Error: rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
File:                     Filoib_wMb9_3nNn4t7pPLAIAoM.mft (raw, json)
Hash identifier:          TvBKAdynLPP6X7JadO60VBOUfcLbymSieAXhO0YY2gE=
Subject key identifier:   C2:B0:EF:D3:D6:A3:60:ED:8C:70:AF:B4:D8:28:A0:3F:41:69:22:48
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Certificate issuer:       /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial:       036D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
Manifest number:          035E
Signing time:             Thu 01 Oct 2026 04:16:53 +0000
Manifest this update:     Thu 01 Oct 2026 04:16:52 +0000
Manifest next update:     Sat 03 Oct 2026 04:16:52 +0000
Files and hashes:         1: Filoib_wMb9_3nNn4t7pPLAIAoM.crl (hash: aAIkqUFK4SjI8U1ZheaHq7HQsEUUGtVrLMPK0U2KFyo=)
                          2: BDEC29CA919B11F1AD7E43C3CE1D38B0.roa (hash: orjJ8rJ6sip9ETuYXH/EqMDUWi0EVMZEH1jhy65ixEA=)
                          3: 5AC4BF74032511F1929BD2EDDAE4EC9C.roa (hash: Mr+VNN9Z11W7VCtSCEh7NwS5SxBn5tdF3qqSe50Nvo0=)
                          4: C7D794A2833111F0BA372F98DAE4EC9C.roa (hash: 10t3J3G0W//+SuAl6SEkRsS4xMprNtVls3DmnWSADos=)
                          5: 8FC2BDBE057A11F18F7783C4DAE4EC9C.roa (hash: AQrOFPjFaqguMhUl4BS2Zhq/YyRQNkfhZPPG0wTy2FY=)
                          6: 328118D26ED211F1A7E0B60BCF1D38B0.roa (hash: mpYwvFPIIwGBad6LgXffGJB90JE3h4W8XaZN6Yka/Yc=)
                          7: B4706624834911F0B13243B3DAE4EC9C.roa (hash: bO4CRsQGJ9Fo2uTsOo+M4VqSaZfI6VGKrX/RQl3alaE=)
                          8: 3554EEB2347311EFA6FFD08D762E951A.roa (hash: STwhEyl7QlJqy2GwaPGbVHQtRVU/mUCXwrdIoazOpVI=)
                          9: E4AD7D32057A11F1AA15C6C4DAE4EC9C.roa (hash: 2aR11taDJSSgD4ZfkhbtNmSyzLyHvlisHe10lCn519E=)
                          10: A7FC5510032811F1B2192182DAE4EC9C.roa (hash: wGkWjE/BfFbXziwaAAoO4iCbMSLXd6CDbuL/jS67JKY=)
                          11: 6B2C5254032611F1872E2AF2DAE4EC9C.roa (hash: gSEOHsrvDJwVLm0ZAjOxsE19xm6ZGQzPUV5PhKX5T5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
        Validity
            Not Before: Oct  1 04:16:52 2026 GMT
            Not After : Oct  3 04:16:52 2026 GMT
        Subject: CN=6abddeb5-05f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:92:61:67:56:fa:94:f7:df:95:6c:30:51:
                    67:a3:37:e9:69:a7:d3:88:88:3c:fe:df:59:de:9e:
                    fd:7a:f6:d5:18:5d:12:99:d5:6c:97:e4:9b:d3:b1:
                    60:1c:7c:ab:88:1a:e0:dc:a5:8e:7b:75:71:29:ad:
                    27:99:27:55:02:ee:17:4f:2d:7e:b3:ab:55:c1:db:
                    91:64:c7:b2:9a:fb:88:69:71:5e:be:8f:64:2d:d2:
                    71:91:b1:49:b5:7b:42:c5:12:4b:94:b2:eb:a3:58:
                    33:8c:77:f8:01:d7:99:d5:a7:50:fa:59:70:4f:f1:
                    d5:6c:6a:e6:21:f8:8f:0d:f9:b8:9e:51:88:af:7c:
                    e6:d2:e1:e1:46:51:9e:06:a5:43:d1:19:35:96:75:
                    44:a9:5d:9c:3a:3e:9e:89:a3:bb:83:97:d7:79:cc:
                    45:d5:71:d7:0e:6f:b2:25:b5:d0:c7:2d:bf:87:88:
                    48:5c:87:bb:d6:58:bb:74:ca:f5:72:db:85:9e:99:
                    3a:90:d9:64:44:53:b3:24:0b:e3:a9:18:89:8b:23:
                    26:ac:42:87:c4:80:4c:b7:e0:fb:02:f7:0a:07:e2:
                    9f:72:bd:82:0f:01:89:37:cd:4e:37:59:77:58:26:
                    0f:32:27:5b:ad:c5:15:0c:44:b8:02:03:71:ab:01:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B0:EF:D3:D6:A3:60:ED:8C:70:AF:B4:D8:28:A0:3F:41:69:22:48
            X509v3 Authority Key Identifier:
                keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e9:4d:2a:c3:58:a5:aa:21:17:5c:8c:2b:8d:ae:2f:7e:57:
         40:5b:b8:5e:19:89:c0:14:3d:fc:6d:e2:e7:1f:3e:36:70:58:
         44:44:5f:bb:8b:3d:d5:41:44:72:58:2c:38:ab:3e:74:69:ff:
         92:b1:9e:1e:c4:5c:3d:e0:18:42:2c:e3:d3:e2:64:e0:f2:cf:
         b4:6e:94:a3:32:ac:f8:95:ee:5b:43:59:04:0f:f2:9e:5c:1b:
         17:d4:96:7e:f4:20:16:79:29:1d:61:33:c0:40:39:52:b7:5d:
         a0:c1:0d:0e:fb:b1:5d:59:e2:82:34:cb:c1:a9:cc:ae:fb:25:
         32:60:1f:ec:be:70:43:37:fd:d2:b6:33:44:2a:3e:a6:c9:83:
         5b:95:8b:76:2e:71:34:cf:a1:a7:96:1b:30:93:7c:81:35:98:
         84:fe:de:f5:fb:22:b4:97:c9:d3:fc:e0:2d:d8:f0:f8:01:5e:
         97:9a:eb:15:bb:23:2a:f9:0a:da:7d:9a:4d:36:a5:9e:ae:52:
         7d:8a:41:71:d9:cc:88:38:e9:ba:66:f3:49:fc:ad:dd:25:08:
         28:0a:eb:56:e1:84:1b:a5:a8:73:5d:5c:fe:9b:17:9d:2e:7e:
         fd:a9:57:88:59:49:f4:a0:a5:33:7b:c5:ef:02:a6:0d:9b:8b:
         e8:36:86:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:03:54 2026 by rpki-client