Error: rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
File:                     U_eNgMrA6y6s13sBdd8xno91J5Y.mft (raw, json)
Hash identifier:          AqyPoC2Pvd5QhwF7T26dvENSBgPUqgRN/0Wt+MZVvvQ=
Subject key identifier:   C9:92:9F:9A:EA:B0:85:9A:88:54:54:11:D1:AA:56:95:B9:DE:65:D2
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Certificate issuer:       /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial:       04CF
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
Manifest number:          04BB
Signing time:             Sun 11 Oct 2026 03:41:01 +0000
Manifest this update:     Sun 11 Oct 2026 03:41:00 +0000
Manifest next update:     Tue 13 Oct 2026 03:41:00 +0000
Files and hashes:         1: U_eNgMrA6y6s13sBdd8xno91J5Y.crl (hash: UyTmiLrc+yv9yrCDPdkxZcjKRKtnF679DpJuxrChn64=)
                          2: A5829FB8FAFD11EEB4C6D20D017001B1.roa (hash: 1gu4Qu8rsgArGS1Y9Jq2u1pp9GqrVEYfqnEUTV3m1CI=)
                          3: 846EEB8A2DA311F191823FA9DAE4EC9C.roa (hash: cabYmfkn2blVlA5gD0tdwhmgI41cFwtIr5rkIE3cCV8=)
                          4: 4281149CF7DF11EE80FF1021017001B1.roa (hash: cUFtSMR0TSwZ2UTIiyI0fv21ujQldFBY5Sypbj+4CnU=)
                          5: 60E7510AFAFD11EEB483D20C017001B1.roa (hash: M+guvwSynGfTHvTOyvTfqunoeJ7intrM84s+ebCzAj4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
                          rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231 (0x4cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAP, serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
        Validity
            Not Before: Oct 11 03:41:00 2026 GMT
            Not After : Oct 13 03:41:00 2026 GMT
        Subject: CN=6acb054d-6a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:81:f8:7b:df:c3:69:c8:7a:05:ee:c1:f7:9b:
                    4f:79:46:8b:74:61:84:8a:91:e4:df:e0:bf:28:73:
                    11:fa:ae:cb:99:09:2f:72:1e:58:33:8a:f7:08:bb:
                    e5:3d:37:bb:70:bf:27:df:a7:17:c9:38:8b:62:8d:
                    31:49:b0:a2:0f:96:63:3c:a6:b8:fd:6c:d1:c5:c8:
                    3f:14:1d:e9:fb:9e:f1:8a:c8:2c:5f:0a:3f:92:d0:
                    7c:0b:ca:98:39:d2:8d:b8:c7:46:67:c2:ea:1b:d3:
                    b3:97:1f:15:23:04:a0:e0:2b:33:9b:f8:94:a1:fc:
                    62:b7:a1:7a:ad:54:69:95:32:12:e0:52:11:63:1a:
                    8f:1a:5d:f0:10:29:09:4e:48:a2:c3:22:f1:cc:2e:
                    af:68:c3:8a:8b:63:79:89:32:37:9c:a0:c9:f6:4f:
                    f4:dd:ce:01:e0:51:91:76:83:33:35:82:9c:a2:48:
                    a0:aa:82:59:b1:79:05:ed:6f:61:18:2a:8d:2c:c4:
                    9b:47:33:b3:d0:20:ce:2d:7c:7f:c2:9f:56:b5:07:
                    b2:0b:b2:40:cd:36:bf:72:10:2e:1f:0c:bb:72:5c:
                    68:fe:78:23:12:93:27:fa:e6:69:9d:ec:91:f1:8d:
                    fe:bc:44:60:54:40:4f:3b:f3:23:8e:0c:49:eb:3b:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:92:9F:9A:EA:B0:85:9A:88:54:54:11:D1:AA:56:95:B9:DE:65:D2
            X509v3 Authority Key Identifier:
                keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d9:68:8a:78:6c:b9:de:60:9a:28:ef:1c:6d:42:3e:c4:33:
         50:5b:76:ba:c5:63:7b:e0:b0:bb:ac:e0:d5:1f:bf:2e:4a:a8:
         5b:9c:df:a4:23:87:7f:45:a9:46:c0:d3:1e:9b:40:de:07:00:
         ce:cb:a7:bf:94:f0:c8:ac:08:9a:ad:a8:4a:f1:e1:30:df:f9:
         c6:4a:64:f0:45:d0:54:73:82:c5:70:2b:35:1a:6d:e6:6c:82:
         4a:b3:2a:3e:04:ab:f5:40:0a:59:48:18:bc:34:16:cb:1b:59:
         7e:4b:39:3c:f9:27:85:b8:28:4a:6a:da:39:2d:f9:c3:5f:a1:
         67:87:b6:dd:0b:cb:be:6d:56:78:b0:2d:b5:51:64:a2:b0:fe:
         8f:7e:ba:de:69:b0:c1:56:2d:a5:33:2f:db:b4:30:bf:10:5c:
         33:1b:6f:b5:78:dc:8a:bc:85:4d:6e:77:e7:0b:f2:e1:18:8b:
         b0:ad:b4:ad:c1:71:8f:35:f6:6e:ff:9b:75:68:2b:85:de:eb:
         42:12:63:c7:6e:dc:16:32:63:64:6b:86:49:53:1c:15:dc:5e:
         b8:74:ff:0b:3b:63:b9:85:eb:22:91:11:c7:7b:b5:a2:53:83:
         43:6b:47:77:5e:e6:bc:7a:e8:ce:a5:92:e9:8c:a5:76:2d:02:
         45:a5:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:17:53 2026 by rpki-client