Error: rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
File:                     Rd8OHH-lNNrKIJKaup5jKPur-1E.mft (raw, json)
Hash identifier:          KH2sLeuLFYpDOQFPWKy49nk4vC2tC6EWSiJ9f41jQTI=
Subject key identifier:   D7:D4:67:3C:54:CD:B1:86:F9:4F:FC:4E:23:20:6C:CE:A7:4F:26:85
Authority key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
Certificate issuer:       /CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Certificate serial:       05FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
Manifest number:          060F
Signing time:             Sat 10 Oct 2026 02:59:15 +0000
Manifest this update:     Sat 10 Oct 2026 02:59:14 +0000
Manifest next update:     Mon 12 Oct 2026 02:59:14 +0000
Files and hashes:         1: Rd8OHH-lNNrKIJKaup5jKPur-1E.crl (hash: ZM2k9BHQn9BCRequSXK8UpgUBaLpZXnCjDQCYrC4A1U=)
                          2: 171E9A8816E411F1A88C6BB9DAE4EC9C.roa (hash: vJQ48Pdad/mMI/K9zYFw3poQzcd4T1o72/4e9rHed8k=)
                          3: A572A8A416E111F19EA4E7ACDAE4EC9C.roa (hash: n7gCG2uQxTeIhVaPEx4goN+jApSMUA/WmCugEwzQCJw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534 (0x5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE1C1AF, serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
        Validity
            Not Before: Oct 10 02:59:14 2026 GMT
            Not After : Oct 12 02:59:14 2026 GMT
        Subject: CN=6ac9aa03-1ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:f0:ff:1f:92:17:6d:75:e1:90:d9:2a:c9:
                    a9:44:5a:d2:de:a3:0d:a8:5d:a3:1f:79:fc:b8:4e:
                    c0:8a:48:21:53:69:59:4f:3c:c8:83:40:37:dc:5c:
                    52:5a:b3:49:92:61:dd:b9:7b:d2:5e:15:a1:3a:5f:
                    fe:cd:49:3a:61:bf:c9:2b:7b:b4:8a:08:05:d2:d3:
                    2d:e7:06:41:f0:8e:dd:e6:fe:18:fe:43:30:74:00:
                    4c:05:66:22:e3:10:84:86:d2:9a:cc:00:e3:77:8c:
                    4e:cb:a5:7d:48:bc:8d:23:8e:fb:77:3b:f4:69:80:
                    4a:de:bf:42:d1:d8:e6:46:a9:93:29:0a:5a:51:90:
                    92:ee:49:c1:dc:f2:0b:cd:97:31:c6:6b:67:fe:ca:
                    8d:91:5f:fa:10:f8:34:e9:00:88:71:4f:cc:d5:a6:
                    04:95:ad:a3:75:20:14:b2:98:59:f3:1c:29:d1:9d:
                    36:a7:2a:77:83:67:cd:31:34:d1:04:58:46:45:50:
                    ed:9e:e1:00:5d:23:b7:bd:d3:2d:92:f1:6e:19:ce:
                    5b:28:0b:fd:2e:12:8e:22:68:d0:37:e9:fb:3b:c6:
                    27:f8:f2:80:a7:d7:1d:dc:c9:03:9d:19:3c:5a:6f:
                    86:2d:64:2e:e0:94:1a:9e:35:dd:ee:03:7c:78:c4:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D4:67:3C:54:CD:B1:86:F9:4F:FC:4E:23:20:6C:CE:A7:4F:26:85
            X509v3 Authority Key Identifier:
                keyid:45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:96:30:fb:8f:79:ae:bb:1d:5b:9e:78:f6:45:4e:1e:d8:51:
         2e:82:71:64:e4:ef:81:32:40:0e:ca:4d:12:dc:6b:67:2b:e5:
         b7:93:a6:d8:e5:df:9c:43:61:04:d6:b4:f0:d4:7d:81:b4:d6:
         1a:9e:e6:d6:c7:5b:bd:0a:36:63:5b:55:9c:27:f0:08:f7:c8:
         02:35:27:34:74:48:21:dc:3c:66:75:7c:2f:d7:65:e4:79:be:
         f9:c8:dd:b8:cb:af:54:27:ed:c3:24:a0:66:d1:b4:1b:5e:b7:
         0d:19:19:72:dc:b5:07:23:40:1f:3d:a5:be:ac:45:cd:7f:f9:
         f9:b9:e3:e3:b9:42:bd:d7:ab:17:9d:f9:ba:21:d5:8e:ce:65:
         e8:df:8c:db:f5:5d:5c:8f:74:6a:6d:73:13:b4:ad:54:9f:28:
         07:a6:74:01:34:be:81:61:c3:de:2e:15:30:e0:12:61:07:58:
         a4:d8:3d:5f:67:2a:73:e4:af:bc:44:c8:37:26:9b:65:63:0d:
         d0:46:87:8e:cf:d5:1e:c5:a7:40:71:ff:09:45:91:8c:4b:75:
         48:1c:4d:91:bd:b1:01:40:68:53:5f:d3:21:5b:90:ac:69:65:
         fa:4f:de:41:66:1b:9c:23:c2:8a:27:a7:c9:21:ae:c3:c2:d0:
         01:ec:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:39:12 2026 by rpki-client