Error: rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
File:                     PSwDT4UfNxWyukycleUoXa8u6SM.mft (raw, json)
Hash identifier:          EiDNep2kE7ya/QflNKJe/tcPUhYjjINLOfZQ64Z9Zy8=
Subject key identifier:   78:E4:51:43:89:77:56:6B:55:1A:07:1D:91:C9:43:FF:70:CA:1D:50
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Certificate issuer:       /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial:       073D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
Manifest number:          072D
Signing time:             Mon 21 Sep 2026 02:31:52 +0000
Manifest this update:     Mon 21 Sep 2026 02:31:51 +0000
Manifest next update:     Wed 23 Sep 2026 02:31:51 +0000
Files and hashes:         1: PSwDT4UfNxWyukycleUoXa8u6SM.crl (hash: KkFICdXlpc9QjVqU5aH/PGDo8JFl/Ah6+ACNWylTxjM=)
                          2: 52818A4C6EE911F1951A0915CF1D38B0.roa (hash: IsvOLEG7cttLXFIDVXA459piIwMRJstTEXgm/LGnP90=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA3E9AF, serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
        Validity
            Not Before: Sep 21 02:31:51 2026 GMT
            Not After : Sep 23 02:31:51 2026 GMT
        Subject: CN=6ab09718-3964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:f8:92:34:8c:6c:c0:bb:a5:f0:29:50:1a:
                    56:54:0e:6f:c4:45:c9:1d:16:83:40:3b:66:c3:a1:
                    4c:4b:2f:de:27:05:91:b4:98:fe:ce:50:86:9a:92:
                    4f:8c:93:5c:55:d1:96:70:1c:bd:93:7c:15:6a:f3:
                    e9:ed:c2:59:b0:e9:4d:ac:1e:39:06:9e:27:6e:61:
                    29:f1:90:1f:23:d1:1a:49:ea:b4:4c:02:db:a4:74:
                    a4:36:6e:d0:ca:da:0c:ce:2d:1f:4c:78:ae:74:54:
                    bd:77:df:0b:21:b4:2b:1c:3b:e5:9f:79:6b:e6:d8:
                    78:dc:53:53:35:5f:d9:5d:a8:83:34:c9:65:ae:8b:
                    58:e4:1c:5b:7b:51:c7:96:b4:0e:1b:e1:20:bf:8c:
                    d1:8d:c2:5a:f3:17:76:1e:88:fd:f7:ff:82:d9:12:
                    4b:0a:af:ed:8d:ba:56:37:66:a3:6d:28:4c:0a:d4:
                    61:08:ff:4e:9f:3f:c9:43:76:0e:13:ad:b4:a1:36:
                    7e:21:3b:77:10:d7:9a:b5:19:4b:9c:ca:9a:36:be:
                    73:b0:e6:ee:b6:fe:10:ae:70:7c:87:13:bc:5f:e3:
                    10:01:9c:ae:eb:3e:51:c2:14:c8:e1:d8:15:b4:22:
                    89:64:6e:8b:ba:29:de:40:70:78:89:7b:ce:ef:bc:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E4:51:43:89:77:56:6B:55:1A:07:1D:91:C9:43:FF:70:CA:1D:50
            X509v3 Authority Key Identifier:
                keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:59:05:5e:19:09:96:3c:d6:6d:c2:87:01:2a:65:11:12:b5:
         74:61:57:2c:b4:38:74:c9:ad:3a:48:b4:b5:26:83:9c:2e:e9:
         0c:a9:53:74:0b:15:30:f9:57:c8:23:a7:d3:cb:64:2c:0b:31:
         0e:e2:a9:ed:89:37:8e:cd:46:36:cf:42:34:1e:30:54:a9:c1:
         c2:39:cb:06:e6:74:43:bf:27:64:90:e3:9b:7e:dd:f6:74:2d:
         5d:9e:08:b1:8d:de:50:81:a6:8e:7b:91:b7:bf:1a:73:1f:6e:
         d5:06:5e:fc:a5:77:ec:a9:90:7d:30:57:69:0b:f5:ee:84:d5:
         e3:35:63:f2:98:5f:3a:b2:05:f7:05:72:9a:05:64:68:c2:a5:
         71:fd:f3:d3:56:ce:d7:1f:f5:09:19:c3:a9:e6:c4:7d:db:bf:
         f0:45:bd:79:12:9a:c0:58:11:64:2f:32:3d:81:de:59:b2:fe:
         82:e9:b7:cf:bf:95:5c:4b:41:55:9f:23:a2:9d:51:a5:e7:96:
         6a:58:b6:9d:39:75:0c:6b:d9:58:f8:37:7e:dd:1e:26:5e:88:
         c2:50:27:3b:5a:32:3d:69:7a:28:7a:35:b1:ce:1a:d9:0d:bf:
         2b:49:87:0d:bc:ae:26:08:bd:aa:54:22:e1:ac:c7:ec:3f:eb:
         81:c7:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:41:21 2026 by rpki-client