Error: rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
File:                     SbTWGQldlDKvZGCFPhR7710cSLA.mft (raw, json)
Hash identifier:          ttc+2w5gFpIyLFxVLFUS49SwtcONxu8G30BYv6ux89g=
Subject key identifier:   55:4E:1C:C3:23:58:09:CD:05:0C:82:F3:E9:8C:B7:07:1F:2B:24:CD
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       0260
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
Manifest number:          024B
Signing time:             Sat 14 Nov 2026 04:50:39 +0000
Manifest this update:     Sat 14 Nov 2026 04:50:38 +0000
Manifest next update:     Mon 16 Nov 2026 04:50:38 +0000
Files and hashes:         1: SbTWGQldlDKvZGCFPhR7710cSLA.crl (hash: q/j3fdUm4ZFSsqYXghGg1RaFNz9PoUtbzaU4+wRYR/4=)
                          2: 124218F4A87611F1BB343DF9CE1D38B0.roa (hash: 7EHzv9d4g2QUNpd55xIerKjIlh5gCJKWhi6MbdoooPg=)
                          3: 5F8889E2A87411F1AF5A0CF1CE1D38B0.roa (hash: ZI6rP4Gp3/DtbvaoWVZn0dTNJpCo1BXgWFPt5nON3jk=)
                          4: BBF1B41CA87211F1B8805AE5CE1D38B0.roa (hash: CUx3ktlqa3NJN1ypmfmN/V4lM1vS5fVnZweA/hAkGzU=)
                          5: 75018CA4A87611F1A1C132FDCE1D38B0.roa (hash: kaPlPZrYi9anHzP7oZ2VSGM+oAUmE8JgvU3k9ef0eAA=)
                          6: C97F4500A87611F18F9F4EFDCE1D38B0.roa (hash: kB0NGtDaNZn1ivrrDJOXtm8BpSuvK9KY0qQiiT++3mA=)
                          7: 9A811C4CA87611F18EBA3FFDCE1D38B0.roa (hash: Q1yCsbO/4tb2uOcA3OtCZWlXERe+h8BChe2+rgdheZk=)
                          8: 80DB21D6A87411F18EA41AF1CE1D38B0.roa (hash: OMxvbvxEMBZmoLJq4ipJyp1dZ6IwZtE6z+/zMaJZI6A=)
                          9: 86CCC9CCA87511F19EE685F5CE1D38B0.roa (hash: Ql444xzWdlYVBALETQlPegLVI3mdHZia7b7bn3tP4Zc=)
                          10: C5395942A87411F192243AF1CE1D38B0.roa (hash: rDD/CTI4I/2womxS5cG6nLACmEjIg25PIUXYZNK4Xgw=)
                          11: 9CDE6EE2A87411F1878E28F1CE1D38B0.roa (hash: Qd5ae98nyr7jSMmNSv52P+8u1CCj37qDdnvkFn1rYpQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Nov 14 04:50:38 2026 GMT
            Not After : Nov 16 04:50:38 2026 GMT
        Subject: CN=6af7e89f-76bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:94:04:04:b1:ae:8d:f4:2b:ed:15:c7:f5:
                    23:a7:10:bd:c7:f3:c9:99:7b:f1:ea:88:41:94:bd:
                    62:16:49:f3:bd:c8:02:b5:c2:bc:c5:1c:9b:98:5b:
                    31:1d:3a:ac:61:4d:7d:2d:94:1b:7e:b9:56:de:9c:
                    5b:45:87:54:03:df:71:a3:5a:ea:38:1c:cc:1f:e8:
                    31:d8:ed:0d:4c:32:a9:89:65:b2:0a:ef:8c:73:92:
                    d8:d7:41:e8:7b:f1:c3:3a:c5:51:35:63:37:3c:af:
                    aa:dc:ed:9c:69:9b:79:d8:58:13:0f:86:47:44:63:
                    69:bf:56:0f:8f:62:27:4f:17:c1:bd:86:8e:e2:ed:
                    5b:bd:77:4d:8f:f8:fe:58:40:1b:26:c5:84:45:a0:
                    17:cc:8b:53:f8:3e:27:3c:ed:32:13:6c:27:78:f7:
                    0c:3c:68:c3:e9:d2:af:fd:60:98:72:3f:b3:17:f7:
                    0c:32:8e:f1:b4:31:a0:ac:e4:c1:22:40:f8:ed:2a:
                    b5:fc:08:ab:9f:6c:6b:ac:45:32:21:77:68:7f:65:
                    96:a2:a8:41:7a:f4:eb:fb:6f:17:6c:53:fd:07:c7:
                    9f:7a:f5:89:c1:f0:a1:df:92:50:7b:78:43:76:91:
                    21:6c:71:5f:f2:8f:89:f3:94:e0:be:17:a0:a0:1e:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4E:1C:C3:23:58:09:CD:05:0C:82:F3:E9:8C:B7:07:1F:2B:24:CD
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:35:85:2d:20:b3:f9:c4:be:44:1e:ce:7c:26:5c:5a:e1:89:
         5b:d4:37:85:e2:d0:28:bd:2e:66:f9:7d:fb:6c:f0:53:a7:e5:
         e3:0c:6a:67:26:93:81:6b:49:b8:9e:1d:f3:db:2d:20:20:27:
         70:b7:d1:d6:63:c9:b5:04:fc:75:8d:a3:2f:03:0b:05:cf:7d:
         be:f3:a8:eb:75:fa:1e:c2:85:42:37:f8:63:9c:2e:5a:f9:f1:
         38:9d:21:5b:3b:a2:c5:96:84:6e:ad:2c:ed:a7:c0:12:f8:17:
         c4:20:9a:24:31:04:fc:6b:27:5f:61:d0:b8:b4:59:02:d7:49:
         60:ca:3c:35:c7:67:96:52:c8:6d:d2:30:5e:f8:2f:be:86:f4:
         53:41:ab:40:a5:ae:cd:62:9e:d0:0d:3f:58:92:d1:67:7e:96:
         6d:8e:7e:89:53:b7:20:b2:94:79:81:c3:f7:41:4f:0a:d9:e1:
         f4:b3:0b:db:1f:80:40:d2:0b:55:28:58:42:93:36:95:e9:6f:
         47:3e:04:ab:ca:93:b0:c3:e6:4d:d5:f2:a5:4f:a2:03:32:25:
         f9:40:05:05:f2:bf:5f:f9:b9:65:4f:90:93:f9:b2:d0:6a:7b:
         5c:bc:64:fc:a3:43:90:3d:ce:d9:93:34:04:e4:66:06:c7:03:
         fc:4b:e4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:34:58 2026 by rpki-client