Error: rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
File:                     PQ4DaEavbVRHjAyBh8jXIjOqwco.mft (raw, json)
Hash identifier:          bdgvYKfZPYUWKNo3oyczJvmMGPPyEBKOe71mdzLIA+A=
Subject key identifier:   ED:49:E0:FE:76:C0:6A:47:E1:12:41:D5:E5:C8:79:8D:9A:4D:2C:73
Authority key identifier: 3D:0E:03:68:46:AF:6D:54:47:8C:0C:81:87:C8:D7:22:33:AA:C1:CA
Certificate issuer:       /CN=F368312FAF/serialNumber=3D0E036846AF6D54478C0C8187C8D72233AAC1CA
Certificate serial:       014C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
Manifest number:          014A
Signing time:             Mon 21 Sep 2026 05:12:33 +0000
Manifest this update:     Mon 21 Sep 2026 05:12:32 +0000
Manifest next update:     Wed 23 Sep 2026 05:12:32 +0000
Files and hashes:         1: PQ4DaEavbVRHjAyBh8jXIjOqwco.crl (hash: nMHdlMWBW5fyQVQ7pBENvuW4SUkA/2R1+BrlA5AeHio=)
                          2: 5ADD0CAEB77711F0B31C3CF2DAE4EC9C.roa (hash: XcjIzmFNzJT5kTJblhnVUYbZcRGqo4ZoGY70idy8eA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368312FAF, serialNumber=3D0E036846AF6D54478C0C8187C8D72233AAC1CA
        Validity
            Not Before: Sep 21 05:12:32 2026 GMT
            Not After : Sep 23 05:12:32 2026 GMT
        Subject: CN=6ab0bcc1-03d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:0d:d8:76:c6:d3:77:59:23:fa:24:eb:fb:
                    4e:b1:c2:b7:d1:59:d1:3c:8e:45:5d:7a:ba:a7:40:
                    8d:35:0d:43:56:2f:85:3a:8a:b3:4a:c6:e8:3a:93:
                    47:61:1d:fd:a9:dd:da:87:50:36:4c:f5:6d:eb:53:
                    e6:fa:5f:ad:9a:90:31:ed:c2:6c:eb:06:4a:0e:33:
                    0e:88:46:1f:25:80:4a:b5:b9:a0:38:27:d2:f2:da:
                    0c:d5:54:df:7c:60:cf:df:a5:34:73:33:c3:f5:e1:
                    0f:d9:ca:8c:f3:42:a2:75:0e:5f:f7:5b:bb:56:b2:
                    b9:73:ee:ac:27:60:4d:9e:e9:be:3b:3c:50:1c:9c:
                    f3:29:0c:2e:43:31:50:9d:f7:5a:64:bd:5c:37:9b:
                    a4:43:6e:12:ba:ed:d4:84:f8:6c:45:bf:3b:49:43:
                    ae:69:6c:73:56:8a:fa:75:b8:89:ab:ff:bf:7e:e4:
                    33:e0:d9:e2:4f:2e:5d:80:0a:c6:f2:55:c6:1a:1f:
                    2d:a5:8d:4b:ab:9f:18:19:96:e1:d2:18:42:0a:cb:
                    48:91:8c:d4:a1:21:bd:a1:b1:6b:b5:7a:41:19:af:
                    8c:b4:a5:81:0e:eb:b3:b7:53:12:28:76:31:44:79:
                    37:af:4a:e2:ad:53:dc:79:5c:3f:cd:2f:45:c5:9c:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:E0:FE:76:C0:6A:47:E1:12:41:D5:E5:C8:79:8D:9A:4D:2C:73
            X509v3 Authority Key Identifier:
                keyid:3D:0E:03:68:46:AF:6D:54:47:8C:0C:81:87:C8:D7:22:33:AA:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e1:d0:23:bf:9c:59:2b:69:e6:2a:36:08:93:d8:fc:62:13:
         18:42:67:52:da:6c:e5:10:1c:fb:d0:b2:2b:3b:2f:49:0e:51:
         03:66:f4:b4:41:ad:43:57:e3:92:2e:30:a3:46:6b:4b:67:99:
         a5:59:19:1e:5c:f3:7c:d8:bd:f6:be:b7:3b:0a:7a:42:33:94:
         b5:d9:8f:80:1d:63:ce:92:6f:2a:bc:e6:08:95:1f:9b:ea:fe:
         d2:ef:74:be:25:cb:b5:ad:5e:89:4e:27:ae:2a:21:b9:dd:ab:
         d2:22:9a:18:60:e7:53:f1:98:8e:49:3b:7e:90:64:c8:3f:54:
         76:ce:ee:c1:db:4e:63:40:5a:29:fb:9f:61:a7:64:2b:47:29:
         7c:12:dd:b2:99:7b:65:6d:5f:b6:e5:ad:42:df:95:6d:df:06:
         c7:40:60:45:4e:e7:51:9c:b5:63:9a:e8:49:b5:c4:fa:c5:c4:
         c1:8a:99:a4:fc:88:ba:7e:0c:1c:d3:14:3d:ab:a6:ee:1c:ae:
         2b:20:ca:ab:47:ce:07:93:e5:d4:04:63:23:6f:bc:bb:5a:ba:
         c2:9f:d4:03:8d:d4:e6:b6:f1:73:43:27:6a:b5:e5:90:77:14:
         44:e9:47:43:5e:0b:55:7d:d1:8e:15:38:f8:91:51:23:70:a0:
         4a:db:db:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:15 2026 by rpki-client