Error: rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
File:                     J9ZRBLhSABrB1WULLAw3SPxdaVA.mft (raw, json)
Hash identifier:          R4QyXu0+WYuat6CFQctBToHSLNMi20Pp9LwdSYivyTU=
Subject key identifier:   30:57:AC:49:7D:8E:78:75:2C:90:E8:1B:14:50:BC:7D:4E:82:5C:33
Authority key identifier: 27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
Certificate issuer:       /CN=F36A413FAR/serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
Certificate serial:       0274
Authority info access:    rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
Manifest number:          0272
Signing time:             Wed 23 Sep 2026 04:44:10 +0000
Manifest this update:     Wed 23 Sep 2026 04:44:09 +0000
Manifest next update:     Fri 25 Sep 2026 04:44:09 +0000
Files and hashes:         1: J9ZRBLhSABrB1WULLAw3SPxdaVA.crl (hash: zh22IxnZi377gDi/CpWRM/ob1oA/P78aNjQHu+UPkXU=)
                          2: 485660E2D33B11EFB36E4BBC762E951A.roa (hash: miJkwutQdLFlKKXwBXo4jomSNflYIN5M9tkEV2QPIO0=)
                          3: 0D036F94D33B11EF941C0BBC762E951A.roa (hash: EIHN0q7Gf2yEMmUmQTz3WgcUrSDB0YHCZOvy1CApRc0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
                          rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A413FAR, serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
        Validity
            Not Before: Sep 23 04:44:09 2026 GMT
            Not After : Sep 25 04:44:09 2026 GMT
        Subject: CN=6ab3591a-6698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:98:0d:af:d5:9c:97:84:bc:3c:6a:f8:ad:
                    c5:95:20:25:c0:86:49:fa:dc:73:ab:33:65:ca:fd:
                    67:49:aa:8b:b7:8b:36:e7:b2:96:5b:33:70:61:3c:
                    73:59:57:97:4c:08:49:2b:4e:a7:84:0a:19:b6:69:
                    0f:a1:ab:f6:55:38:4e:1d:ce:eb:3a:dc:25:8d:63:
                    af:a1:0f:dc:1b:0c:12:13:a6:f0:36:25:6e:7a:c9:
                    b3:05:99:b6:ba:ce:2c:7a:a6:b4:a8:94:e2:5d:ce:
                    90:1c:7e:20:4d:e8:86:cd:8f:99:9d:60:8f:9a:50:
                    13:44:7b:88:1b:bc:b4:19:ff:1d:a4:2d:4b:9c:0b:
                    e8:14:dc:1f:f7:dc:1c:2d:f2:ad:4f:be:3b:72:e7:
                    96:cb:03:98:6c:ee:94:39:2c:e0:20:a4:ab:dd:22:
                    fe:1e:11:40:9b:92:68:e2:16:f2:47:25:dc:41:5e:
                    87:f1:28:a7:fd:a9:de:93:c2:a1:c7:71:5e:e6:77:
                    62:b6:0e:85:69:6c:e0:80:c0:77:a4:13:c8:85:21:
                    ad:d8:15:af:1d:f3:64:95:ab:b9:15:e4:9d:da:e4:
                    68:94:0b:2e:e0:dd:30:90:51:62:e5:c8:84:ea:f7:
                    01:04:da:db:19:eb:23:98:00:65:ba:64:90:bd:4c:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:57:AC:49:7D:8E:78:75:2C:90:E8:1B:14:50:BC:7D:4E:82:5C:33
            X509v3 Authority Key Identifier:
                keyid:27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:85:5c:83:67:ab:77:f8:b7:94:e7:11:1e:51:98:24:b1:
         e2:fe:4a:ea:af:10:7f:9d:0c:57:e3:de:0b:2b:98:ae:cf:11:
         f0:4c:bc:1b:f3:39:8c:92:27:74:3d:24:85:dd:b1:3d:08:73:
         fc:b3:0c:9b:fe:34:b5:ff:89:af:44:27:48:41:56:c0:47:c7:
         9f:0e:8b:85:41:7b:50:b2:e6:f8:7c:43:42:44:a8:36:04:b1:
         3e:7d:ac:99:19:b3:1f:f0:3d:8c:ef:db:fa:1e:f6:4c:3c:3f:
         8a:96:12:51:c3:44:5a:c3:e8:72:db:1a:cd:86:c7:38:f7:1b:
         74:bd:c9:bb:35:7b:d0:61:7b:8c:61:a8:6a:68:a2:ee:96:7d:
         4b:71:93:c2:24:0c:fb:69:29:4b:12:44:fe:19:6b:cc:0b:bc:
         3e:69:89:ec:f9:85:72:23:92:2f:cf:db:b4:4a:3f:3c:8b:10:
         02:87:15:1c:7d:6d:20:ed:9b:11:14:1b:f8:33:37:7a:8d:eb:
         5d:e6:ed:40:50:20:52:96:41:d2:da:e0:dc:f6:8f:88:15:16:
         fb:44:cd:a3:71:0b:35:09:8e:3d:2e:ce:c7:84:c3:41:4c:9f:
         5c:50:c1:e8:5c:c0:97:e3:df:96:98:7e:f0:c8:5e:dc:c5:7c:
         29:e9:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:53:20 2026 by rpki-client