Error: rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft
File:                     FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft (raw, json)
Hash identifier:          tdRxYkFVhiiKhqdvlYMAJRjenrC7Je1foZuKs2e4I/E=
Subject key identifier:   2C:41:FB:7D:9C:1C:87:D7:65:DE:8E:07:38:BF:6B:19:EB:0C:16:79
Authority key identifier: 15:5E:3F:65:1A:44:3D:A5:FF:1B:E0:CE:63:0B:9F:52:9E:0D:8B:82
Certificate issuer:       /CN=F36FB872AF/serialNumber=155E3F651A443DA5FF1BE0CE630B9F529E0D8B82
Certificate serial:       DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft
Manifest number:          DC
Signing time:             Mon 28 Sep 2026 05:31:30 +0000
Manifest this update:     Mon 28 Sep 2026 05:31:29 +0000
Manifest next update:     Wed 30 Sep 2026 05:31:29 +0000
Files and hashes:         1: FV4_ZRpEPaX_G-DOYwufUp4Ni4I.crl (hash: VQYo74L7CT8TNpwTu/ctzWi9SRn8nNPfDESClTzlwpY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB872AF, serialNumber=155E3F651A443DA5FF1BE0CE630B9F529E0D8B82
        Validity
            Not Before: Sep 28 05:31:29 2026 GMT
            Not After : Sep 30 05:31:29 2026 GMT
        Subject: CN=6ab9fbb2-92b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:95:4c:58:03:c7:84:b1:41:50:3f:e4:e3:d5:
                    07:aa:1e:bd:5e:d6:d8:c0:2c:78:f0:89:c6:c8:ff:
                    08:a9:7a:cb:fd:82:a4:32:4e:f5:a1:d6:de:9c:d6:
                    e0:d2:59:ed:30:a5:f8:c3:6e:f4:62:77:4c:6a:86:
                    22:5e:77:fb:bc:f8:e1:68:cb:d8:c2:bf:47:5d:63:
                    67:21:28:42:05:c5:3b:a8:14:9d:99:60:15:ea:34:
                    4f:df:77:0e:62:b4:70:86:2d:f5:e0:5f:ea:68:93:
                    88:b8:d8:15:0d:6c:c5:d1:7c:9a:8c:c0:fc:87:1f:
                    3b:d7:d9:b2:9f:51:4c:3a:7f:3a:a5:0a:92:dc:10:
                    86:16:17:78:74:16:ed:68:20:01:5c:b2:02:62:15:
                    52:6d:9e:32:b9:00:31:13:5a:f8:ba:4b:e0:8f:48:
                    7f:f3:91:9d:d5:16:7d:e8:5d:7e:45:d3:3f:3a:38:
                    2b:17:ff:83:c9:d4:3a:fd:55:fb:33:c6:15:b5:50:
                    f8:ae:5c:bd:ae:5b:33:37:61:cc:27:1e:4a:dd:90:
                    9d:af:41:d4:6b:21:f8:62:04:81:1c:b9:26:b3:4f:
                    ca:94:bb:ad:03:31:88:92:dc:1d:6b:3e:ce:50:5a:
                    2b:3c:8e:31:2f:ad:6b:ba:97:09:b1:21:73:7e:62:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:41:FB:7D:9C:1C:87:D7:65:DE:8E:07:38:BF:6B:19:EB:0C:16:79
            X509v3 Authority Key Identifier:
                keyid:15:5E:3F:65:1A:44:3D:A5:FF:1B:E0:CE:63:0B:9F:52:9E:0D:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:11:57:6a:a9:72:d9:86:e2:83:d4:4c:30:80:86:6c:60:
         3e:8f:7d:94:e6:96:9d:53:0a:27:83:bd:f9:3b:e8:a4:1e:40:
         d7:cd:e6:85:09:98:b4:df:dd:ef:d1:47:5e:56:c0:16:03:19:
         94:f7:c9:c5:24:55:fa:5e:08:fd:86:0c:f4:27:5c:51:64:7d:
         be:77:07:cc:1d:72:fd:6e:8d:59:2f:e2:e4:07:16:a1:b9:7b:
         bb:bf:d5:8e:fc:3e:d2:9b:88:0a:7d:db:5c:e2:d4:33:d1:ad:
         74:f4:71:61:58:59:e4:38:6b:30:9e:72:3a:09:74:39:39:43:
         a9:ce:8f:0a:c4:71:7e:c6:ca:84:f8:ad:58:4b:2f:12:42:f4:
         67:32:f3:9b:db:25:7a:d4:78:9d:04:dd:b1:f5:e0:28:4d:e0:
         c9:b9:c5:96:07:7c:cd:5e:52:61:65:25:e4:07:c1:d3:93:15:
         b6:bb:1e:6c:00:54:58:37:a1:3d:25:66:59:cf:e4:d7:93:0f:
         ff:d7:07:e9:d9:95:a4:14:06:37:d2:e0:a5:03:8f:2b:f9:9f:
         b4:e8:8a:c5:f7:1b:ee:d4:bd:ee:60:53:8e:fe:32:93:26:13:
         43:12:f4:87:1f:c4:d2:fb:01:fa:ed:12:c9:d3:cb:64:88:f3:
         d9:42:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:50:46 2026 by rpki-client