Error: rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
File:                     DjU23jQviMVeSslMS36nCgwn6aE.mft (raw, json)
Hash identifier:          d4vJqToicjyX5v+aCo+NED74oyOU2hg2gPYgwh4emgE=
Subject key identifier:   DE:22:E9:20:C4:56:B8:27:93:17:E1:6F:84:8D:E9:ED:80:EB:49:43
Authority key identifier: 0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1
Certificate issuer:       /CN=F36A1CEFAR/serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
Certificate serial:       07A4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
Manifest number:          07A0
Signing time:             Mon 28 Sep 2026 02:18:58 +0000
Manifest this update:     Mon 28 Sep 2026 02:18:57 +0000
Manifest next update:     Wed 30 Sep 2026 02:18:57 +0000
Files and hashes:         1: DjU23jQviMVeSslMS36nCgwn6aE.crl (hash: IqL7ACDb/NVR2XG2Rl8HNiLwjgaRzBP1ku7orGNjVvs=)
                          2: 44E9BD1C291811F1B79C4DE5DAE4EC9C.roa (hash: TL3Ljpgc4pSzmT+DozUjqPhaXoSaOT1kL5IBW8F0FX4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                          rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1956 (0x7a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAR, serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
        Validity
            Not Before: Sep 28 02:18:57 2026 GMT
            Not After : Sep 30 02:18:57 2026 GMT
        Subject: CN=6ab9ce92-e96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ee:b6:73:f6:6f:53:36:41:94:1b:6e:85:8a:
                    0d:db:8d:0a:8e:70:cd:2f:90:6f:43:9a:e5:9f:ff:
                    4c:76:98:c3:bd:a8:b7:96:b6:c0:58:90:52:2e:82:
                    21:c1:6c:eb:4c:cd:47:5e:64:98:a6:33:07:9c:17:
                    ec:12:01:13:b7:f7:e1:8b:de:15:61:2e:58:c9:e6:
                    f3:86:68:35:6b:74:60:45:37:aa:29:8c:9e:f0:21:
                    71:d7:e8:c4:21:e4:9e:25:59:c1:92:2f:65:44:88:
                    9a:80:02:15:3f:45:8e:be:c3:6d:ff:db:bc:ee:68:
                    41:bd:85:3b:bf:fc:42:33:59:73:0b:42:59:49:dc:
                    94:8d:04:f2:59:c1:2b:88:07:2a:00:aa:93:12:2a:
                    ad:ff:10:b1:7e:4f:88:ac:7d:0a:82:28:06:ac:53:
                    2e:91:fe:40:75:e9:8d:07:49:92:d9:e7:b2:7c:ea:
                    f8:bf:35:fc:55:13:8f:77:ac:de:2d:9a:6b:19:fc:
                    d7:02:77:f8:c3:19:16:26:a6:76:0e:23:5d:8e:1e:
                    4b:25:25:67:d2:91:26:c7:64:ec:fc:91:cc:64:f6:
                    23:f7:3f:1a:5b:8a:7f:64:45:3c:ac:60:3b:af:b5:
                    8e:23:ce:23:15:12:be:0a:f2:3d:60:7c:ba:a4:70:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:22:E9:20:C4:56:B8:27:93:17:E1:6F:84:8D:E9:ED:80:EB:49:43
            X509v3 Authority Key Identifier:
                keyid:0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:be:cc:6d:9b:b7:bd:90:2a:d4:56:b0:6d:f6:67:4d:47:9d:
         2d:62:d3:d4:41:09:dc:ff:a6:ac:17:f6:c7:93:7e:59:10:ab:
         68:e8:a8:b1:25:99:5a:a2:bf:f5:07:4c:05:69:06:34:f3:bf:
         49:73:80:2a:0f:57:f7:ec:24:9e:d1:7f:11:ed:f8:13:24:d3:
         e9:01:f8:46:30:98:5f:94:70:ee:be:82:60:45:d8:e8:fd:45:
         77:24:4b:a7:61:2b:8e:71:1d:0b:91:30:be:f7:c2:9b:40:b8:
         ee:e8:c9:b2:c9:13:dd:5b:df:bc:7a:75:92:2c:f7:b3:1d:92:
         20:32:b3:75:62:ef:55:d4:aa:6e:f9:f2:2e:f9:c7:f0:79:ee:
         e2:d4:7b:aa:fd:59:70:0a:aa:48:4a:d1:8d:24:6e:0e:35:23:
         5b:4d:23:1c:b7:4c:07:c8:42:20:c4:39:b6:de:63:4c:71:20:
         19:0d:d3:f5:f7:9a:c5:f4:e6:80:12:3e:1f:2e:8a:95:43:f9:
         26:c8:2a:4f:e5:78:47:a9:aa:70:3c:f2:1f:1f:72:a3:9c:14:
         b0:66:53:97:48:da:72:ec:9a:0d:43:83:7d:25:bc:39:91:56:
         7c:45:09:fd:8b:8e:2c:0e:5e:5a:c4:d6:f4:b5:38:b5:8c:f1:
         b3:2a:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:23:45 2026 by rpki-client