Error: rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft
File:                     MYEzIsm5orr9fHr1zg9P-HTZzaE.mft (raw, json)
Hash identifier:          fphiP9HIVleXfiPhaxJ+wPD/MvhG0B+xsZrSBtWoqcg=
Subject key identifier:   5C:F4:34:4D:9C:6E:46:C3:22:D1:5A:AD:21:99:0D:05:B9:28:C6:92
Authority key identifier: 31:81:33:22:C9:B9:A2:BA:FD:7C:7A:F5:CE:0F:4F:F8:74:D9:CD:A1
Certificate issuer:       /CN=F366A61AAF/serialNumber=31813322C9B9A2BAFD7C7AF5CE0F4FF874D9CDA1
Certificate serial:       0353
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft
Manifest number:          034B
Signing time:             Fri 25 Sep 2026 04:16:42 +0000
Manifest this update:     Fri 25 Sep 2026 04:16:41 +0000
Manifest next update:     Sun 27 Sep 2026 04:16:41 +0000
Files and hashes:         1: MYEzIsm5orr9fHr1zg9P-HTZzaE.crl (hash: EKjCnqLI5TSS84dIDKNcSeVBRv26nrcHNxkvUlJb3+A=)
                          2: 3ADD93B2386911EF95D6CA87762E951A.roa (hash: zRXSoH3XHGWqI6NKqTDZkrU/VQVf3YmKR5+vS2GpN6c=)
                          3: 973BB7C6631711F1BCDFE1FFCE1D38B0.roa (hash: sImt8cmgbaJqZXXZzRlb5Ms2n0/AxBr/6lNtnsye+fI=)
                          4: 9517B0BA386911EF88E32688762E951A.roa (hash: bU/9jdaHRtJBgT7zNwNcq7vJZiofL3dCX6DcGkRxfbA=)
                          5: C99A4D3E386911EF9E90368C762E951A.roa (hash: MRITER58vyRjZxA4dzBSYv/21oUPkh19LEnmeikJNXM=)
                          6: ECB283EE631511F1968E11F4CE1D38B0.roa (hash: M66cvljk7MqT6rvHLu5/GRhR+vMMPadhLBH1blrJ+r8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 04:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851 (0x353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A61AAF, serialNumber=31813322C9B9A2BAFD7C7AF5CE0F4FF874D9CDA1
        Validity
            Not Before: Sep 25 04:16:41 2026 GMT
            Not After : Sep 27 04:16:41 2026 GMT
        Subject: CN=6ab5f5aa-8e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:28:e5:12:61:20:f4:a7:3e:8f:bf:4c:22:
                    dc:f9:1a:17:7a:7f:d2:fd:54:bb:72:75:dc:5f:2c:
                    28:1c:f3:15:78:55:0d:3a:6a:38:84:07:09:5d:76:
                    50:6b:48:2b:2b:05:94:23:c1:e6:07:40:c1:cf:26:
                    7a:c2:35:14:6a:d2:f7:00:e5:97:20:4e:44:f3:59:
                    c7:2b:ed:47:2a:2a:97:fe:70:5e:6e:bf:6b:10:84:
                    0a:cf:ee:4f:11:4f:c0:e7:51:47:c1:78:12:90:01:
                    59:79:5c:61:4a:b9:a5:a2:94:f4:a9:d7:e3:65:36:
                    8a:a0:0e:a0:b3:67:7f:02:a7:b9:2c:1a:10:fc:d5:
                    5b:3b:59:4e:d6:9c:13:9a:e0:55:f7:11:d3:fe:6b:
                    d5:a0:06:08:75:84:4d:40:6e:03:48:8b:68:53:23:
                    b6:ba:17:f4:7b:2c:41:0c:fe:db:69:c2:69:e5:8f:
                    48:60:e4:1e:1a:0c:b8:1d:94:45:5e:a0:c2:ff:c1:
                    fb:df:27:7c:39:a9:cc:ab:f5:a7:7f:7c:c5:f8:48:
                    98:ce:8d:b1:3d:9f:1c:97:2c:38:40:17:09:b3:be:
                    57:01:4b:6c:54:29:08:35:2e:6d:dc:52:69:c3:d3:
                    23:9d:d3:45:27:6a:95:3e:22:50:12:75:55:5c:fd:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F4:34:4D:9C:6E:46:C3:22:D1:5A:AD:21:99:0D:05:B9:28:C6:92
            X509v3 Authority Key Identifier:
                keyid:31:81:33:22:C9:B9:A2:BA:FD:7C:7A:F5:CE:0F:4F:F8:74:D9:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:bb:e6:c7:91:d6:bc:f4:7a:ba:b0:8e:f6:a6:4f:5c:1c:
         6c:ac:a2:15:2f:16:4c:88:c0:cb:58:b7:74:62:ab:20:a1:81:
         58:2d:7e:da:19:8f:da:04:47:2d:47:ae:80:a4:3f:52:c6:26:
         37:7c:96:11:1d:e9:73:a7:29:af:4e:0d:cc:d2:46:9b:5b:ca:
         11:ad:fe:26:17:ec:f4:85:aa:dc:e3:66:d9:fe:55:56:38:07:
         7f:2d:1e:67:52:d0:84:37:45:f2:b1:a5:14:be:9c:0c:bd:1a:
         37:5a:d8:b7:65:0f:ad:ea:66:db:67:f8:04:92:8b:32:40:df:
         61:1b:88:73:44:5e:b7:62:3f:7d:13:c1:44:18:7b:a0:42:3e:
         fc:da:5d:41:e9:76:65:d0:f7:a5:f9:c4:a7:e0:08:26:7d:51:
         a1:e4:c4:a7:a5:e9:7a:f9:ec:d0:1f:09:a1:f5:f9:a9:05:fb:
         46:5b:fc:01:34:5e:ad:65:20:c9:77:d6:55:1c:35:d8:7a:a6:
         18:ea:77:06:72:29:7b:a4:ec:74:d7:b0:36:3d:9d:7b:ba:fc:
         3d:87:52:f8:c1:e2:e3:f7:a6:d9:73:48:91:f2:9e:c5:97:eb:
         02:4c:4d:38:87:a0:79:f0:e6:1e:8e:7d:5d:b2:ce:b7:92:81:
         22:a4:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:23:36 2026 by rpki-client