Error: rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
File:                     LmD5YTFKp9b93e6durMSN0cF5ss.mft (raw, json)
Hash identifier:          xU62wovY3xduOFBttd8o5i4nZDVzv5zt51gmXXhd8Co=
Subject key identifier:   E1:AB:61:A0:72:FE:AF:58:25:E8:74:E1:2A:5F:68:DA:99:77:95:89
Authority key identifier: 2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB
Certificate issuer:       /CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
Certificate serial:       0465
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
Manifest number:          0464
Signing time:             Mon 21 Sep 2026 03:42:41 +0000
Manifest this update:     Mon 21 Sep 2026 03:42:40 +0000
Manifest next update:     Wed 23 Sep 2026 03:42:40 +0000
Files and hashes:         1: LmD5YTFKp9b93e6durMSN0cF5ss.crl (hash: VuA7K89d+zilZ6PKAa0ISAfcEiA51P1VHpUPAmQSng0=)
                          2: 333100CC56E711EEB82D22544AD9E6FC.roa (hash: iWB0O9f+LLwbK/f70tuWF05AYGrsYH+zV7rCgvpguSc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125 (0x465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC8A0AF, serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
        Validity
            Not Before: Sep 21 03:42:40 2026 GMT
            Not After : Sep 23 03:42:40 2026 GMT
        Subject: CN=6ab0a7b1-e333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:b5:a6:a1:ba:e0:e8:1b:74:0a:0d:1a:a3:
                    9a:aa:47:5a:00:4a:a8:bf:55:9a:bb:32:b7:26:be:
                    c1:52:e9:44:bf:35:5e:48:b0:c0:03:6f:42:f5:dd:
                    0c:98:0e:4c:5c:a3:ee:47:a4:57:32:b6:bf:1b:20:
                    4c:d8:57:9e:8d:29:89:83:15:ca:dc:82:46:dd:34:
                    6b:46:fa:ab:14:92:f1:50:bd:1a:e3:0f:fe:ea:22:
                    a2:23:30:a4:60:ee:f9:8e:85:f4:5f:74:e5:f3:02:
                    29:60:f7:ab:63:b6:a8:04:d4:32:43:85:3c:6e:6d:
                    00:dd:88:85:44:1d:b0:83:00:35:86:8a:ba:f9:63:
                    88:35:a6:a3:36:5f:d9:e2:67:f0:0c:5a:96:dd:0d:
                    9d:c5:c0:49:e3:da:3f:aa:90:c6:22:24:2e:ac:29:
                    4a:ef:bc:8a:51:aa:fb:cd:0a:aa:6c:64:c4:3a:de:
                    89:a6:21:8f:a2:6f:83:ca:54:94:e8:d4:68:bb:3c:
                    09:91:42:35:37:ac:4a:00:05:08:8c:84:0c:14:8b:
                    d6:a0:52:bd:5b:a7:60:36:8b:b4:93:40:aa:9b:04:
                    6f:a2:4f:c6:77:6f:75:07:2f:99:a9:b8:be:95:76:
                    ed:02:b2:5c:30:76:b9:24:0c:86:f1:1a:45:e6:35:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AB:61:A0:72:FE:AF:58:25:E8:74:E1:2A:5F:68:DA:99:77:95:89
            X509v3 Authority Key Identifier:
                keyid:2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:0e:ad:c2:18:20:18:a1:ba:91:44:ac:1f:75:51:19:29:d4:
         77:6f:e6:e5:e5:1a:37:74:ba:a4:29:02:0d:63:6e:19:f6:95:
         69:7f:54:6c:53:1c:68:6d:75:d4:9e:2a:25:29:06:e6:ed:35:
         87:b6:ca:24:f6:a1:28:f5:24:d7:c2:99:34:e4:de:74:c4:b6:
         3b:c8:44:64:d8:15:d6:05:df:a9:b8:4d:cc:a8:9e:07:cd:ec:
         51:32:d8:6c:05:8b:e0:2d:c4:d3:55:d7:f0:bc:e2:ee:85:13:
         1a:40:13:c4:82:5d:85:b3:9c:11:19:c7:2b:c8:1e:b3:96:29:
         2f:b5:00:49:03:3c:d7:09:b2:b5:46:3f:dc:8c:67:48:4a:ba:
         15:c5:81:57:86:de:fd:ed:7a:6a:91:25:1d:f2:fa:8b:7e:fa:
         21:3a:18:4a:f2:28:ce:47:68:e0:45:9f:68:69:b7:46:b5:9d:
         b2:b8:ee:1d:1a:c5:60:9a:c5:44:c5:81:d1:a0:64:a0:1a:e4:
         cb:5a:e6:62:ab:1f:a3:76:82:93:52:fa:df:73:3d:2b:75:58:
         ba:e2:c1:aa:01:81:05:70:c2:ff:88:ca:6e:48:0a:c1:db:d9:
         7f:6f:f4:2b:00:65:6d:d6:3c:b6:94:a0:44:2c:74:29:11:58:
         e7:9b:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:36:05 2026 by rpki-client