Error: rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
File:                     ypQWvryVa0rVjBysHB1Gn2gzUFI.mft (raw, json)
Hash identifier:          x6sISRRrtLNNhwi3mnNTEEZQ+2AuJQRDIk7fR+EkAnQ=
Subject key identifier:   86:9E:9D:E6:22:F2:82:F9:FF:00:88:26:98:ED:93:49:6A:4A:61:63
Authority key identifier: CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
Certificate issuer:       /CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Certificate serial:       0A28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
Manifest number:          0A26
Signing time:             Wed 14 Oct 2026 01:36:54 +0000
Manifest this update:     Wed 14 Oct 2026 01:36:53 +0000
Manifest next update:     Fri 16 Oct 2026 01:36:53 +0000
Files and hashes:         1: ypQWvryVa0rVjBysHB1Gn2gzUFI.crl (hash: MsyqqVDJunNfVQ7qixsRjKSZmu9xr9WXUvs+BbLp73c=)
                          2: 1AF2F83CFBFE11E992573048F8AEA228.roa (hash: oouCj0bsgLv2TuhXp8fmEvLXf8LLF9rpmnAY9E+k4nY=)
                          3: F6BF2196FC8111E9AC6A242CF8AEA228.roa (hash: Fd+NxiRRn35EHOCt2v/UUPEoB3ED4QaRhjwZJZVQOG4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 01:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2600 (0xa28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AF, serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
        Validity
            Not Before: Oct 14 01:36:53 2026 GMT
            Not After : Oct 16 01:36:53 2026 GMT
        Subject: CN=6acedcb6-5806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:61:a2:a1:0c:52:f9:8c:d6:58:e7:2c:1e:
                    a4:46:6a:6a:9d:75:7c:fe:a0:70:87:9c:dc:e8:e5:
                    88:ec:8f:b5:6d:40:ed:8e:ac:77:0d:78:13:b4:80:
                    ad:78:b2:68:b8:23:08:71:37:40:95:ed:03:ed:54:
                    4a:f0:88:93:7c:05:36:c7:20:07:18:fa:5b:ab:23:
                    32:a8:5c:e8:be:9f:c3:1c:8f:a5:d2:a7:c1:23:b1:
                    3b:a8:59:3d:4c:65:92:cf:c3:47:b5:5a:d7:0d:a4:
                    3d:ca:e7:f1:eb:5b:78:1d:0d:c4:0c:50:88:6f:e0:
                    2e:44:40:e0:32:dc:25:f5:45:65:59:95:ab:13:45:
                    a9:3f:33:aa:68:f3:35:b1:ad:c4:00:0b:3e:69:1b:
                    ce:25:7f:27:87:b3:dd:89:1e:02:4f:ae:53:62:9f:
                    79:f4:25:80:76:aa:d4:4b:0a:e8:6b:df:5f:c8:f1:
                    ea:f3:40:2d:cf:d5:8d:e4:11:6d:4d:52:84:73:7b:
                    7c:18:1a:88:c5:d9:35:fe:cd:10:4f:c2:d3:1c:03:
                    73:7c:18:c3:95:60:cb:57:61:25:be:6e:a6:cc:16:
                    10:d1:0a:d3:9e:90:7b:e8:cc:38:b6:cf:61:b1:84:
                    53:95:cf:0a:6a:5b:ff:98:73:ab:29:ed:fd:22:6f:
                    98:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9E:9D:E6:22:F2:82:F9:FF:00:88:26:98:ED:93:49:6A:4A:61:63
            X509v3 Authority Key Identifier:
                keyid:CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9f:95:15:78:94:ed:6b:bb:89:cf:09:b7:ed:2e:b3:08:e5:
         6a:91:a2:4d:a4:36:aa:d4:14:1c:ec:58:50:b0:b6:2b:af:9a:
         8f:7f:66:65:e3:85:08:53:5d:bc:47:9d:d8:41:d3:60:49:01:
         99:64:83:91:e4:61:44:4d:9c:83:46:f1:e6:8d:0f:68:69:2d:
         48:db:26:f8:58:07:fd:9e:17:0d:be:0e:dc:d5:08:fb:89:2d:
         24:87:3b:ed:c1:67:76:aa:73:3c:db:bc:ce:07:d3:6c:d2:dc:
         51:02:f0:27:f4:f0:5c:a5:64:8e:29:26:bc:1d:e1:9b:fd:27:
         cd:ee:89:9f:28:4f:0f:35:b8:01:b7:8f:12:27:f5:98:b4:0d:
         d1:76:92:30:d6:0e:bd:6c:af:48:dc:e2:7e:fd:9a:be:f3:63:
         4e:90:e9:a6:c5:06:3f:d3:f4:a2:fc:b8:3c:5f:4e:a2:10:af:
         3e:b3:c7:79:40:ed:a3:54:d5:f2:e5:4c:63:da:43:c0:a8:cb:
         56:22:e6:b5:d8:95:63:52:a0:01:30:82:0c:63:a0:8f:00:84:
         27:82:ef:17:ba:be:63:81:6b:07:c2:ce:06:4a:27:d4:85:03:
         91:e4:2d:93:7b:5c:cd:50:af:9e:25:1c:67:86:2e:b7:d6:3b:
         e2:5f:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:14:59 2026 by rpki-client