Error: rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
File:                     DwVtu0sgGDx0BK0862l8lsYuvIE.mft (raw, json)
Hash identifier:          bod+wy9R/WXLfahQY5ANGiTHGOdvl55dKA6gFLo/gCA=
Subject key identifier:   BD:33:5F:41:01:E0:1B:F1:F2:EA:B6:0C:98:54:AF:77:59:84:5F:83
Authority key identifier: 0F:05:6D:BB:4B:20:18:3C:74:04:AD:3C:EB:69:7C:96:C6:2E:BC:81
Certificate issuer:       /CN=F36F144CAF/serialNumber=0F056DBB4B20183C7404AD3CEB697C96C62EBC81
Certificate serial:       0A45
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DwVtu0sgGDx0BK0862l8lsYuvIE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
Manifest number:          0A44
Signing time:             Mon 21 Sep 2026 01:34:31 +0000
Manifest this update:     Mon 21 Sep 2026 01:34:30 +0000
Manifest next update:     Wed 23 Sep 2026 01:34:30 +0000
Files and hashes:         1: DwVtu0sgGDx0BK0862l8lsYuvIE.crl (hash: C1fSKaj6r8xhqxrSytA1tN3sR5AB0m+9NAvX82rwR2o=)
                          2: FF4B07AC846711F0A270AC7BDAE4EC9C.roa (hash: Q3K1cN6OB7yLaygtcJrb/JNZEt+1W3HC/PXLY3fzcBE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DwVtu0sgGDx0BK0862l8lsYuvIE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 01:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2629 (0xa45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F144CAF, serialNumber=0F056DBB4B20183C7404AD3CEB697C96C62EBC81
        Validity
            Not Before: Sep 21 01:34:30 2026 GMT
            Not After : Sep 23 01:34:30 2026 GMT
        Subject: CN=6ab089a7-29f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:5d:fd:01:56:72:b4:67:5b:25:93:12:3b:
                    c4:c1:a1:b0:d1:20:42:a4:1e:98:4e:32:71:6e:d0:
                    71:ba:df:ec:ff:a3:0e:da:30:97:ac:8a:96:74:61:
                    1d:76:13:5b:b1:25:13:d6:eb:10:07:8c:f5:31:80:
                    09:0a:de:0e:bc:8b:f8:c0:ad:6c:a3:65:48:3c:28:
                    23:22:d3:e6:43:d3:bc:fd:60:3a:7f:cb:4f:28:cf:
                    c9:09:78:7a:1b:71:b9:6c:81:72:3e:de:de:e7:5c:
                    e3:93:53:c0:0d:e4:80:68:fb:f5:00:34:2b:57:60:
                    1a:54:f0:3b:e4:ba:61:f1:a7:52:c1:e3:f4:6f:f8:
                    ea:09:fd:98:66:ea:c9:15:76:8e:65:28:f8:40:68:
                    9f:3a:dc:c3:c7:92:da:c7:c9:69:4f:91:48:e6:a2:
                    89:9f:3e:ae:02:12:02:f2:08:a8:53:b6:37:e8:bf:
                    bb:4c:d0:44:4f:e8:19:f2:1c:58:9c:1d:d4:6f:40:
                    ae:32:8f:cc:73:6b:40:d9:f1:0e:af:c9:51:ef:ca:
                    9a:91:97:a9:39:56:82:df:2d:33:7a:bd:26:34:32:
                    69:68:25:fe:d3:f2:6b:24:ff:16:ba:54:b3:84:ea:
                    3f:50:0b:a0:3a:c3:68:9c:9c:d3:41:69:ab:19:ef:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:33:5F:41:01:E0:1B:F1:F2:EA:B6:0C:98:54:AF:77:59:84:5F:83
            X509v3 Authority Key Identifier:
                keyid:0F:05:6D:BB:4B:20:18:3C:74:04:AD:3C:EB:69:7C:96:C6:2E:BC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DwVtu0sgGDx0BK0862l8lsYuvIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:39:b8:b3:d4:6e:01:68:70:dc:8c:20:b7:b8:44:e8:85:
         e8:09:15:84:59:df:66:a8:df:fc:d2:f1:74:45:25:2d:61:56:
         0a:1a:1c:0b:d9:f9:a4:ee:c1:f2:9e:fc:12:32:d6:b8:d4:b6:
         20:d2:95:cc:1c:4f:70:d4:2d:57:f1:e7:42:b1:7a:df:0d:34:
         ba:e8:4d:88:88:c1:84:17:6a:2b:53:50:7f:b5:a6:e4:52:94:
         0e:55:0a:72:30:86:3a:92:57:78:16:65:ed:29:f0:56:07:3a:
         27:6a:e5:a7:00:59:3f:b2:c8:a6:8a:2c:01:31:33:d0:5c:e2:
         e7:b5:6d:8c:5d:e1:d3:5b:81:39:5d:7d:80:2c:e3:3b:d9:74:
         f7:8f:8c:2c:92:2b:a2:26:60:3c:89:2d:1d:06:dd:c3:68:da:
         fb:32:65:37:77:17:95:32:bb:90:cd:e9:95:50:1b:05:fc:50:
         ee:92:9b:43:38:6f:e2:01:af:1c:74:2f:15:1b:8d:ed:ca:cc:
         14:f5:59:57:b4:00:aa:05:50:fa:78:38:f7:36:71:bc:a2:13:
         d4:2f:7f:c2:76:91:e4:a6:c4:4d:a4:55:3c:f4:6c:d8:e4:f3:
         42:cc:13:8e:ee:cd:6c:9e:e4:b5:0d:5b:48:79:b6:e8:f3:71:
         aa:f7:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:10:09 2026 by rpki-client