Error: rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
File:                     9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft (raw, json)
Hash identifier:          4mMQC4txyqHojLRKZVa/8NKcL6HtDqmk3335lqF9qeQ=
Subject key identifier:   45:40:54:98:EA:45:C1:66:E4:34:C9:6A:F7:8C:0B:69:4D:30:6C:36
Authority key identifier: F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
Certificate issuer:       /CN=F361D299AR/serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
Certificate serial:       0E70
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
Manifest number:          0E81
Signing time:             Sun 15 Nov 2026 01:06:46 +0000
Manifest this update:     Sun 15 Nov 2026 01:06:45 +0000
Manifest next update:     Tue 17 Nov 2026 01:06:45 +0000
Files and hashes:         1: 9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl (hash: 3xQTdnLyTrnbk6ORBIFt1imR2zdl+6+gahls6F8giMo=)
                          2: 9602703EF4F511EFB099CDB5762E951A.roa (hash: qISfxBRfXwveVBfmScYlezjIVFsZHVW0rkfxNlst1oA=)
                          3: 0809CD56F2A511EF9A1CF353762E951A.roa (hash: 4iGumIvcUo97EFB8blys/rxgOUPw+Tx3jCeD20ZEIcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                          rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3696 (0xe70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AR, serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
        Validity
            Not Before: Nov 15 01:06:45 2026 GMT
            Not After : Nov 17 01:06:45 2026 GMT
        Subject: CN=6af905a6-b098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:17:c8:81:03:00:f6:83:62:8b:7b:dc:62:
                    9a:e0:ea:d5:7e:65:ac:40:95:90:95:b5:f5:c6:88:
                    7f:91:91:d1:9a:9b:76:a1:f1:f8:49:19:4c:e0:05:
                    28:a7:1a:60:30:e5:24:b7:e8:d6:91:e2:71:d6:07:
                    25:41:1a:eb:c3:1c:9b:4d:67:86:5e:67:d7:6e:8e:
                    3d:b2:99:61:14:c4:5c:4d:6d:bd:1a:8c:4f:d9:7f:
                    19:d6:3d:1e:49:b0:9e:d5:78:41:74:41:2b:25:99:
                    0e:91:34:16:ad:3b:4c:7f:4e:2d:3b:f4:16:70:cb:
                    7e:64:ea:08:cf:63:34:68:ad:04:8e:ee:7a:e6:ba:
                    55:7a:42:4a:25:28:a1:82:42:22:00:f3:17:81:96:
                    6a:48:01:65:80:cf:73:2e:7a:2b:03:a9:f7:30:de:
                    8e:51:fc:d4:7a:81:71:e3:16:e0:e3:ba:db:9b:1c:
                    6e:0a:61:24:f0:47:9e:26:11:7b:50:06:6f:77:81:
                    9e:ed:2f:12:d9:5c:f3:b4:3d:d2:61:74:d1:5d:16:
                    40:d3:1f:4e:2c:ed:58:f7:83:a9:19:db:aa:50:58:
                    7e:1b:ba:f1:1e:fe:d2:be:4b:aa:32:0b:ef:a7:f7:
                    ba:e0:69:df:01:82:88:6b:f8:80:ec:71:6a:f3:43:
                    59:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:40:54:98:EA:45:C1:66:E4:34:C9:6A:F7:8C:0B:69:4D:30:6C:36
            X509v3 Authority Key Identifier:
                keyid:F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:29:6e:af:dc:05:fb:66:5a:b8:62:d9:50:09:cf:18:fd:
         3e:26:03:a4:1f:24:4a:db:42:b7:ec:6d:92:a9:21:c3:90:63:
         cf:48:ea:1c:87:a0:66:34:da:9e:95:94:fe:1b:13:45:3b:fb:
         bd:c8:e0:f9:01:b4:69:92:72:b5:20:3d:9c:0c:11:fc:24:5b:
         20:64:08:1c:d7:2f:4f:04:6d:0d:f4:10:8b:2b:24:b4:3c:16:
         2f:ba:10:64:a1:2c:06:eb:f0:05:1d:01:9f:f3:7d:67:76:95:
         2f:2d:47:ec:6c:32:a2:8e:53:56:e3:9b:76:c0:2b:20:30:fc:
         dc:34:7a:88:42:5e:b6:b3:33:4f:17:65:2f:4d:2c:30:44:ef:
         74:89:a9:88:ec:7a:ea:d3:09:87:62:40:3b:0a:bb:6e:b1:18:
         1f:dd:3f:d1:2b:bc:cd:ee:51:b9:e4:ef:87:ed:7e:8c:12:59:
         86:2d:51:f2:68:c7:43:73:a0:3d:00:2e:17:3e:b5:06:d8:eb:
         22:8e:a3:b3:fd:11:29:22:7f:36:30:af:81:23:39:e3:b7:f3:
         2b:78:84:c9:f2:f0:c1:3f:a0:57:f7:3e:b8:11:ab:60:f4:59:
         79:9d:8c:99:69:b3:ec:44:26:ca:c2:53:cd:b8:85:70:70:83:
         5c:7a:e9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:13:26 2026 by rpki-client