Error: rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
File:                     AeYcP5ZGalkJmFR26IR5u31BEvY.mft (raw, json)
Hash identifier:          h4kMRlBwybEOVcKtB/hjDnOKdfKsNeTV02orDtOteIM=
Subject key identifier:   15:F2:0A:88:A6:32:A0:19:CD:D6:27:AA:37:EA:F9:B6:12:01:38:18
Authority key identifier: 01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Certificate issuer:       /CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
Certificate serial:       0902
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
Manifest number:          08F5
Signing time:             Fri 09 Oct 2026 01:53:19 +0000
Manifest this update:     Fri 09 Oct 2026 01:53:18 +0000
Manifest next update:     Sun 11 Oct 2026 01:53:18 +0000
Files and hashes:         1: AeYcP5ZGalkJmFR26IR5u31BEvY.crl (hash: wZ7vcAfqtF0n3BLAZLfmO2bNJ/0LVDXQayJOn5UshFs=)
                          2: C323F44E8F1211F1864C84EBCE1D38B0.roa (hash: u8aZWfBecwJPZjVPWhv5T80Gv1rJfWADMc6DQmn/XnQ=)
                          3: 519333148F1011F1B1E433DBCE1D38B0.roa (hash: gFXsI352fWNCjc+UhMWjU0A4AjvsERl87+FqENAq/Io=)
                          4: DF656D788F1111F1847755E5CE1D38B0.roa (hash: 9QfEaLocVtLQcwnT06GsfncLumGQlEB7TDVUSo8k0UY=)
                          5: 1E1654C4EEAA11EA8289771CF8AEA228.roa (hash: Dm82340uA0C690wn7sH2AhL9e6hsAhiXi6CDcAUcav4=)
                          6: 2CA9C1788F1311F1984CADEBCE1D38B0.roa (hash: CEkCdE9UogyrJNiK1vhUEA97uIVs8t2fF8ZzQHmisfU=)
                          7: 0C51CC7A8F1011F1852E20DBCE1D38B0.roa (hash: bG2v6ttI2efHZhE3wMxM7riW0VDZ5M3p3+TQHnJRxmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 01:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2306 (0x902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738AF, serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
        Validity
            Not Before: Oct  9 01:53:18 2026 GMT
            Not After : Oct 11 01:53:18 2026 GMT
        Subject: CN=6ac8490f-1966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7e:8c:90:4e:fb:1f:e8:49:d2:de:68:9d:de:
                    a2:ae:fc:b0:b8:46:0c:ac:fa:a3:23:2b:12:ca:77:
                    fa:65:80:c2:b1:67:cd:96:fa:cc:2e:79:2c:60:75:
                    17:87:b9:6c:e5:a0:e8:e3:de:18:ae:09:2d:96:52:
                    26:7c:82:5c:92:2c:09:6c:88:1b:2c:b3:93:0e:f6:
                    e4:38:54:6a:1c:bf:ed:4b:7a:2f:c5:cb:f2:1e:e2:
                    e5:e6:c8:68:99:ba:52:12:b8:02:c1:8f:30:a1:f9:
                    26:80:18:83:c8:90:83:90:50:38:37:50:67:58:65:
                    5b:09:a1:2d:83:47:20:60:b2:91:cc:e3:84:88:fd:
                    52:67:45:5d:5e:3a:51:c4:5c:ea:b0:1b:54:21:dc:
                    91:25:4c:f8:41:18:9a:c2:0a:cb:0b:6e:58:35:f6:
                    26:d1:55:26:f0:fb:19:d5:89:41:bc:89:56:fe:75:
                    18:96:97:94:5f:94:a9:5f:b8:90:85:c1:07:c9:4d:
                    d1:e2:e9:d6:40:5e:5f:49:0d:cb:b3:a2:5b:26:e1:
                    e7:5e:58:89:2e:94:26:a3:44:c6:41:7a:89:09:32:
                    30:ed:be:50:18:2c:43:2d:43:d6:65:78:e5:9a:c3:
                    f2:6c:35:0b:84:e9:2b:78:ed:42:77:f4:2c:92:70:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F2:0A:88:A6:32:A0:19:CD:D6:27:AA:37:EA:F9:B6:12:01:38:18
            X509v3 Authority Key Identifier:
                keyid:01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5f:56:bb:2d:59:11:e9:e2:a7:40:2c:8e:6e:52:05:0d:24:
         59:fa:ec:82:e8:c1:d5:3a:26:66:26:25:a7:dc:ad:3a:ce:28:
         d8:f0:5d:65:13:d2:71:78:d1:35:ac:4f:76:eb:30:fc:0c:b3:
         c1:54:4b:ce:0f:49:25:f7:2c:8b:b0:66:5d:37:b5:f1:60:6a:
         d4:55:8e:31:7e:88:4c:0c:81:ea:1f:3b:16:2c:d2:40:c6:f7:
         6d:cb:d4:71:1f:c0:28:49:e9:4b:4a:e9:54:7b:81:5a:d1:92:
         68:af:d2:95:a3:06:10:0b:7e:ae:72:aa:42:de:dc:9f:98:20:
         07:aa:aa:9b:c7:a8:fb:67:78:a3:89:2f:c6:dc:a9:52:0e:38:
         13:f3:ee:4a:00:d1:f7:a5:85:42:93:70:20:bf:90:18:75:50:
         3c:2e:4f:64:43:ab:36:b5:0b:31:0f:3c:db:d7:97:69:28:49:
         14:47:1a:92:5a:71:21:ad:8e:a5:16:94:7a:db:16:87:d3:8c:
         4b:69:29:01:da:5a:be:7f:64:82:2a:d2:21:1c:77:2f:c2:bc:
         b8:eb:26:cb:db:d0:41:50:e8:c9:7e:c9:40:dc:c7:7c:cc:b7:
         e2:06:34:02:87:20:8d:f4:d2:78:b0:c1:41:5f:d7:9d:d3:63:
         60:94:b5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:43:56 2026 by rpki-client