Error: rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
File:                     yLmZuqJygsKF7OzIcOEZzeMPLnI.mft (raw, json)
Hash identifier:          myolaQqKcwY4FNJP1HCuSnjjsC060/t+sDz6J8x58Vs=
Subject key identifier:   69:D8:49:AB:CE:D4:13:76:DE:1C:65:6C:93:B1:2F:99:76:54:9A:82
Authority key identifier: C8:B9:99:BA:A2:72:82:C2:85:EC:EC:C8:70:E1:19:CD:E3:0F:2E:72
Certificate issuer:       /CN=F36FB339AF/serialNumber=C8B999BAA27282C285ECECC870E119CDE30F2E72
Certificate serial:       97
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
Manifest number:          94
Signing time:             Fri 09 Oct 2026 05:37:34 +0000
Manifest this update:     Fri 09 Oct 2026 05:37:33 +0000
Manifest next update:     Sun 11 Oct 2026 05:37:33 +0000
Files and hashes:         1: yLmZuqJygsKF7OzIcOEZzeMPLnI.crl (hash: Outo1gAvO+HdRnz3Rh7lg4b2+F0htYKYRpInbOTnjPw=)
                          2: B2F6B8EA59E811F190AC18A4CE1D38B0.roa (hash: sDvjDg9SOcbVOSO3Fq25uXtGAAl2I4Z/lvE9EJAbtlY=)
                          3: 97EB244E530511F18FD440A4CE1D38B0.roa (hash: JkuIP9qbDbHSq3/IwznxY1/qoooKEvF9e6/uwuuEF6c=)
                          4: F7429FB459E811F18F63FDA5CE1D38B0.roa (hash: VUPk69F6DD+hVqLu9d4kCAXXTSFw8Fj0vDPy/DGBIiI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 05:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB339AF, serialNumber=C8B999BAA27282C285ECECC870E119CDE30F2E72
        Validity
            Not Before: Oct  9 05:37:33 2026 GMT
            Not After : Oct 11 05:37:33 2026 GMT
        Subject: CN=6ac87d9e-5641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:2e:53:61:24:27:3c:0d:e9:40:fa:aa:78:
                    6e:53:52:28:a9:82:23:10:a4:29:b3:bf:7f:da:02:
                    01:59:38:8e:13:0b:1d:b8:b3:0d:d7:4e:25:73:22:
                    64:59:8c:1d:32:ff:73:a0:e8:2d:f6:22:aa:3c:d4:
                    54:c3:bc:77:14:34:59:92:e3:cc:f5:2c:c4:31:9b:
                    e7:cc:94:5f:3d:53:39:65:9b:61:4f:f5:47:ed:5b:
                    fc:7d:46:c4:6e:13:69:0a:7f:f8:63:07:a0:bb:d2:
                    c2:8c:3d:85:38:0b:7c:28:75:51:97:21:f8:16:25:
                    8b:20:7d:86:24:ea:80:b0:1f:b0:a1:6c:0d:9d:d1:
                    b9:b8:66:b1:32:c5:5f:99:44:85:40:57:36:dc:ab:
                    03:3b:a0:23:b4:bd:22:b2:e2:1b:9f:26:e6:25:27:
                    81:99:dc:82:53:0e:5c:3a:1c:50:e1:94:b6:fc:21:
                    b1:73:15:61:19:41:02:61:1f:0a:17:67:98:4d:e1:
                    c1:bc:1e:35:e9:00:f5:0a:df:6f:ff:c3:2d:09:6b:
                    97:21:09:5f:58:fc:c4:07:40:ad:39:4a:08:c5:bd:
                    20:0a:ce:bd:38:9b:46:8b:7f:31:ee:01:cb:56:77:
                    6b:26:5f:6e:f6:e8:e6:49:c6:a8:0f:37:46:4b:1a:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D8:49:AB:CE:D4:13:76:DE:1C:65:6C:93:B1:2F:99:76:54:9A:82
            X509v3 Authority Key Identifier:
                keyid:C8:B9:99:BA:A2:72:82:C2:85:EC:EC:C8:70:E1:19:CD:E3:0F:2E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:51:bf:5d:62:3c:99:b8:74:a1:83:7c:89:cf:24:ba:b3:78:
         43:70:a2:6c:ca:6f:d9:af:5d:88:d3:9e:fd:ed:7c:5a:7e:01:
         cf:1d:bc:a5:a6:9f:8d:0a:4e:7c:a2:9e:55:3b:54:e3:7a:87:
         f1:ba:8f:1f:24:83:5b:58:a4:a1:5a:7a:b3:d0:f1:55:0b:89:
         9c:1d:9a:9e:8d:73:51:bc:15:c6:67:6c:f1:4b:99:6a:e3:5a:
         54:8b:db:9a:a4:24:f4:ba:e4:90:06:71:ef:ee:1b:8e:89:ab:
         b9:f1:41:1f:12:57:db:10:7b:e2:f6:98:5b:7a:01:65:53:a2:
         50:de:b0:51:31:d1:c3:7c:0f:bc:67:af:d5:b2:e0:c7:58:10:
         3d:c9:c8:f3:d8:8d:78:6b:a6:9f:3a:5c:50:79:83:37:71:a2:
         2b:38:34:c5:85:73:a2:e8:06:e2:d7:57:be:17:e5:e5:f6:35:
         d2:6a:c5:0a:37:15:3a:a1:2b:9f:5d:d6:7b:b4:02:c7:69:16:
         f5:4d:59:76:f0:0b:37:b7:af:14:fc:fa:31:5f:dd:ba:bb:23:
         85:f0:5e:84:b7:ed:43:3a:5a:15:82:7f:02:13:36:f7:52:0c:
         69:91:1f:6c:6f:b1:0f:72:87:4b:58:4d:a8:f7:a6:05:61:c4:
         f9:25:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:52:26 2026 by rpki-client