Error: rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
File:                     mHDlywkkDsWdzHR_wANn6a86DM0.mft (raw, json)
Hash identifier:          kJp1p/EmUEzLtr58gBccUMkcnTXpBIrA4/pQBMb90Mw=
Subject key identifier:   8B:96:FF:E1:7C:00:D2:9E:3B:E0:C1:69:80:0E:71:DB:B6:D9:BF:C5
Authority key identifier: 98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD
Certificate issuer:       /CN=F3692D54AF/serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
Certificate serial:       80
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
Manifest number:          7F
Signing time:             Mon 21 Sep 2026 05:38:40 +0000
Manifest this update:     Mon 21 Sep 2026 05:38:39 +0000
Manifest next update:     Wed 23 Sep 2026 05:38:39 +0000
Files and hashes:         1: mHDlywkkDsWdzHR_wANn6a86DM0.crl (hash: IWIv+9N1S8u8z8nZRrDrzwF1/iraHMjCfdTsOhyGo4o=)
                          2: 16CB630E537511F180D8AAD7CE1D38B0.roa (hash: JKBLviW+yQWqYEf8gUdXTrj2d3ebFwRg37GifKHB/Ok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D54AF, serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
        Validity
            Not Before: Sep 21 05:38:39 2026 GMT
            Not After : Sep 23 05:38:39 2026 GMT
        Subject: CN=6ab0c2e0-9695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:ab:ed:82:5d:db:9b:21:ee:06:27:75:de:
                    54:ab:0d:b0:d0:3e:c5:ba:4c:94:fe:6e:ff:2c:e9:
                    2c:ac:62:1d:95:e4:e9:0c:f8:48:f2:72:c8:b4:9e:
                    57:cd:ca:be:33:fb:58:bd:60:27:a3:02:a6:95:89:
                    60:ec:e2:ac:f2:a4:60:27:78:fd:f0:5c:8e:8c:d2:
                    40:cc:19:ff:08:a2:05:8b:3f:bf:f2:65:6f:53:68:
                    21:6b:ff:49:93:13:91:f1:17:a7:4b:89:43:e8:ef:
                    e2:ba:ab:6f:20:1f:bb:ac:ce:6e:36:13:b9:6e:98:
                    70:a7:27:1f:e4:48:da:a5:4e:61:cb:e7:bd:5a:ce:
                    23:14:76:06:0a:79:ca:fe:da:72:5d:dd:d3:27:e2:
                    ac:11:dd:df:35:1c:d9:34:ac:03:6f:5c:04:44:bc:
                    d0:c0:4a:50:56:93:1d:2f:2f:4a:78:7e:b0:fc:4f:
                    b0:24:29:2c:11:d8:da:92:0f:ba:d0:93:2d:da:8d:
                    8a:0e:13:21:ff:dd:50:09:34:51:3c:36:a5:05:11:
                    44:0c:1b:7c:ca:3c:d0:f9:00:25:47:64:02:e0:19:
                    ed:81:72:19:ed:62:be:de:08:31:02:63:ec:bf:09:
                    02:69:58:ed:c1:c1:b4:d4:50:88:44:5b:3e:de:65:
                    7b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:96:FF:E1:7C:00:D2:9E:3B:E0:C1:69:80:0E:71:DB:B6:D9:BF:C5
            X509v3 Authority Key Identifier:
                keyid:98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c2:26:4c:79:a8:7a:42:72:18:21:a4:4e:30:62:41:ed:d1:
         ea:7c:87:89:d1:5d:c2:b7:f3:ae:6a:66:ee:1f:16:c6:e1:b1:
         74:8f:f2:18:03:79:2f:c4:27:40:2a:b5:ae:ca:c3:c7:98:fc:
         9b:8e:e2:1f:51:ff:47:e7:33:ab:20:f6:fb:c3:8a:00:6d:18:
         82:73:ad:4a:5b:cb:89:af:2d:5e:4a:22:19:32:c6:00:82:12:
         90:a4:50:e2:19:eb:02:16:3b:70:00:0d:fe:25:42:af:3d:ba:
         da:e0:96:38:61:c6:71:28:b2:1e:c1:1b:18:d0:89:a3:3c:eb:
         14:88:0a:3c:0c:bf:64:18:78:12:58:9b:d1:e1:f3:d3:d3:86:
         ff:2a:d7:0a:60:26:20:d7:c8:c1:ca:b3:37:e0:63:2b:b6:de:
         79:cc:ec:32:df:20:78:d2:54:a8:ae:40:a4:e0:5c:0a:b4:c7:
         e7:45:1e:63:5a:78:2f:82:c4:f6:15:b4:9c:46:6e:74:fd:ac:
         29:01:57:c0:e4:0d:f0:0a:64:eb:af:bb:7c:d5:06:e0:52:2f:
         e8:17:da:15:69:05:82:45:ee:16:d0:21:b8:d3:6d:75:62:fb:
         55:f7:d6:fc:31:77:be:b8:87:1c:03:44:8c:0c:d2:63:4c:5e:
         7f:57:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:25:06 2026 by rpki-client