Error: rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
File:                     5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft (raw, json)
Hash identifier:          8ZAd5ZMMR1hncilNWlhCBYuESLCpHsGWwWaBqNbw2bo=
Subject key identifier:   8B:28:9B:E6:4E:C5:27:F1:A7:B9:88:1B:33:45:B5:FB:15:0A:66:9A
Authority key identifier: E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
Certificate issuer:       /CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Certificate serial:       0304
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
Manifest number:          02FF
Signing time:             Tue 13 Oct 2026 04:34:20 +0000
Manifest this update:     Tue 13 Oct 2026 04:34:19 +0000
Manifest next update:     Thu 15 Oct 2026 04:34:19 +0000
Files and hashes:         1: 5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl (hash: hh9wF+KHUR3XFv476epZ58ZGMo8raBq8V+1xxRlL2uk=)
                          2: 38A77FC2AB6311F0B45696BFDAE4EC9C.roa (hash: LBPNAWAAVOPpk8TQQA7s5/xN6Mn1ttafqGNGLr5LoZY=)
                          3: 23D8DB56F78311F0BA13BBE1DAE4EC9C.roa (hash: RiaEDImgDKuhgGwAhXll6hcFon0UmnVQwiXDGntrwvQ=)
                          4: 74DC1AE2C46511EF85B5237D762E951A.roa (hash: CJ5E2+hEe+/wSXFMNEijdHv/KTZ0Hf60OfkqPWnXEi4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695083AF, serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
        Validity
            Not Before: Oct 13 04:34:19 2026 GMT
            Not After : Oct 15 04:34:19 2026 GMT
        Subject: CN=6acdb4cc-6c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:df:ed:a9:dc:23:dd:5e:c1:91:3b:46:68:22:
                    e5:ae:f1:a2:d8:ac:1a:95:5d:cc:64:d4:fe:a3:e2:
                    cb:de:0a:8d:ad:57:f7:94:2a:6a:ee:ac:e2:8f:4c:
                    79:3d:3b:2d:7f:16:36:43:9d:38:e5:89:55:e9:7e:
                    fe:29:8a:02:87:53:01:a6:ea:71:bb:05:66:b6:21:
                    14:30:ab:14:0b:81:66:0e:4f:30:f7:79:e2:47:61:
                    6d:c9:a3:4d:e9:e2:92:6c:0f:e0:db:49:6d:06:9c:
                    f0:6a:72:45:dd:76:25:2d:19:a8:9a:e2:57:63:4a:
                    c3:c3:4c:ad:5e:ca:01:3e:48:13:3a:68:95:b6:09:
                    b6:2f:10:8c:cc:95:01:cf:62:20:cd:b3:97:54:4c:
                    87:08:33:bc:e0:e9:77:87:19:9f:94:24:0d:30:47:
                    d5:40:04:eb:58:0a:92:84:9b:48:67:f3:1f:5c:a3:
                    b3:f3:06:3f:91:a3:bf:5e:d9:f9:a5:1d:a2:2a:73:
                    a0:a8:4c:dd:f5:9f:db:88:f9:f9:eb:96:a8:0a:ea:
                    a5:bf:61:b7:71:75:f9:50:8d:a6:6c:00:b7:7f:01:
                    b8:4d:ca:67:34:0f:c7:84:7c:74:4a:9e:86:31:ae:
                    76:54:f6:53:78:88:83:4b:62:41:ad:fc:07:a0:bd:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:28:9B:E6:4E:C5:27:F1:A7:B9:88:1B:33:45:B5:FB:15:0A:66:9A
            X509v3 Authority Key Identifier:
                keyid:E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:9b:c6:87:9d:73:3f:17:f8:b8:e6:8d:4a:f0:3f:0f:4a:
         29:74:8b:04:c9:cd:69:c3:eb:89:30:4b:32:68:18:ff:79:00:
         4a:d2:53:67:1b:80:d7:6f:77:f8:9f:53:17:58:d6:d2:aa:5b:
         0a:0a:73:03:d9:27:62:70:5c:7b:67:1a:e5:a0:80:ea:8f:3f:
         5c:54:8d:4e:7f:9a:0b:91:30:ce:f4:dd:de:c3:a7:93:78:0e:
         e2:07:bd:62:50:a5:56:af:30:6b:58:95:46:4a:2e:bf:d2:3b:
         7a:33:8d:17:95:a0:06:43:e4:62:3e:cf:11:00:4e:16:ac:0c:
         88:fa:c6:36:30:b5:23:14:8a:17:ea:ae:24:21:9c:e7:e2:80:
         a5:26:92:16:86:1c:e1:58:8d:89:e7:f1:bb:8f:a5:4e:1a:ad:
         80:53:ae:74:52:67:10:19:d4:a2:57:e4:53:9f:e9:71:3e:cd:
         7b:6b:b1:8b:27:49:d7:82:55:3e:fb:ea:24:22:e1:86:7c:4a:
         b7:b8:ba:9b:b8:54:90:5f:7b:e2:7f:74:70:16:ac:38:57:8d:
         a6:5c:ae:60:fc:5f:f9:3c:49:1d:a0:a4:cf:3f:13:ad:cf:ec:
         e7:e9:85:aa:d0:b9:e5:3d:1d:b9:14:d5:16:1d:71:83:36:10:
         1c:90:ef:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:52:56 2026 by rpki-client