Error: rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
File:                     zQg69dJxoPLdqw8VC-sAXzipRrE.mft (raw, json)
Hash identifier:          Rcs8fkWesyOjHyVJXrKd67ODEiTCHpRXjIQxFP0Mhj8=
Subject key identifier:   25:5C:30:40:F6:89:EE:6E:55:52:01:F9:E2:BF:D1:F6:84:84:FB:26
Authority key identifier: CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1
Certificate issuer:       /CN=F36FF546AF/serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
Certificate serial:       0AB3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
Manifest number:          0AB1
Signing time:             Tue 13 Oct 2026 01:29:51 +0000
Manifest this update:     Tue 13 Oct 2026 01:29:50 +0000
Manifest next update:     Thu 15 Oct 2026 01:29:50 +0000
Files and hashes:         1: zQg69dJxoPLdqw8VC-sAXzipRrE.crl (hash: DfJoyDdeFnLqIeRMXQBhaeT1DDLT4i5rVYP5Tds3Flc=)
                          2: 1C0D37FA91F011E9AE72377FF8AEA228.roa (hash: 1FCw+Y3uXimIvmrFhMWwVuIRqYo1LXHBTvbNdEsq7eQ=)
                          3: FB654B0091EF11E99DA90E7FF8AEA228.roa (hash: nhD+pe2BQnxbsRGwyft8O4mm+dCir5b5n7iU0KS6i3g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 01:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2739 (0xab3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FF546AF, serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
        Validity
            Not Before: Oct 13 01:29:50 2026 GMT
            Not After : Oct 15 01:29:50 2026 GMT
        Subject: CN=6acd898f-76d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6f:9f:d0:c1:e4:32:56:d9:bc:f0:75:38:65:
                    9e:70:fa:5d:31:b3:5c:2c:40:64:75:0c:04:41:a1:
                    7c:81:42:24:59:7d:b0:9f:ec:68:43:c5:27:e5:1e:
                    1a:03:a1:81:b5:83:67:28:1c:92:dd:b8:6d:e9:93:
                    80:95:c8:79:75:42:4c:a1:3c:4d:da:f4:f2:e0:48:
                    4e:70:6e:b3:b0:6a:ed:c6:df:ab:17:1a:fb:59:6c:
                    a3:d5:77:ce:c6:0e:ff:05:6a:b3:fa:13:f1:f7:1c:
                    4d:13:d2:8c:a1:c5:81:b6:09:db:87:19:94:f5:d2:
                    8d:53:0e:98:5b:a3:98:20:c0:62:17:ed:a9:1f:f2:
                    5a:bf:aa:47:00:42:52:56:5e:c3:a2:84:b6:6b:a5:
                    a5:a6:9a:ba:26:0a:55:18:a6:88:83:6a:ca:6c:68:
                    a4:b9:9b:de:18:5e:56:ff:ba:d0:3c:b6:0c:5c:b8:
                    48:53:cb:31:b5:7a:65:a6:43:b1:7e:52:9f:02:24:
                    fb:bc:9b:b3:8f:28:78:05:aa:8a:26:4d:c5:80:b2:
                    66:8b:69:d0:cb:11:4e:5d:88:79:b9:e2:ee:ad:da:
                    d9:5d:03:82:a7:17:e4:01:e2:01:12:e6:d7:f3:2a:
                    ac:a1:6f:60:fd:10:35:d0:e4:e9:e4:b7:7c:26:0e:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5C:30:40:F6:89:EE:6E:55:52:01:F9:E2:BF:D1:F6:84:84:FB:26
            X509v3 Authority Key Identifier:
                keyid:CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:95:28:3f:87:14:53:90:66:19:76:ef:ac:bb:26:71:bb:93:
         66:2f:fa:88:40:ec:ee:92:d7:5d:69:bd:ae:f1:97:d3:5b:f1:
         92:c6:8f:37:cd:59:3b:63:79:97:2c:e4:20:b7:47:9e:ed:60:
         3b:19:ac:fd:3b:9b:2a:77:5b:71:14:fd:98:3a:20:00:15:a7:
         0d:d2:e4:4d:af:8d:13:48:54:94:4c:d0:a2:64:c7:06:06:65:
         b8:8e:c6:8f:38:26:0c:81:d3:21:23:f4:ed:98:dd:13:14:76:
         b3:f9:75:d7:73:2c:af:12:3f:01:41:ab:6e:93:e4:8c:7f:90:
         72:8c:f0:b3:97:9f:6a:0e:8b:f7:df:77:20:99:55:35:7d:44:
         2b:e9:67:a7:40:ed:31:69:f7:2a:3c:32:df:a3:a2:73:92:8e:
         e1:19:8a:57:26:f4:45:7f:98:a6:3e:2e:4b:39:de:59:08:c8:
         2d:55:20:2a:6a:39:70:66:15:51:2c:7c:ea:e3:d6:11:42:d3:
         c5:43:4f:40:b3:35:12:f8:58:30:07:70:81:11:b7:88:1c:6e:
         04:fd:c2:32:b0:e9:e0:f3:45:b5:48:40:e1:cf:67:ac:18:3f:
         33:63:5e:de:f2:50:77:fa:e7:f8:69:86:5a:68:96:c5:54:ad:
         02:35:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:10:53 2026 by rpki-client