Error: rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
File:                     dwjmbxwHwddnCuvbrhhtpCvLMMc.mft (raw, json)
Hash identifier:          n9Qvci7Dt9dAx/FY8o90iXNzJ9BJ668uaNR1bYJZeOY=
Subject key identifier:   4E:D7:29:85:C5:7E:99:42:E8:81:10:61:8B:13:A4:FF:D7:37:DE:0E
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Certificate issuer:       /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial:       02CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
Manifest number:          02AA
Signing time:             Mon 21 Sep 2026 04:42:27 +0000
Manifest this update:     Mon 21 Sep 2026 04:42:26 +0000
Manifest next update:     Wed 23 Sep 2026 04:42:26 +0000
Files and hashes:         1: dwjmbxwHwddnCuvbrhhtpCvLMMc.crl (hash: QHAOjbF3y4R3DaUcQjjI9MZ4IPijIeuCGqlThbpl/gM=)
                          2: 3F10B7A03CAC11F088C969D5DAE4EC9C.roa (hash: Sjpk4ysp1mNszx84MrVYy/vBQoLw8u4fp7N7mgOTEIQ=)
                          3: 4A4E4E98F36411EF90236562762E951A.roa (hash: wBEWNOxstUtXs1lRPFI8sqmbxPLl50bzZwGpAM/v03w=)
                          4: 8D38EA92F36411EFB4C65466762E951A.roa (hash: +EMSMJ3EYz9pXuGkf95ZpK0KIr/3eV/25E+zqK7H2d4=)
                          5: 6D9333C8F36411EFA21E3864762E951A.roa (hash: qCcMIGMPv6iLqntlPxto9IWFZxg/PkX6K91u1W/HaMo=)
                          6: 0728E8DAF35F11EFA9798CBF762E951A.roa (hash: r67qgSDZ7UK0rkKjw/6X4Z6plYnnEJR2/PdlSWRgXOE=)
                          7: 64579188F36311EF961F435D762E951A.roa (hash: ZkAad2oBHy70JS26s+e7DktMHSKgL2XdJzU4c7fdddc=)
                          8: 04466B80F36211EFB7841C54762E951A.roa (hash: k+w+Al72cOLFmLNM9M2TGC8l+4WDkBhNaHH0njxWTY4=)
                          9: 4608FD7CF36111EFB87F7D4F762E951A.roa (hash: q4VUHmXqhQLvC4tfCUsaK0VJ9DqAe9PMwDnLK46jh+k=)
                          10: 8CFF56DEF36311EF8011BE5D762E951A.roa (hash: 8VWmuQHjSKK3nmwbGTPPqeDrZfzpQRmMKrTS4U/AuaY=)
                          11: AB313988F36311EFBAC9DA5E762E951A.roa (hash: QYTpKFHcH+2F26H8AMuPN3ygS8KPNu9TR1X0KOssigQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
        Validity
            Not Before: Sep 21 04:42:26 2026 GMT
            Not After : Sep 23 04:42:26 2026 GMT
        Subject: CN=6ab0b5b3-e739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:9d:fe:f7:16:59:ee:d7:0f:da:8f:bf:b4:
                    32:e4:cd:da:d4:2a:39:1e:ab:71:4c:78:f7:e4:c3:
                    3d:8b:a6:e4:35:76:5b:41:5b:cb:9a:13:3e:d8:13:
                    57:a2:1b:3d:10:32:60:96:51:0a:19:af:d5:18:2e:
                    c2:2e:4a:40:8f:9c:bb:8a:05:12:4e:a5:03:55:3f:
                    d2:db:97:00:16:43:d8:34:d0:22:2a:fb:db:fe:98:
                    ea:c5:6b:58:a8:f4:47:41:9f:80:b0:37:61:78:8f:
                    6f:e5:a9:fc:44:bc:03:8b:e8:54:95:b7:5f:05:2a:
                    aa:79:28:06:49:0f:a0:56:d0:f8:7e:ec:57:70:d7:
                    7a:8b:3b:f7:07:e9:c3:c1:a3:82:12:5c:c5:5b:f5:
                    05:ae:2c:56:a3:cd:cf:f4:13:9a:66:f2:06:f0:74:
                    2a:41:02:4b:9d:a2:12:ff:14:ee:5a:8a:d0:69:14:
                    88:c6:04:d5:91:c7:2b:b6:c8:e5:ee:06:c3:9b:54:
                    85:e0:e3:5a:a0:c6:02:1d:24:0a:92:d1:92:b7:49:
                    d0:a2:a9:fa:54:1e:bc:ab:7a:cf:f6:6c:e2:20:32:
                    0c:68:f6:63:9b:4f:c9:8b:8b:1e:8e:ae:0b:49:0d:
                    1b:5b:7a:9f:73:59:61:bd:da:17:9b:79:92:94:5d:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D7:29:85:C5:7E:99:42:E8:81:10:61:8B:13:A4:FF:D7:37:DE:0E
            X509v3 Authority Key Identifier:
                keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:46:df:91:d2:65:55:24:9c:5c:f3:20:20:f6:7b:76:ab:7e:
         7c:94:9d:c3:cd:7d:d9:dc:67:2d:e3:ba:9b:96:56:b0:db:27:
         7a:cb:16:55:a7:d1:b4:95:1b:37:23:e3:20:22:e6:df:94:88:
         2a:bc:7a:ed:93:77:1f:89:62:96:e1:7f:20:13:69:9e:f8:00:
         75:79:7d:ba:87:54:38:cd:3d:87:fa:e7:0d:bc:e7:cf:4f:4f:
         f8:d4:38:f7:3a:fb:27:03:46:89:95:5f:14:6e:2c:56:a0:98:
         d9:13:66:45:f4:b7:42:3f:aa:0f:70:3c:b1:62:f2:44:44:18:
         1d:77:93:7e:06:27:ef:45:7e:24:72:d8:01:86:9f:59:01:f6:
         df:e7:2e:b8:a1:e9:06:dd:6b:e4:2d:b4:8e:9f:df:a0:85:d3:
         92:6a:f6:8d:92:58:57:77:33:f1:aa:f2:99:ba:ef:ce:e2:01:
         b1:70:d2:50:39:ca:8d:c0:5b:f8:d9:14:f1:3a:05:f5:7d:b7:
         2d:5f:77:a2:37:e8:24:d8:3e:f5:a1:47:7d:fc:8f:e4:94:c4:
         f5:e0:a2:2d:45:8c:60:ef:e3:73:e9:f0:dc:79:09:e6:0e:f2:
         0f:3e:d9:c6:db:f3:9f:71:80:06:59:5e:1f:fd:6e:2e:c7:9b:
         c4:ce:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:24:47 2026 by rpki-client