Error: rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
File:                     Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft (raw, json)
Hash identifier:          Qpkkl1Fm3/0Lz8DPlROKyj3fJPcnEnr83pFs+7w2N0o=
Subject key identifier:   0B:7C:61:47:AA:C4:99:B5:B7:4B:36:71:DA:FE:D6:E4:6B:93:61:06
Authority key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
Certificate issuer:       /CN=F36F1344AF/serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Certificate serial:       0647
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
Manifest number:          0641
Signing time:             Thu 24 Sep 2026 02:49:24 +0000
Manifest this update:     Thu 24 Sep 2026 02:49:23 +0000
Manifest next update:     Sat 26 Sep 2026 02:49:23 +0000
Files and hashes:         1: Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl (hash: 0+gqd5FXv6MhowYtmoOy1iCsAGgjN+W5H1VkkAgF1Ho=)
                          2: FA0A10268D8011F18F4379E0CE1D38B0.roa (hash: isvF0Tax/20iYi7ZXFeg6uIx+YUxx5ER2b6kv6sd4Js=)
                          3: DEB2A540851511F19367D3F0CE1D38B0.roa (hash: sYepgmDznNmmNReOcG4umYZCEZRALxnqg21zsuyQF/k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F1344AF, serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
        Validity
            Not Before: Sep 24 02:49:23 2026 GMT
            Not After : Sep 26 02:49:23 2026 GMT
        Subject: CN=6ab48fb4-6503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:5e:d8:fa:be:68:fc:93:9c:d8:f1:e5:01:
                    5d:05:ad:b7:ea:32:1b:64:cc:65:bb:10:8e:47:d3:
                    53:a4:d5:e8:37:f7:4f:ff:84:c9:35:49:70:d0:d3:
                    ed:e8:a1:3b:6b:e6:ae:c5:5d:37:8d:b7:49:ac:31:
                    db:85:1b:cb:32:d3:36:2e:e6:c4:ca:75:7e:46:bb:
                    0f:b8:5e:68:be:ef:4d:e9:e9:a5:e6:54:21:35:5f:
                    12:ba:7d:20:61:5f:62:43:3a:25:fa:06:d7:17:d7:
                    ff:f3:10:ac:66:de:de:6f:c5:85:a1:21:e2:bb:93:
                    68:9c:ac:2c:a5:ce:2e:ea:d4:56:eb:76:c7:af:9d:
                    46:45:b2:ba:3f:6f:a8:fb:99:8f:e8:32:59:f5:1a:
                    ad:b6:95:81:13:08:2f:5e:8c:86:7f:f2:c3:cd:8f:
                    ee:d6:85:d2:91:ca:0a:54:69:96:ff:9c:c7:bc:01:
                    a8:5e:e3:46:ad:e7:ca:6a:e2:13:19:52:fe:41:f9:
                    d7:fe:6d:59:d2:e4:d5:62:81:2c:26:61:62:ad:8c:
                    60:3d:76:d4:64:36:03:41:23:ea:e6:5c:19:c6:e0:
                    d5:c2:1c:4d:77:7d:ca:42:1f:f6:ed:d0:b7:27:b3:
                    b4:fb:c6:ad:2b:b8:70:72:a8:af:d5:95:19:34:3a:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7C:61:47:AA:C4:99:B5:B7:4B:36:71:DA:FE:D6:E4:6B:93:61:06
            X509v3 Authority Key Identifier:
                keyid:63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:e3:db:b3:96:39:16:a2:3a:01:8f:33:c3:61:26:16:e6:
         a1:29:3b:81:15:54:75:85:94:4e:b5:e8:65:dc:07:51:00:b6:
         04:48:ac:d5:60:df:80:68:fe:0d:7c:81:ab:f3:99:52:64:80:
         2d:b3:a0:58:c7:fc:85:4d:59:76:64:6f:cc:01:93:6c:cc:3b:
         5d:f7:10:75:b9:83:d9:a0:92:65:2c:7b:5d:98:4e:87:a4:f3:
         bd:d1:45:88:e3:ed:89:d4:fc:7c:60:28:5d:c9:19:68:dd:a6:
         6d:2a:cf:08:7e:56:9e:db:74:f5:21:74:b6:50:f3:3a:f0:8a:
         79:da:6a:34:8a:88:b4:44:8f:f8:a3:3a:d8:8c:26:57:1e:3c:
         6f:a3:cd:41:67:9a:96:f4:31:4b:7a:73:d5:53:ee:b4:51:51:
         d9:1b:08:f3:3f:2e:e8:de:20:2a:b0:f0:cc:45:97:67:ac:3b:
         4e:e1:fc:33:4d:e6:39:15:95:8b:4e:a7:70:82:49:83:b6:3d:
         01:a2:70:47:c9:1d:d4:8b:18:1b:89:a2:f6:8b:13:b3:98:bc:
         38:9c:29:aa:13:0a:48:95:de:90:ec:d8:8e:1a:7a:65:ea:57:
         98:68:e8:2c:f8:8e:c1:69:8c:f7:7c:33:8e:6b:3c:40:dd:fd:
         c5:f8:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:51:57 2026 by rpki-client