:BB:3B:94:0B:8B:DB:1D
            X509v3 Authority Key Identifier:
                keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e8:6b:c5:5e:49:d4:10:99:6b:3e:a6:18:fe:6b:8b:94:35:
         32:f0:f5:09:90:43:4b:a3:a2:9a:eb:30:7c:2b:d7:6d:73:f1:
         30:02:42:57:4b:4c:15:66:0e:f8:14:fc:2c:d8:c8:c9:2f:d1:
         82:9e:3d:c1:40:5e:79:3b:c7:5d:75:79:4c:e5:e8:68:1f:78:
         21:f2:1f:f9:bc:3c:17:18:9c:4f:7a:f7:3c:38:18:cd:b0:e0:
         51:e9:75:2c:4b:26:de:6f:c7:9e:03:3f:3a:d9:9d:f2:c1:52:
         f9:1b:fc:9e:12:80:58:cd:47:07:9f:d8:db:bd:78:6b:22:70:
         8c:8b:11:68:39:a2:f9:da:55:5d:00:45:74:40:1e:49:7e:cc:
         32:ba:56:06:9e:79:67:48:00:cd:bf:76:ed:43:77:35:f6:f5:
         86:e4:df:e6:ee:c6:05:e4:c9:af:9b:44:70:75:b1:5c:22:31:
         3c:3c:6f:4f:ae:6c:df:10:d0:6e:9a:d3:15:ea:ec:45:8a:a6:
         5c:fd:6d:9c:ae:50:c2:b2:1c:28:1d:d4:4b:ba:00:89:d9:8a:
         4e:ab:08:74:74:96:85:11:81:b8:b0:f8:41:d5:60:35:5d:3c:
         91:40:6c:bb:39:dd:0a:cc:6d:b7:f2:80:2b:cc:61:d5:68:e0:
         f2:b9:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:02:55 2026 by rpki-client