Error: rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
File:                     5U9enM9-t26XkK6VM_5KhMiy_Lw.mft (raw, json)
Hash identifier:          vXmzJUCoH2/8NwfWX8NDTMLck+1LWQok3ppDUHXgvs8=
Subject key identifier:   66:52:DD:4D:24:2B:5D:DB:2A:D0:E5:AA:DB:24:44:78:18:37:6B:F7
Authority key identifier: E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC
Certificate issuer:       /CN=F36CACCCAF/serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
Certificate serial:       030E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
Manifest number:          030D
Signing time:             Sun 11 Oct 2026 04:28:14 +0000
Manifest this update:     Sun 11 Oct 2026 04:28:14 +0000
Manifest next update:     Tue 13 Oct 2026 04:28:14 +0000
Files and hashes:         1: 5U9enM9-t26XkK6VM_5KhMiy_Lw.crl (hash: jYUiJe1GR8SLh2Omr+ObZ5LsZbHi3Cqo0JmH5OebTFE=)
                          2: 690AD7B26C3111EF81B16842762E951A.roa (hash: rHzjxo/eO2fqIELNKfmN3/VjzzeCb8hHN9sTo2VjXI0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CACCCAF, serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
        Validity
            Not Before: Oct 11 04:28:14 2026 GMT
            Not After : Oct 13 04:28:14 2026 GMT
        Subject: CN=6acb105e-cda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:4b:fc:64:6f:bb:9c:5b:ae:fd:77:d7:ef:
                    d2:a7:e5:61:1b:8d:b7:a3:50:94:0c:0b:ae:15:ed:
                    d2:a9:da:d0:18:ad:1d:53:d5:81:b9:38:b2:51:4a:
                    08:bf:90:fc:af:a2:9b:8b:dc:20:b7:10:a3:1c:d5:
                    b5:49:04:dd:91:1f:a8:e4:6a:db:cf:08:5f:de:6e:
                    56:44:1a:c2:fe:e2:10:ce:25:05:ad:94:26:7d:75:
                    93:b2:05:7a:49:7f:5b:1d:08:74:59:ce:f4:12:37:
                    bb:f9:9c:bc:66:c2:e0:fb:d1:b9:6b:c3:d9:72:77:
                    76:8f:2c:51:fe:9b:3e:9f:58:dc:c7:ce:3e:19:88:
                    c1:ec:84:ea:bd:bb:96:53:a6:12:a5:5f:bf:de:80:
                    98:34:31:f4:15:a4:4c:8b:c4:ad:d5:66:f5:7f:e5:
                    5d:32:5d:15:ee:d1:84:86:d3:04:17:c9:3a:04:b3:
                    a2:b4:51:a5:3d:d1:75:ab:ce:fe:27:b9:88:85:20:
                    6c:03:7a:e6:fc:04:10:13:55:98:81:cd:2b:91:c5:
                    f0:93:a4:cb:16:34:80:5d:03:5b:d2:bf:7c:fb:8c:
                    02:d2:37:6a:dd:65:6c:ef:19:9b:f2:11:25:0b:c8:
                    d5:30:5c:1c:91:02:0c:13:ad:27:dc:54:50:fd:ff:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:DD:4D:24:2B:5D:DB:2A:D0:E5:AA:DB:24:44:78:18:37:6B:F7
            X509v3 Authority Key Identifier:
                keyid:E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e4:5b:86:4e:44:a3:a3:d2:38:d9:a3:91:a5:93:62:c6:4c:
         9c:9e:5b:d8:45:7e:51:ec:d5:77:c2:7e:c2:d6:5d:af:bb:66:
         0e:78:59:64:b4:ac:c2:96:97:9b:84:84:91:8a:f6:56:cc:0e:
         5c:27:11:fa:04:a9:89:89:2b:14:cb:37:08:54:fa:39:c2:e7:
         68:14:aa:95:11:72:3a:29:6b:cb:d3:56:4f:8b:67:09:bb:e9:
         89:b5:80:84:73:97:d9:67:ea:07:d5:e4:7d:5f:4e:42:7f:8d:
         40:66:5a:ff:1e:66:77:bc:f2:63:15:7f:34:03:6f:6f:57:da:
         f6:95:af:bb:a5:2c:7e:df:b2:8a:92:27:c9:01:74:92:8a:93:
         28:e8:8f:9d:30:76:a0:c1:11:69:bb:45:39:f6:5b:9d:98:24:
         d5:3b:36:a7:00:9b:53:27:5d:1d:3f:97:a2:89:ed:12:6e:fb:
         58:13:46:35:e9:d7:f2:43:e9:04:3b:83:6f:2b:3e:33:94:01:
         54:6f:26:23:12:96:c0:2a:07:f3:a4:32:d3:db:46:85:ac:93:
         15:ae:52:04:63:79:4e:93:07:aa:4c:14:09:f5:a7:92:79:41:
         45:ea:d5:07:2d:fc:61:2d:77:b5:7f:52:78:18:e7:46:e2:39:
         7d:b8:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:27:51 2026 by rpki-client