Error: rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
File:                     0JparVoXc9hrHSbdXRxET8ys9uQ.mft (raw, json)
Hash identifier:          PoboOTCP22KpD137fZOUxcuNHguyNeX8BDanaG4WKyI=
Subject key identifier:   DE:2A:EB:7F:E7:41:B9:DD:E8:D4:5B:28:1D:95:83:02:79:C2:EE:29
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Certificate issuer:       /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial:       035E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
Manifest number:          0352
Signing time:             Tue 13 Oct 2026 04:18:10 +0000
Manifest this update:     Tue 13 Oct 2026 04:18:10 +0000
Manifest next update:     Thu 15 Oct 2026 04:18:10 +0000
Files and hashes:         1: 0JparVoXc9hrHSbdXRxET8ys9uQ.crl (hash: wqus23Sl0iWFKxM17hzDgMp5J3L768F6SXgdJeAPtYc=)
                          2: 5D97EC882D1611F19AC068E9DAE4EC9C.roa (hash: Nd824+zIPH9JTtjxmpkoGfMedFkSr7B3dV2aK/j/RZE=)
                          3: F5DFDF7A2D1411F183B08EE0DAE4EC9C.roa (hash: bDSLtErnrdZFcDBbgffxh/78ctsTZ8XFV1WdiU3csZI=)
                          4: E5E1D8322D1211F18330CFD4DAE4EC9C.roa (hash: pDD/K1s5jIYNoQOdvaFU2JduYhwGAyTs1meNSV1fFgk=)
                          5: A6AEED562D1411F182180DDDDAE4EC9C.roa (hash: X98HrtvjqtIk7250C17DJqnpkquwvjxOdANpHQT1YOE=)
                          6: 005277CA2D1411F19F47E3DADAE4EC9C.roa (hash: hfLkKQB462eRt13ViRiwse3oNTJII/TyMAwJoMbhFu0=)
                          7: 398848402D1311F1BAA22FD5DAE4EC9C.roa (hash: yP7+AAFHj7Sjoi+sbE5FIStkJLQJ5hzb+Bv5zDj3YPY=)
                          8: 4E367F362D1411F193F6A2DCDAE4EC9C.roa (hash: Hva6WC1MR0w9fxXELLwTc8wp0/s+of2OUmb/NZl5gnY=)
                          9: AECB1C142D1711F1B01831F1DAE4EC9C.roa (hash: JQBqoZnnwg76xS1Fp0vIiTMe2ujGiBdmDQrJPFV/kXI=)
                          10: B6D306CA2D1111F1AF5753CDDAE4EC9C.roa (hash: i7QZyG/nMeWTcoiMA1ETxMPD9HBiOdVz3lcsX0wQVo0=)
                          11: 27C816362D1711F19E094EEDDAE4EC9C.roa (hash: UVfs81n2SMgjtWjD2FisacME40GhAjNWkbUeCXyweSw=)
                          12: 658345642D1111F18F99FACCDAE4EC9C.roa (hash: 3IDzrwpzMmpVJX4D/2AwsQinkoMvGk+PnE3f0W1tG9w=)
                          13: 41C6D1002D1511F1BC8AEBE0DAE4EC9C.roa (hash: xtq/+9B10Xvwdvmepm+gxrmkIEDZCZ6b5ji5Ft9YF0w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
        Validity
            Not Before: Oct 13 04:18:10 2026 GMT
            Not After : Oct 15 04:18:10 2026 GMT
        Subject: CN=6acdb102-bef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:cb:e0:13:b2:c1:4c:46:91:5c:16:88:38:
                    6d:4d:af:ad:ea:eb:fd:c7:f8:44:b3:a2:70:1a:e9:
                    74:df:2c:db:6f:76:24:c9:36:5b:c4:c5:fb:9e:6c:
                    df:b8:80:0b:3e:ce:f1:f7:09:0e:13:b2:71:89:04:
                    b6:81:b5:b0:b0:0a:09:aa:b6:98:1a:7e:a7:65:94:
                    29:a5:c2:9c:26:9e:dc:9b:d1:29:b5:2e:87:5b:14:
                    fe:59:b8:73:65:bc:af:a2:51:c7:5f:c2:bd:b7:50:
                    b9:e0:95:4b:41:4d:a5:fd:39:97:e7:08:ec:ce:d0:
                    82:79:45:bc:55:b8:4a:7d:4b:d4:d1:6b:8b:72:fa:
                    9d:15:b1:53:5b:a1:0c:a2:7a:08:52:b4:06:99:00:
                    7c:fc:4f:34:93:13:a6:c0:1c:95:d4:a0:58:ee:72:
                    56:78:9d:45:90:fe:09:e4:2d:23:1d:96:13:f1:ff:
                    6c:7d:96:f7:c2:23:34:c2:24:85:87:75:5f:53:bb:
                    a0:c4:c1:66:b6:fc:66:e0:57:c7:66:8a:eb:70:f1:
                    01:27:af:aa:a6:95:65:d6:7e:a9:36:6e:05:3f:48:
                    65:44:da:c5:f8:e7:54:00:f9:01:67:3f:32:0e:44:
                    57:55:6b:7c:ae:fe:ce:ae:9a:b1:70:8d:37:ab:63:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2A:EB:7F:E7:41:B9:DD:E8:D4:5B:28:1D:95:83:02:79:C2:EE:29
            X509v3 Authority Key Identifier:
                keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:05:6d:49:04:b0:9b:a5:4d:b4:bd:3a:27:96:b5:48:57:70:
         33:de:34:7c:f9:fb:d9:82:6f:97:b4:20:05:77:7c:b8:d4:77:
         89:98:82:31:0d:6f:87:90:63:8f:5a:c1:03:d2:f1:03:d9:97:
         73:6f:aa:ce:38:85:9f:ba:40:d9:9b:7a:57:71:34:6b:d8:95:
         c1:cd:f3:02:ac:59:c4:d0:3f:61:e9:06:07:de:ac:0c:16:a4:
         2d:4f:06:9d:00:b3:f2:82:cb:46:b0:05:5f:76:5c:05:a3:79:
         df:5c:1f:07:3b:bb:8f:95:ea:a9:c3:26:b4:37:3f:75:33:c1:
         46:91:87:fb:cd:08:76:24:bc:ac:f5:88:86:c1:d3:64:37:a2:
         4b:3d:db:f5:b1:61:e4:9b:c4:95:0d:7c:8e:f8:1d:1e:90:40:
         84:55:4e:02:a8:fe:e1:36:b5:a5:0d:a3:c8:67:b1:9a:26:8f:
         13:1d:d1:e3:b4:00:3e:d6:35:f0:56:bb:0f:be:3a:59:fd:a8:
         18:ce:4b:26:a1:8e:09:0b:0e:5f:8a:1c:23:2b:87:e0:fa:93:
         0b:3c:b9:18:fb:f8:17:96:21:76:20:38:45:43:f4:f3:56:b9:
         72:db:6d:34:31:0f:98:58:20:39:1c:b0:b8:ac:13:09:03:7c:
         d0:56:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:35:59 2026 by rpki-client