Error: rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File:                     0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier:          PLIFNck/9F2BqaZKglERA4H0t4bz8U45kVUKVGPPBvA=
Subject key identifier:   C5:90:8F:CC:24:DD:76:27:79:E4:7A:A6:F7:AC:D1:01:C9:DD:32:0B
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       076C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number:          0765
Signing time:             Mon 12 Oct 2026 02:26:05 +0000
Manifest this update:     Mon 12 Oct 2026 02:26:04 +0000
Manifest next update:     Wed 14 Oct 2026 02:26:04 +0000
Files and hashes:         1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: xNTHtr/hWo04AkjSeQl/sjvanqc6VNH8tpY73/W/Tbg=)
                          2: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
                          3: 9E1E04DAC42A11F195A36CD8CE1D38B0.roa (hash: N2Ari3VqP125GfUVmY/HdUpQCynCdIpetGzSelUfNiY=)
                          4: FACAEE98703B11F186502B13CF1D38B0.roa (hash: +atnFyNmkEsaCKX9Ro0ZZNx+4LrHBs/bVM1erUMfE6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 02:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: Oct 12 02:26:04 2026 GMT
            Not After : Oct 14 02:26:04 2026 GMT
        Subject: CN=6acc453d-ad9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:ba:f6:bf:ab:a8:3a:9a:69:c9:18:bb:80:
                    eb:44:29:25:2a:06:1f:a7:fe:93:70:69:84:ee:dd:
                    ee:21:db:8e:b6:e1:75:3d:f3:af:16:ed:d5:46:eb:
                    21:7f:5b:0e:dc:cd:03:34:af:ef:0d:6e:36:a9:4f:
                    62:7e:1e:8e:64:9b:50:1d:78:ca:03:76:9f:5f:c7:
                    37:6a:5f:23:ef:b8:e1:f1:3a:3b:9d:85:73:b8:9c:
                    b4:5b:7e:8f:ee:16:ce:5d:3a:02:f6:88:a2:69:25:
                    f6:ee:13:25:14:cb:8d:11:e4:c5:47:5b:4a:c2:a2:
                    73:a6:b2:28:d9:06:65:63:24:89:c0:3f:d2:7c:c5:
                    3a:7b:6d:2e:3b:ee:10:cd:68:5d:44:85:7b:0b:f1:
                    7c:b9:38:81:9b:12:bf:a0:b6:b6:1b:eb:7c:60:ce:
                    a1:f7:1c:45:4f:5d:80:a8:60:80:4a:2b:f5:19:f9:
                    54:29:7d:fd:06:86:9c:56:d8:3d:6d:ac:64:e4:2c:
                    57:58:31:75:ee:1d:85:ae:4b:a3:42:c5:0d:28:b5:
                    69:78:b8:37:1f:2f:30:e9:1e:50:d1:0c:bf:b0:f6:
                    e5:eb:bf:ae:2a:3d:27:d4:1f:38:5b:65:8b:e6:d4:
                    27:52:a5:a5:75:fe:d6:eb:6c:e3:22:ed:b9:50:b5:
                    53:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:90:8F:CC:24:DD:76:27:79:E4:7A:A6:F7:AC:D1:01:C9:DD:32:0B
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:65:8b:05:56:f9:f7:7c:84:b9:9f:a7:9d:e9:51:c1:2e:d5:
         a1:63:88:e6:a4:3e:29:91:91:8c:05:37:f8:24:1a:82:cd:87:
         6b:ef:07:04:1e:61:ee:21:b4:28:17:f1:f4:89:89:76:7e:8f:
         c7:77:32:2d:35:59:54:5f:f9:a2:bd:9a:fb:88:3e:a0:30:e6:
         28:cc:b2:60:61:41:d6:7c:a5:b7:97:cb:8d:c1:1e:a3:e0:ca:
         35:9e:ca:43:dd:81:7a:c3:f6:6e:28:bd:c8:4f:e0:fa:e7:d2:
         a3:04:4c:77:f4:66:7f:34:55:01:dd:36:8e:86:88:80:a8:86:
         ee:7b:2e:e7:25:87:b7:58:62:74:d3:01:74:d3:e8:bc:23:5b:
         22:38:ba:b0:47:85:92:f1:03:d1:7f:a2:d7:97:eb:bd:1f:e3:
         15:b6:54:ce:1c:c8:49:c4:a2:98:95:b2:f1:c3:bb:b4:d5:55:
         b5:c4:1c:8a:a8:a2:b4:d9:4b:1f:5e:89:70:c9:af:0b:8b:33:
         bb:8e:79:fa:15:83:84:a0:93:c9:32:90:5d:50:67:64:f4:57:
         fc:39:68:3d:4f:6c:5f:35:5a:98:ff:e3:b8:c7:82:4d:5c:b9:
         18:d2:40:51:2b:b7:e6:18:47:bd:f4:b0:3e:36:4c:bb:f2:a4:
         f9:17:39:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:48:56 2026 by rpki-client