Error: rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
File:                     S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft (raw, json)
Hash identifier:          n4h4TMnKypumoAxmGIVScAbhYnRX7ziguEARvqX+4ME=
Subject key identifier:   8C:77:E1:BC:6A:20:7C:23:F5:64:26:9B:A7:DC:09:5B:2E:EC:F4:72
Authority key identifier: 4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
Certificate issuer:       /CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Certificate serial:       039A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
Manifest number:          0398
Signing time:             Sun 11 Oct 2026 04:10:34 +0000
Manifest this update:     Sun 11 Oct 2026 04:10:33 +0000
Manifest next update:     Tue 13 Oct 2026 04:10:33 +0000
Files and hashes:         1: S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl (hash: 9tDfahAZOGwjhJufs1PwuJtOITuU+YeO+jrO6IAUh1A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922 (0x39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E115AF, serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
        Validity
            Not Before: Oct 11 04:10:33 2026 GMT
            Not After : Oct 13 04:10:33 2026 GMT
        Subject: CN=6acb0c3a-2778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c2:0e:82:2b:91:43:e6:12:52:96:bd:5e:3f:
                    e3:0b:02:0f:ab:40:c3:74:c1:20:c6:ec:99:75:1e:
                    52:23:0f:83:0b:66:46:43:b3:ed:75:14:26:98:f4:
                    22:b3:ae:ae:55:b7:68:49:b1:48:20:b0:c7:3b:14:
                    ab:49:e9:d6:85:81:b4:4e:59:93:3d:3f:aa:47:8e:
                    46:8b:92:8a:a6:54:2d:3f:94:3e:2a:4c:df:e1:86:
                    9b:4d:bd:e7:86:34:ee:6b:5f:32:c8:f7:80:66:78:
                    d0:94:92:bd:aa:2a:dc:c7:9b:cb:3d:69:55:2e:5c:
                    70:c0:53:b0:82:3e:12:a6:72:cd:b1:14:62:ad:54:
                    65:ad:f1:a3:f4:18:53:8a:b9:6b:a5:60:ff:e9:de:
                    e0:fd:2e:11:06:69:db:bc:0e:fd:f1:28:83:7b:5e:
                    c2:08:c6:e0:18:f6:fa:c4:c7:f5:57:80:fd:85:62:
                    cc:15:86:9f:ef:20:23:91:57:97:d7:a1:e0:4b:2f:
                    11:9e:11:1b:5d:f2:0e:22:e7:b4:c4:f0:dd:63:50:
                    26:34:d4:8b:5e:e7:22:09:48:17:bf:53:1c:42:fa:
                    53:a7:d7:fa:ed:3c:22:89:2c:c6:63:c0:4d:51:00:
                    96:3d:62:da:9e:11:6e:d6:d9:b8:98:c7:ac:47:4e:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:77:E1:BC:6A:20:7C:23:F5:64:26:9B:A7:DC:09:5B:2E:EC:F4:72
            X509v3 Authority Key Identifier:
                keyid:4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:db:00:ab:58:3d:68:d3:50:56:ec:ad:1f:2f:e6:46:d1:d9:
         ae:2b:e8:18:55:81:83:4c:43:b6:ef:af:4d:30:d1:53:ae:62:
         a8:21:24:cd:ba:f5:8c:4f:98:79:5a:61:09:74:8a:d6:4d:ed:
         5b:ab:0b:79:35:b4:5c:d5:2b:67:6c:75:6d:89:aa:7b:37:c8:
         15:55:2d:14:9a:53:61:29:3e:1f:8b:47:51:42:ca:9e:fe:ee:
         e8:cc:55:6a:75:4c:ac:34:fa:77:a2:48:09:f2:7a:e8:b2:17:
         59:98:0a:50:f1:9c:b5:1a:60:36:54:f4:c6:c9:65:0c:fe:d2:
         08:9d:40:4b:7d:3b:ff:d2:d3:71:0f:30:7e:41:7d:92:73:fc:
         ff:d2:40:68:d3:b8:53:e1:a9:37:fd:9a:92:a6:2a:25:0e:46:
         02:4d:63:58:9f:6e:ca:a3:52:cd:24:c7:5a:3a:8d:12:5b:0a:
         ed:fe:3b:96:55:4a:96:f6:a5:fe:8d:ad:38:b1:35:b1:d9:57:
         3d:17:46:95:59:14:fc:d8:34:79:e0:de:c9:dc:75:07:88:9a:
         20:ad:4c:dd:81:cb:aa:be:81:c9:f9:19:65:32:fc:9f:3b:65:
         50:17:31:98:20:bf:0c:8c:06:b9:45:d3:75:c7:24:8f:ea:7d:
         96:b2:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:41:29 2026 by rpki-client