Error: rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
File:                     xE7ima9Yscv0a9HSD8fc2XxqV2g.mft (raw, json)
Hash identifier:          17Lb3D7IxUez6MrmAHCiiC8CeBvQi8GY7Ws6taDnq2k=
Subject key identifier:   D6:B6:B2:CA:F0:D2:FB:13:56:90:38:75:58:89:E0:43:CE:CA:A7:67
Authority key identifier: C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
Certificate issuer:       /CN=F36A413FAF/serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Certificate serial:       0273
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
Manifest number:          0272
Signing time:             Fri 25 Sep 2026 04:44:13 +0000
Manifest this update:     Fri 25 Sep 2026 04:44:12 +0000
Manifest next update:     Sun 27 Sep 2026 04:44:12 +0000
Files and hashes:         1: xE7ima9Yscv0a9HSD8fc2XxqV2g.crl (hash: YIxi2XxQWP1w8OpafNXO0HepvCL8j4cCrBMNoBZ2jVc=)
                          2: 9FC2FD909B0411F0887961DFDAE4EC9C.roa (hash: SQLFm7c0g8dDMdmzog7bxprxzbcmvNx7dNociNoNFR4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 04:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A413FAF, serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
        Validity
            Not Before: Sep 25 04:44:12 2026 GMT
            Not After : Sep 27 04:44:12 2026 GMT
        Subject: CN=6ab5fc1d-39ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:00:fc:3d:5c:c1:8c:e4:89:be:0a:42:9b:
                    9f:a6:ea:65:8d:50:d0:db:14:a9:30:6a:92:39:a8:
                    f0:4b:ca:99:42:aa:62:99:c0:5a:31:06:06:03:10:
                    c0:49:98:35:fa:23:e8:8f:7f:a1:0a:87:f3:d5:1f:
                    a3:67:2c:95:20:45:69:26:6f:34:79:8c:1d:15:74:
                    c3:99:32:db:16:f6:55:c4:94:46:49:f1:3d:a9:d1:
                    f8:10:ee:6c:62:76:7e:36:17:83:11:bb:6d:e5:15:
                    98:b7:18:97:41:3c:2a:b3:c8:8b:35:d3:f0:a8:26:
                    97:2b:bd:69:c2:fe:fc:17:3c:19:e4:98:3d:54:5d:
                    d0:e2:4d:7b:df:14:b4:f1:93:3f:79:f2:07:d1:3a:
                    53:cc:96:02:34:3c:97:74:93:eb:0d:9e:c1:92:ea:
                    5c:fe:f5:21:48:98:87:38:35:35:ec:73:22:03:5d:
                    c4:90:03:bd:25:96:d7:80:20:75:c2:5a:65:f1:00:
                    43:de:d4:de:2c:e2:a9:61:95:41:af:8d:67:12:43:
                    c8:2a:e8:59:ef:e4:c6:f1:3a:3c:b4:b9:ba:76:f7:
                    e0:0e:6c:d4:e7:5a:bb:e6:2d:80:1e:87:32:46:95:
                    10:57:12:3a:a4:26:bf:c6:3b:54:f6:15:95:0e:2d:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B6:B2:CA:F0:D2:FB:13:56:90:38:75:58:89:E0:43:CE:CA:A7:67
            X509v3 Authority Key Identifier:
                keyid:C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:c2:46:8a:67:e6:99:5d:a5:a6:0a:7f:33:63:86:10:54:
         b1:0f:6d:f7:55:8f:e0:4b:cd:20:cf:bd:c9:1d:1f:ee:f0:5c:
         0b:3f:2b:71:4a:3c:62:04:ad:bb:0d:e0:e7:96:37:6f:67:52:
         14:49:e4:08:90:a8:9c:95:65:2b:1d:5c:d9:b8:46:46:e4:c8:
         76:ab:ac:e5:ec:a1:60:37:04:63:2a:28:42:cc:e2:19:c0:85:
         10:ec:ab:f8:02:f7:5f:27:d5:a9:37:ef:13:a6:7f:a0:13:d2:
         07:73:e9:c0:3e:64:c0:bc:c8:c3:14:29:05:c5:74:80:c6:b2:
         fc:d7:85:cf:d0:0d:9f:51:20:7a:89:cc:e2:04:e6:34:9f:bc:
         45:0c:ce:54:fe:82:ec:99:6d:1d:00:a1:eb:7e:b3:bc:bc:15:
         1b:dc:36:fe:07:39:17:17:5d:b7:5e:8b:7d:eb:b4:68:fb:b5:
         5c:ab:03:3b:4a:6b:61:0d:ce:ba:41:3e:1f:73:fb:21:4b:20:
         a7:5f:49:54:8f:b7:d3:c2:bf:7e:e1:3a:83:b6:b0:39:81:b4:
         cc:2a:3f:6e:4f:90:85:f6:49:ad:ed:03:5e:b6:ab:fd:c7:c2:
         9d:76:2d:d8:84:46:3a:8e:13:71:87:19:82:31:73:a8:4f:0a:
         ce:96:9e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:44:21 2026 by rpki-client