Error: rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
File:                     DmdFN0vlZOXm1eI_aockyL53qVI.mft (raw, json)
Hash identifier:          AIQTK6DMT89TstctMDeKVtyJlRpWO8iXXQd5JwoUZ1c=
Subject key identifier:   66:A7:7E:37:85:D7:74:76:49:AB:F8:78:CB:4E:A4:DB:3F:7F:8F:50
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Certificate issuer:       /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial:       0DB3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
Manifest number:          0DB1
Signing time:             Sat 03 Oct 2026 01:07:51 +0000
Manifest this update:     Sat 03 Oct 2026 01:07:50 +0000
Manifest next update:     Mon 05 Oct 2026 01:07:50 +0000
Files and hashes:         1: DmdFN0vlZOXm1eI_aockyL53qVI.crl (hash: jmDt85Nt19mUhS7BQlWTqiT+zPaIjyoc5CYQHzN5eII=)
                          2: D7D7B3EA872311F189EC9403CF1D38B0.roa (hash: RwRZLPSGgelwelMUJAdNlv4rmTCGxyEsRVulPRLdE+I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3507 (0xdb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB628AF, serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
        Validity
            Not Before: Oct  3 01:07:50 2026 GMT
            Not After : Oct  5 01:07:50 2026 GMT
        Subject: CN=6ac05567-84d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:ae:41:03:0c:83:3b:f4:ff:4a:b4:9c:ab:
                    e2:b6:0e:06:75:0a:27:1d:c1:c9:0f:75:48:5e:30:
                    e4:c8:4f:bc:0a:06:98:9f:b7:48:f1:90:a9:3b:ee:
                    dc:2c:70:7f:8a:4e:ff:78:4b:bf:12:19:ff:f7:42:
                    70:1b:da:02:ba:da:ba:83:8c:6f:37:6d:b4:4b:13:
                    a6:ec:6c:9c:3c:fb:05:4f:a2:4a:e3:eb:4d:e4:8f:
                    85:87:2e:a2:42:8f:57:76:e0:71:5e:ec:86:98:ab:
                    d5:f3:f6:14:81:c5:5e:e8:55:98:4e:f9:4a:02:88:
                    c2:fb:7d:92:2e:15:62:66:9a:ee:3a:15:70:5a:e3:
                    95:5e:28:22:44:e2:dd:30:d6:9b:7e:f2:52:cf:6b:
                    12:57:9a:c8:06:3c:02:65:f3:e8:18:90:56:92:d7:
                    66:23:44:17:03:af:76:34:ca:b6:78:73:b3:43:24:
                    01:e0:fa:05:4b:29:46:6e:b0:34:b9:0c:59:8a:72:
                    a6:44:eb:bf:43:e7:fa:62:49:31:99:0b:9f:96:d0:
                    88:fa:a6:ec:81:7a:0c:a2:ca:ad:1b:05:81:e3:e3:
                    70:75:ed:0e:ca:60:35:7c:a8:3c:6b:cd:29:e3:2d:
                    6a:aa:53:bf:ef:7a:3a:8b:4d:15:52:f3:ba:f4:68:
                    cf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A7:7E:37:85:D7:74:76:49:AB:F8:78:CB:4E:A4:DB:3F:7F:8F:50
            X509v3 Authority Key Identifier:
                keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4d:4b:28:04:6a:e6:f7:fa:fc:46:72:d8:3a:7d:c0:7c:bf:
         cc:b3:bd:a6:e4:8b:65:32:fb:45:76:65:16:a3:15:4e:82:f6:
         32:db:6c:96:77:5d:92:c4:a0:37:41:14:85:44:c6:40:bd:5a:
         2e:17:94:26:d0:26:5a:e0:29:20:18:0b:59:15:12:e3:f3:c7:
         5c:45:37:98:66:3f:42:20:50:89:16:51:fd:80:c4:8b:97:5f:
         1b:c1:7a:f6:0e:2e:87:2b:a3:30:5b:e9:fe:c1:ec:f3:b9:3a:
         d5:3f:48:fc:d4:9d:0f:51:a7:b7:f4:28:7b:05:64:2e:34:a9:
         3e:2f:5b:f3:43:b1:6e:0b:d3:90:c1:bf:a8:5c:f8:fa:ae:55:
         2f:3b:31:63:fd:ce:11:b9:f5:85:62:81:9a:e6:4f:38:c3:db:
         4f:26:8c:31:aa:ba:52:0d:62:46:28:57:c4:85:9a:f0:e8:f7:
         14:90:b0:16:7c:0e:97:4c:3b:ac:26:3c:89:28:ca:4d:1d:0a:
         80:0a:89:33:c0:05:ea:fd:f9:68:fa:52:c9:05:86:43:6b:90:
         f9:de:8b:8a:f8:2c:27:51:57:f7:05:73:42:b8:da:87:d2:1b:
         71:c6:3c:d8:53:70:32:79:91:d4:e0:2c:b8:87:ba:6a:6d:62:
         af:a6:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:52:46 2026 by rpki-client