Error: rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
File:                     mSzTGdelFaVjcylM4EkVP4w-AEs.mft (raw, json)
Hash identifier:          4UFO7i58CNS7iZNbGlgWSOBytADe1fgsM7+9f6mSRgU=
Subject key identifier:   AE:14:BF:BB:75:2D:AC:3B:F5:F1:E8:73:6C:D8:C6:52:BA:14:A7:6C
Authority key identifier: 99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Certificate issuer:       /CN=F36DD92BAF/serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
Certificate serial:       0391
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
Manifest number:          038E
Signing time:             Sat 10 Oct 2026 04:11:42 +0000
Manifest this update:     Sat 10 Oct 2026 04:11:41 +0000
Manifest next update:     Mon 12 Oct 2026 04:11:41 +0000
Files and hashes:         1: mSzTGdelFaVjcylM4EkVP4w-AEs.crl (hash: YFafmzRYgeNDEYCVdXEl4BNsPiSLFhYDnaZCaGCd+NE=)
                          2: 8176D5FAB27D11F18AF20EBCCE1D38B0.roa (hash: n1a4oKf1AfDMVgheqWRfnPJPmLCX2nozQDZCIZsqBOE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD92BAF, serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
        Validity
            Not Before: Oct 10 04:11:41 2026 GMT
            Not After : Oct 12 04:11:41 2026 GMT
        Subject: CN=6ac9bafe-592b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:7f:0b:f9:19:d0:2d:ec:b9:b4:30:df:d8:
                    9b:bd:90:46:3d:e9:21:c3:69:81:2c:47:2d:b7:19:
                    28:eb:5c:8a:ea:d4:46:0e:de:92:f8:ee:33:02:99:
                    23:f8:71:5c:a2:4c:15:b5:df:fe:51:f1:c4:bf:1c:
                    0d:da:28:95:8d:fa:1c:93:a8:f3:e4:9f:00:42:a0:
                    f8:2a:54:a3:55:9b:37:4b:71:91:18:b0:a6:3a:48:
                    99:34:a7:4f:10:22:7d:3a:1b:24:32:d5:ad:27:7f:
                    d9:d2:ee:25:9d:6a:2d:6a:f1:7e:17:5d:72:97:c6:
                    de:f8:6a:05:15:27:ee:21:07:f4:09:f0:7b:b2:ef:
                    4d:8b:02:d6:96:9a:93:de:2d:e5:aa:2b:e3:67:4b:
                    88:89:d4:c5:e5:2e:3e:c1:19:be:87:b2:37:5d:1e:
                    c5:36:62:0a:f8:c3:16:e3:75:b9:c0:f5:ba:f5:59:
                    f1:95:1e:14:30:1b:a8:98:16:eb:21:e5:fb:a8:75:
                    84:84:68:f6:2d:70:e3:37:9b:e3:a4:79:94:8a:98:
                    f2:5d:3f:9b:23:63:f2:83:95:9d:20:86:0e:c4:75:
                    4f:52:77:8e:18:ae:c2:97:fe:42:9b:1d:17:a4:6c:
                    66:e1:dd:55:3e:12:7b:97:f1:65:43:0c:8f:ac:7c:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:14:BF:BB:75:2D:AC:3B:F5:F1:E8:73:6C:D8:C6:52:BA:14:A7:6C
            X509v3 Authority Key Identifier:
                keyid:99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:04:92:76:21:49:fa:e4:76:c9:84:a1:a3:19:08:63:f1:6d:
         0b:43:e7:82:92:02:88:b2:46:a7:bf:34:77:90:75:d8:cb:fb:
         f8:26:42:ee:21:29:6a:f8:21:ad:b6:3c:b9:67:7b:01:01:67:
         41:67:ec:97:4b:68:e2:8d:89:0e:71:bc:00:e6:2b:95:0b:c6:
         cc:32:a6:3f:00:50:80:63:e4:fa:39:02:19:1d:96:39:3f:f8:
         4b:53:03:fa:07:aa:23:a0:9a:9b:6b:93:ed:63:7b:9b:eb:62:
         4c:6c:69:99:af:ab:35:89:a0:9f:cb:72:6c:b9:37:52:7b:2a:
         53:df:c1:56:dc:f1:fb:12:11:69:03:95:e5:00:7a:8d:7e:a2:
         57:6b:8a:f3:ff:c4:82:33:7e:92:06:96:78:11:9c:08:d0:66:
         bc:40:ca:22:d5:0b:1b:58:b5:f5:bc:d3:51:85:57:fa:a6:dc:
         ac:7e:45:09:5b:01:43:8f:01:cd:df:a8:5f:4f:0d:f1:70:72:
         0d:85:0f:6d:d3:30:2b:79:63:2d:ad:54:10:b7:61:2e:91:8a:
         8f:b4:4b:63:9d:7b:92:a7:01:2b:f7:8d:f6:cc:7f:6e:99:3e:
         a2:98:d1:cd:aa:ce:ad:66:93:39:cf:a6:59:f4:24:f6:df:9e:
         58:0b:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:38:41 2026 by rpki-client