Error: rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
File:                     e-hZtChr4eoUuIx6MLXOT9hZgOw.mft (raw, json)
Hash identifier:          g3gSymE7cVQoB+wyXUebYAUG5HScZ+iR+6KI9C1c77Q=
Subject key identifier:   2C:78:2A:52:48:A0:D9:D4:3D:A8:5A:50:63:97:9C:95:87:84:F8:6A
Authority key identifier: 7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
Certificate issuer:       /CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Certificate serial:       0A06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
Manifest number:          0A00
Signing time:             Wed 23 Sep 2026 01:40:12 +0000
Manifest this update:     Wed 23 Sep 2026 01:40:11 +0000
Manifest next update:     Fri 25 Sep 2026 01:40:11 +0000
Files and hashes:         1: e-hZtChr4eoUuIx6MLXOT9hZgOw.crl (hash: 27YYZEm/83W5C/uta58xyXFZ6vl/d/PmLfoioDbm7TU=)
                          2: C9E601BE223B11EA9D6FA919F8AEA228.roa (hash: gL5tRYefTmIo2Y5cTrnfgKjwwCZ0FkaQbb7/gXP5el0=)
                          3: 0CB777ACF1FD11EAB6AEE70DF8AEA228.roa (hash: 3THAtZZdQjj5mhAwZma0JScZLOcQ+NkBW1pbNzpubLY=)
                          4: CAE2B0CE166211EA91D0A63FF8AEA228.roa (hash: 4uRc72cdg/s8r9hidk66Wt0h4klL9GdvidHhfjvfBlk=)
                          5: 82DAA7820D1111EA8AE40844F8AEA228.roa (hash: ipU6dt+Ql1oHkoWqMCQsu5Sqwuwo5xzALDOZIUeDm+E=)
                          6: A9F22C5C223B11EA90A89819F8AEA228.roa (hash: abkvsxIACMIPWrvjyOHKPEh0DsEGmj6TJS4On7OCWSo=)
                          7: 611FEFD00D1111EA8325E043F8AEA228.roa (hash: GiJz76vVEkVH9DNgj55T6CmgEM7wMPM/6p5lMG2BlFI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 01:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2566 (0xa06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B7955AF, serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
        Validity
            Not Before: Sep 23 01:40:11 2026 GMT
            Not After : Sep 25 01:40:11 2026 GMT
        Subject: CN=6ab32dfc-6f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:43:e4:08:45:72:88:d2:63:6f:1a:2e:1d:
                    3c:dd:2f:fa:d7:c8:de:5d:9b:b2:36:c5:ed:97:a5:
                    5e:d5:4a:d4:60:73:65:df:6e:d9:f1:5b:a0:8b:95:
                    a7:df:dd:ac:0d:e0:0a:72:35:6d:35:5a:36:74:8d:
                    8c:ad:e4:5c:49:4c:ae:1e:09:11:4d:25:de:2a:7d:
                    ae:54:e0:46:bf:21:44:33:be:12:07:99:63:79:0b:
                    4d:55:93:14:bc:25:c5:dd:42:56:c9:3d:81:22:e8:
                    9f:7d:c9:78:bb:a2:05:d8:41:df:d5:a4:74:02:62:
                    dc:51:f8:31:15:33:3d:ca:ed:b3:03:7c:06:f0:9d:
                    6d:2d:03:67:1b:ee:93:2e:2e:f7:0a:ea:4b:dc:72:
                    42:17:f9:3c:8d:d0:c3:a2:80:67:bc:0f:e2:44:bb:
                    b4:06:a9:f6:10:af:f6:30:b2:32:d7:5c:3c:f5:81:
                    4c:8b:5d:f7:89:d5:85:b0:dc:90:05:16:e3:c9:50:
                    0c:13:f1:a7:5a:69:c6:65:78:b6:8e:3b:ef:3e:9e:
                    76:bf:26:a9:48:c0:cb:01:ae:b7:61:28:43:92:04:
                    fc:04:f2:18:4a:67:71:4f:4e:0b:6b:5c:fc:28:a8:
                    db:79:a7:fc:68:03:13:37:b6:a8:38:de:a4:72:ad:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:78:2A:52:48:A0:D9:D4:3D:A8:5A:50:63:97:9C:95:87:84:F8:6A
            X509v3 Authority Key Identifier:
                keyid:7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:8b:15:07:f1:cb:c1:3e:b6:87:61:0f:5a:68:d9:47:6f:
         ee:10:b7:49:05:45:0f:87:9e:8c:06:34:3f:f5:32:00:26:3e:
         bf:03:d9:a7:27:b2:4e:20:ab:6d:61:13:7d:12:71:34:c7:0a:
         e3:74:47:80:78:1b:96:10:7f:df:90:6c:f3:7a:bd:14:07:1a:
         ee:3f:a2:ee:82:8d:66:01:03:cf:19:dd:51:6f:9b:13:4c:af:
         71:08:51:98:cd:c2:c3:87:a5:ec:1f:9f:81:d0:f9:14:de:05:
         70:71:5f:9b:43:68:26:62:6f:ec:09:23:d3:3e:66:a1:c5:b4:
         97:d0:41:97:e5:e4:ec:8f:9c:ae:5c:8c:97:9a:ce:75:31:c3:
         5d:59:ed:9a:60:43:45:40:4c:fc:28:32:e2:a1:36:f3:e2:4a:
         73:2a:b6:44:08:c7:5f:35:25:72:ee:ea:23:fa:69:ee:87:6d:
         55:25:74:d2:5e:8a:c3:fa:c1:a6:1d:b4:9f:2f:b3:c7:47:79:
         f3:7d:96:0a:06:89:10:99:91:0a:49:d6:22:27:d7:1b:79:6e:
         26:fd:4b:48:48:10:f1:d8:07:8a:76:b6:38:03:48:13:35:9a:
         f3:4a:fc:c6:b5:6b:2b:a4:19:09:02:2e:7d:b9:cb:9e:7e:38:
         67:2a:fc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:19:36 2026 by rpki-client