Error: rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
File:                     fsFNfEl2kNywyTPfM9amixuZKo8.mft (raw, json)
Hash identifier:          s+FI9yNS0Q88kSQl9qLeIrDkDnbhoGPstZIMIB1BgHA=
Subject key identifier:   F7:9F:43:B0:BD:EF:83:EE:CE:5E:82:68:6E:5A:8E:06:7D:58:17:7C
Authority key identifier: 7E:C1:4D:7C:49:76:90:DC:B0:C9:33:DF:33:D6:A6:8B:1B:99:2A:8F
Certificate issuer:       /CN=F367E157AF/serialNumber=7EC14D7C497690DCB0C933DF33D6A68B1B992A8F
Certificate serial:       E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
Manifest number:          E6
Signing time:             Sat 26 Sep 2026 05:27:48 +0000
Manifest this update:     Sat 26 Sep 2026 05:27:48 +0000
Manifest next update:     Mon 28 Sep 2026 05:27:48 +0000
Files and hashes:         1: fsFNfEl2kNywyTPfM9amixuZKo8.crl (hash: KoAl8ZmbCROl/nq5gH7kYZpmX3IUffiKcKu884/uOVA=)
                          2: 6810F36643F111F1823505F8CE1D38B0.roa (hash: H49ZmE70fNlQMlXanVHzm7OfawxzBuMK6YRbx0bBsww=)
                          3: CE9FEAFC29E211F19A2F7E84DAE4EC9C.roa (hash: DFioY4TtccPGtKp1xwhCK0Fw8LMx+i//Mg7FbiPkadU=)
                          4: E2AB27880B3711F191969680DAE4EC9C.roa (hash: TV2HllXtBfZyxNjiNtlEzte8OfMxx+gLKAKoslmR1is=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367E157AF, serialNumber=7EC14D7C497690DCB0C933DF33D6A68B1B992A8F
        Validity
            Not Before: Sep 26 05:27:48 2026 GMT
            Not After : Sep 28 05:27:48 2026 GMT
        Subject: CN=6ab757d4-5228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:97:f3:31:9e:8e:22:1b:77:6e:cb:3c:dc:c2:
                    d3:94:d6:cd:9c:44:d3:c1:32:2c:d1:da:6f:6b:5d:
                    e4:e7:6c:96:83:59:c3:34:8d:b4:6a:c4:b6:b4:00:
                    c3:4f:33:ea:a1:66:63:6e:99:16:8a:c9:1d:3d:0f:
                    41:83:ae:a9:9b:0e:ac:43:8a:79:3b:68:4b:f4:d6:
                    71:7a:dd:07:1d:33:86:79:f8:7e:4d:80:d0:d3:ff:
                    b6:8e:a1:c9:e7:28:90:6e:3b:05:ad:76:ac:6d:28:
                    03:63:d5:5d:0e:9e:f6:24:99:4c:a0:d9:0b:1b:8b:
                    92:64:27:ef:94:79:8a:5f:2e:c9:f8:a9:31:18:42:
                    0f:3c:cc:55:85:4d:bb:a5:56:35:90:2c:59:fb:e5:
                    f3:7f:12:c6:f3:bd:15:31:6a:df:49:12:23:c4:dc:
                    fe:20:a9:33:b9:84:40:59:49:bf:60:eb:f6:00:cd:
                    b4:a5:86:bc:b6:48:f6:40:3f:51:f5:17:40:86:66:
                    6b:5e:d9:cc:f0:09:54:54:4e:dc:5c:2b:c1:ac:ee:
                    6d:5e:82:55:5e:fc:dc:93:37:70:05:4d:7b:83:f3:
                    45:4e:cd:18:75:f9:0c:c7:1c:38:4c:04:ac:f6:c9:
                    8f:fc:31:4f:50:aa:05:cd:01:45:7f:d3:e9:15:4c:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9F:43:B0:BD:EF:83:EE:CE:5E:82:68:6E:5A:8E:06:7D:58:17:7C
            X509v3 Authority Key Identifier:
                keyid:7E:C1:4D:7C:49:76:90:DC:B0:C9:33:DF:33:D6:A6:8B:1B:99:2A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:36:1b:46:a9:23:e3:84:a3:f5:e6:09:79:bf:c7:30:5a:d2:
         47:fe:85:6d:7b:81:aa:ff:43:69:3a:41:2a:84:8e:6e:c2:e6:
         c2:a1:07:03:3e:6a:b3:90:74:86:52:90:68:fd:29:02:6a:de:
         d9:c6:44:a8:b0:ff:f0:c6:cb:aa:09:9f:b7:46:86:c8:52:9c:
         2b:79:00:0e:9e:3a:34:ff:eb:f3:19:83:4e:fb:fd:e0:c5:d7:
         9f:1b:5b:4e:6e:eb:78:bb:06:e7:59:12:51:24:9d:d8:81:e5:
         e1:30:c9:79:8e:9c:de:fb:c6:2b:68:89:fa:31:8b:3d:c4:40:
         9f:33:cf:43:67:05:0e:57:48:70:d1:ca:7e:3a:8a:4e:bf:65:
         94:b7:50:df:06:1d:44:ce:4c:a9:f9:54:a4:2a:36:5a:0a:e7:
         0b:0f:05:36:18:24:7d:7c:d2:25:d1:4e:a0:27:8f:7c:f8:7e:
         08:0b:54:d2:72:6c:58:8f:1c:8a:15:ec:c4:7b:8b:b2:b5:8b:
         c6:3c:73:ed:3e:23:5b:d6:1d:70:14:96:5c:c5:19:e9:af:8e:
         2f:b1:41:f4:34:9d:a9:99:c3:a5:40:7f:21:48:49:2e:1d:3f:
         6e:4a:d7:93:af:85:25:f3:c0:af:fb:75:0c:6f:71:7f:de:73:
         30:8c:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:05:55 2026 by rpki-client