Error: rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
File:                     9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft (raw, json)
Hash identifier:          SWi9Ac1EzQxwSeY4dbsTDgv195IJ8ClGbtE/2DxlHTM=
Subject key identifier:   E9:69:16:80:7B:5D:0C:3E:B9:37:EC:5F:34:CE:24:46:6D:1A:F1:E0
Authority key identifier: F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
Certificate issuer:       /CN=F361D299AR/serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
Certificate serial:       0E3B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
Manifest number:          0E4C
Signing time:             Wed 23 Sep 2026 01:06:57 +0000
Manifest this update:     Wed 23 Sep 2026 01:06:57 +0000
Manifest next update:     Fri 25 Sep 2026 01:06:57 +0000
Files and hashes:         1: 9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl (hash: wYc1XL/WYeMWVwVmR56aldf8PIoWfaY/N9SRvvBwfEg=)
                          2: 9602703EF4F511EFB099CDB5762E951A.roa (hash: qISfxBRfXwveVBfmScYlezjIVFsZHVW0rkfxNlst1oA=)
                          3: 0809CD56F2A511EF9A1CF353762E951A.roa (hash: 4iGumIvcUo97EFB8blys/rxgOUPw+Tx3jCeD20ZEIcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                          rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3643 (0xe3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AR, serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
        Validity
            Not Before: Sep 23 01:06:57 2026 GMT
            Not After : Sep 25 01:06:57 2026 GMT
        Subject: CN=6ab32631-6d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:e9:3f:4a:f7:6b:94:31:4f:b4:cd:dd:8c:
                    8e:61:a7:8c:5d:90:f8:47:0b:6f:7c:e5:f2:f1:93:
                    b2:58:35:fd:38:b6:30:7d:90:50:7d:80:31:ff:af:
                    fd:19:d6:b7:79:d9:41:96:d3:c9:be:d3:66:03:2d:
                    5f:70:cf:a3:ff:b7:1d:3a:37:6c:c7:4d:8d:7c:79:
                    28:d9:d1:53:aa:41:b8:42:34:d9:70:7d:a7:b1:74:
                    21:89:fc:8a:8e:50:1c:79:01:5b:ee:f7:d4:a9:e9:
                    88:72:15:9e:5f:87:44:89:0f:5c:6b:60:af:42:cd:
                    cd:5e:6c:17:6e:37:5e:b9:b4:4e:e1:62:c6:35:df:
                    33:a5:c3:72:2d:53:cf:25:99:fc:36:f4:76:68:69:
                    f5:0f:fe:40:a1:bf:93:2c:d8:9c:7b:2b:71:9a:40:
                    c2:5b:44:59:d9:4f:ba:16:0b:01:eb:cf:89:37:16:
                    2c:75:a5:b3:c5:ae:88:25:99:b7:40:ee:f3:bf:15:
                    4c:b3:1a:5d:d0:6b:2e:d0:e5:00:04:ec:3f:99:44:
                    fe:a4:d7:73:a0:42:87:21:3d:9b:46:26:6a:8d:8d:
                    6f:ca:7c:d6:37:a4:11:47:f4:8c:ab:ad:a8:89:5c:
                    b1:17:7d:a5:b7:34:7a:46:2b:2a:9d:c6:b1:74:ee:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:69:16:80:7B:5D:0C:3E:B9:37:EC:5F:34:CE:24:46:6D:1A:F1:E0
            X509v3 Authority Key Identifier:
                keyid:F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:5a:bc:a0:58:d1:cc:52:03:91:96:9b:67:a0:27:ce:8e:a6:
         a6:a5:04:33:d5:84:78:11:3e:2f:9d:71:b1:31:44:51:af:a5:
         8c:cd:60:f9:15:2c:35:e2:20:24:97:0d:22:57:b6:27:04:4c:
         21:80:a4:80:dd:1e:35:73:12:2c:e3:bf:4d:87:26:61:c7:6d:
         fa:c0:2c:2b:87:87:e6:bf:c0:60:d5:75:c3:da:db:c0:61:ab:
         83:47:3a:e1:18:a0:7d:61:a3:de:0e:9d:d1:ed:d7:17:f6:db:
         ba:88:75:c0:52:e7:51:36:4e:1c:f9:2c:74:0e:31:a6:05:bf:
         5f:70:55:46:cf:71:4d:f8:e3:68:27:4f:37:4c:1e:d7:d4:ce:
         17:1e:b2:f3:28:6e:d1:ac:58:59:f2:09:ef:1e:01:af:9e:64:
         28:45:82:13:a5:e1:b8:cf:fa:30:e4:9f:fa:ef:a0:bb:36:a1:
         0f:ec:61:cf:e3:98:3b:a8:dd:ec:dc:a2:e0:c8:a1:57:71:f8:
         b4:8c:09:c8:87:57:6c:b1:4c:6c:0d:d2:06:e4:e1:81:00:d4:
         f4:5e:41:84:03:b0:91:ff:11:dc:77:2d:4a:1e:ca:39:27:51:
         59:63:aa:09:e9:a5:62:3a:01:b4:a4:43:54:9a:2d:3b:22:66:
         4f:33:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:53:44 2026 by rpki-client