Error: rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
File:                     3YPIwAXNcQS4JubaokvJUXkImqM.mft (raw, json)
Hash identifier:          6XgiHBucUwPNB4LHKR7SrbsOmkSYHdn1yFhMNcxQewk=
Subject key identifier:   AC:01:C3:55:FD:43:56:6E:94:FD:32:78:73:9F:C0:77:D1:E0:F3:E0
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Certificate issuer:       /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial:       077E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
Manifest number:          077C
Signing time:             Fri 25 Sep 2026 02:21:14 +0000
Manifest this update:     Fri 25 Sep 2026 02:21:14 +0000
Manifest next update:     Sun 27 Sep 2026 02:21:13 +0000
Files and hashes:         1: 3YPIwAXNcQS4JubaokvJUXkImqM.crl (hash: 7ItoUrR8c7mS/XmjfUC/BYoIYmW2YZzXyNEZBETu0Ao=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1918 (0x77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36162E8AF, serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
        Validity
            Not Before: Sep 25 02:21:14 2026 GMT
            Not After : Sep 27 02:21:13 2026 GMT
        Subject: CN=6ab5da9a-e169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f8:4b:81:58:42:34:4b:55:dd:04:6b:e8:38:
                    8e:9b:9f:96:cb:0d:e2:22:6b:b5:8d:20:34:7f:29:
                    bf:c0:00:fe:97:a6:38:77:63:bb:4d:9b:e2:82:85:
                    90:1a:c5:a1:31:a5:49:be:b1:29:82:d7:8c:3f:a8:
                    31:9c:f0:d6:be:d7:31:e9:60:50:2e:f0:f6:e7:b4:
                    51:5d:76:a8:6b:2a:ed:f4:37:a7:ec:73:ac:05:10:
                    92:7e:df:39:5d:29:11:1f:f3:31:26:34:32:f9:22:
                    ae:4a:33:3c:77:61:ae:19:86:f4:e0:6e:74:0a:eb:
                    91:a8:24:12:f2:72:69:e3:0d:c0:d2:bb:94:88:b2:
                    b4:a4:23:ef:6d:6f:3d:03:29:98:7b:c4:8b:b9:d6:
                    c3:ea:e2:b1:c2:7f:c7:30:78:0e:fc:7d:2d:b8:f1:
                    9e:d6:21:a4:d9:fc:1e:d4:07:74:9b:94:09:68:63:
                    db:31:30:fb:0b:03:32:e7:28:c7:80:fc:44:c2:aa:
                    c3:e2:f3:84:44:22:ab:61:3c:ca:87:52:9e:3d:69:
                    d6:70:8a:3c:03:13:e3:e2:be:32:32:46:5f:ce:d3:
                    c1:5b:13:ec:12:28:e1:0f:e1:06:b3:03:7d:c8:65:
                    0e:bd:62:1f:87:d5:04:a9:d9:7e:e0:10:09:84:c0:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:01:C3:55:FD:43:56:6E:94:FD:32:78:73:9F:C0:77:D1:E0:F3:E0
            X509v3 Authority Key Identifier:
                keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c6:ad:ce:84:d5:0f:9d:68:4d:35:0b:0f:2c:1f:eb:fd:4f:
         b3:24:83:64:b6:8a:ec:63:82:c8:ef:0b:cc:cc:59:e5:50:d9:
         7c:14:2d:5e:dd:f8:8e:cc:16:34:1c:2a:4d:f7:4e:33:32:93:
         3a:01:51:44:c7:99:d8:b6:9b:6a:76:6c:1c:50:b2:f9:fe:4a:
         ab:3b:96:b4:5a:f0:67:fa:25:f2:3b:53:16:a0:52:b5:35:1d:
         3b:db:d4:0d:5b:7d:e3:19:90:78:a2:37:5b:b2:23:b5:5e:11:
         77:7c:fd:81:4a:35:e9:02:80:49:0b:f5:f0:4f:64:7d:08:4f:
         da:2c:3c:ff:2b:80:b8:ef:88:99:ed:fc:57:cb:3a:21:f2:ef:
         3f:af:c2:88:34:ab:05:63:d2:02:7b:6d:af:e4:65:aa:4f:a8:
         e0:a0:a5:43:0e:c5:83:f0:8e:39:29:c3:03:65:74:80:cf:e1:
         45:6c:27:12:40:91:72:d4:30:81:5d:10:95:3d:48:e1:b4:8c:
         1b:53:0e:71:8a:6c:8e:3d:ba:38:a1:27:67:81:49:cf:05:59:
         bf:d3:a6:a0:a5:3d:1c:5a:15:f9:71:9e:c9:18:66:d5:d2:7a:
         2b:c8:e0:a0:2c:35:72:30:36:30:cd:2c:63:d1:d4:65:c5:14:
         2c:62:16:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:46:02 2026 by rpki-client