Error: rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft
File:                     wuvMmPPo4ykKmvMvnqjYKsevH8o.mft (raw, json)
Hash identifier:          KHtuVBHpk4mkPjJMhx4CcMr5brxuZhzTO0higvpAzTY=
Subject key identifier:   EE:BF:EF:24:FC:ED:79:DB:95:25:2A:47:31:94:B0:75:E0:AC:05:D2
Authority key identifier: C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
Certificate issuer:       /CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Certificate serial:       0809
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft
Manifest number:          0801
Signing time:             Wed 14 Oct 2026 02:07:16 +0000
Manifest this update:     Wed 14 Oct 2026 02:07:15 +0000
Manifest next update:     Fri 16 Oct 2026 02:07:15 +0000
Files and hashes:         1: wuvMmPPo4ykKmvMvnqjYKsevH8o.crl (hash: /EHyTa2Bob4K6GmSrjaceRtMW7/DfIOH6krNRrJErtc=)
                          2: F69DD73A584D11EE90022E504AD9E6FC.roa (hash: r1fopG+YFRoatujRKCNwNwwxGTBHvRCVHWK9xRpijbk=)
                          3: 7F4B6F3A584D11EEA686024F4AD9E6FC.roa (hash: gBNHhgUjU4LCVHRXmohrMyDf+FfyKvFmbeum44PBlv0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 02:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B6125AF, serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
        Validity
            Not Before: Oct 14 02:07:15 2026 GMT
            Not After : Oct 16 02:07:15 2026 GMT
        Subject: CN=6acee3d4-5f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:e1:96:0d:46:95:27:b6:03:c8:fd:7b:26:
                    56:ef:41:f3:4b:9e:2b:8a:b3:c6:41:5b:8e:eb:8a:
                    b8:d9:ca:21:1f:fd:21:59:86:9f:f8:8e:29:d6:b3:
                    d4:8d:c2:91:7a:a7:9f:e7:64:47:02:3e:af:cc:92:
                    aa:a5:df:e6:52:c5:cd:30:0f:2f:b4:d8:9a:d9:70:
                    31:45:45:31:17:21:09:b0:58:ec:8c:5b:4c:be:ac:
                    72:78:8e:2c:ac:23:19:dc:50:6e:3a:63:b6:a5:ee:
                    c6:f2:41:ee:d3:29:5b:65:e5:a9:2d:8b:f7:39:97:
                    fe:c6:3d:cf:b0:61:79:b9:d7:29:af:40:ae:d6:87:
                    c4:e2:6c:0b:1c:f0:59:6a:19:cd:e9:bc:8d:dd:33:
                    0a:e5:94:54:5e:90:b5:b6:df:eb:68:89:4c:da:bf:
                    82:e8:83:1e:c7:8a:1b:75:69:08:7a:31:d7:92:d9:
                    3b:19:cb:9d:84:5b:e4:8d:95:f3:88:0e:6c:51:db:
                    a5:de:95:53:e9:0b:c8:94:45:15:9b:ac:2f:ec:84:
                    ac:8b:2c:a9:7e:14:09:e2:81:41:bb:7c:39:a3:52:
                    20:f1:e1:b0:53:83:a2:63:70:33:33:46:67:2e:b0:
                    a5:e6:e1:57:32:b0:b3:f2:0b:e3:a6:b0:4f:99:f5:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BF:EF:24:FC:ED:79:DB:95:25:2A:47:31:94:B0:75:E0:AC:05:D2
            X509v3 Authority Key Identifier:
                keyid:C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:31:d9:83:78:75:b8:bb:fe:1b:32:9b:16:a9:de:71:0b:50:
         65:15:f1:19:16:b8:06:a2:08:1b:5f:f0:3b:61:37:3d:50:ab:
         94:76:8c:c9:06:5e:5b:68:61:22:3a:53:22:f9:92:ec:59:df:
         de:09:dc:f3:05:1c:97:fa:1c:60:36:17:47:f8:87:7d:83:d2:
         23:aa:6d:3d:2f:c6:29:cf:eb:8a:ae:2d:41:7c:ae:72:6d:69:
         e7:66:0a:6a:33:50:38:0e:cf:1e:67:28:ba:b5:9f:17:5f:f7:
         a8:f4:cf:56:24:63:2d:9e:11:b6:05:0f:ef:c2:da:31:cc:de:
         92:1f:62:b4:80:46:17:de:7a:45:ab:11:e5:34:09:fa:93:5c:
         ab:80:ff:0c:91:21:5e:f4:b2:1b:8b:ac:9a:f6:92:d8:bf:bc:
         73:9a:30:4f:12:24:7c:3c:66:ef:54:8e:64:ef:3c:55:59:60:
         8a:4c:86:42:e8:9d:5f:82:9d:8a:b9:72:f2:9d:73:a7:dd:3f:
         f3:1f:07:d5:67:c6:22:52:4f:9e:35:c8:ba:09:1d:5a:5c:3c:
         d6:27:e4:67:3a:3d:fc:cb:b3:b8:0a:a3:ba:21:93:0c:46:a3:
         8b:46:d3:85:6f:5f:f6:e3:b5:5a:34:7f:4f:a2:39:6f:c6:8b:
         1d:2f:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:59:47 2026 by rpki-client