Error: rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
File:                     764LPX24gpNjrt_AWoTtudQExzk.mft (raw, json)
Hash identifier:          O28Avod8E2FZ4rck1K1/w5ShwfQDgH67aCXh8OBTiSI=
Subject key identifier:   7A:4D:BF:9D:61:78:91:DD:00:3C:5F:4D:14:72:2E:DD:99:F9:39:7E
Authority key identifier: EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39
Certificate issuer:       /CN=F36BA482AF/serialNumber=EFAE0B3D7DB8829363AEDFC05A84EDB9D404C739
Certificate serial:       032D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
Manifest number:          0329
Signing time:             Sun 27 Sep 2026 04:23:26 +0000
Manifest this update:     Sun 27 Sep 2026 04:23:25 +0000
Manifest next update:     Tue 29 Sep 2026 04:23:25 +0000
Files and hashes:         1: 764LPX24gpNjrt_AWoTtudQExzk.crl (hash: lbYVaxL9lTwQ0iiVg4O2lUGAHBfyyqOuPUCoio6z2lg=)
                          2: 51D633A828E011F1B5EC19A7DAE4EC9C.roa (hash: 9HJBCfxyN3JJa5qVSQU2P6mbjYZKQYUaO4UYv+qOONw=)
                          3: B93A46528A9711F09F0F70C8DAE4EC9C.roa (hash: CkFb39x15nirobdbbaooeI5/m16fCdvIYH2/odp17kc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813 (0x32d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA482AF, serialNumber=EFAE0B3D7DB8829363AEDFC05A84EDB9D404C739
        Validity
            Not Before: Sep 27 04:23:25 2026 GMT
            Not After : Sep 29 04:23:25 2026 GMT
        Subject: CN=6ab89a3e-60af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:f9:96:f7:05:72:d6:06:c0:e7:38:39:fd:
                    ac:d5:f5:9f:b4:ca:c4:33:b6:22:5a:91:8a:c9:16:
                    81:21:60:c9:99:2d:5f:4c:e0:46:07:9c:cc:ed:8f:
                    a4:6c:6d:9e:30:de:0a:d5:e9:43:03:1b:74:cb:80:
                    93:12:2c:68:ac:b9:c5:ce:63:1c:e7:66:ed:32:bb:
                    0d:5f:4a:c1:9c:8c:5c:a6:1f:d8:6c:8d:f3:6c:9e:
                    e0:e1:40:fb:2a:b5:51:3f:34:c7:46:a7:19:e9:73:
                    92:91:c7:f6:5c:ad:a3:e2:f6:c1:83:18:ab:fc:98:
                    3b:6a:dd:b7:7d:35:94:8c:23:ce:6a:80:f3:9a:44:
                    8b:db:a3:a9:16:02:4c:de:6d:15:99:a0:21:c5:d5:
                    26:8d:c1:6d:66:ce:a6:92:6a:48:24:68:8b:f9:74:
                    d8:eb:27:bb:db:b7:19:7f:3b:a1:f3:80:6b:f8:86:
                    74:c4:69:c2:0e:3b:32:8c:22:26:27:e9:54:e0:43:
                    08:7d:53:59:0c:e6:a2:b2:98:10:20:44:83:d2:b2:
                    ec:f2:26:00:90:d8:06:cb:e2:d7:8f:4d:ef:31:28:
                    eb:f1:e4:60:38:c4:56:c0:31:55:b0:e6:cb:7b:94:
                    37:0c:3a:5e:b7:a3:74:4a:ac:59:fc:04:83:f3:17:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4D:BF:9D:61:78:91:DD:00:3C:5F:4D:14:72:2E:DD:99:F9:39:7E
            X509v3 Authority Key Identifier:
                keyid:EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:28:d6:3b:e0:09:46:c3:93:73:ac:0f:0e:87:54:0e:b6:
         2c:19:9e:86:8b:5a:ea:33:43:74:db:53:fc:05:e8:2c:58:98:
         0f:1f:b1:7d:bb:70:72:49:10:61:91:4d:c9:7a:0c:19:2a:6a:
         29:21:d6:ee:ae:7c:7e:b0:f3:87:e8:57:9a:d7:8c:16:70:81:
         1d:19:ca:35:44:86:55:db:ef:82:d8:2c:21:84:01:6c:b5:83:
         3c:22:f9:4b:38:3e:94:14:a7:d4:ed:b8:44:7f:9c:c5:74:a7:
         ef:f3:60:1e:f7:59:0b:ca:03:d7:81:5a:74:1e:a5:8b:38:49:
         75:6f:00:b5:33:cf:38:8b:23:40:ab:98:0a:be:06:20:c0:af:
         77:3a:23:10:46:af:9d:8c:e3:a9:fb:e1:41:f9:f0:27:f8:e3:
         69:3d:3f:49:2b:0a:48:7f:6e:5f:12:e0:5e:80:16:c2:d6:f1:
         99:25:df:7f:54:9c:97:6d:b8:2d:fd:f4:ef:f0:0e:72:08:a8:
         5f:da:f8:54:9b:4f:97:55:00:0b:ec:da:19:fd:12:e1:41:57:
         b3:71:ac:82:ad:8c:4f:4b:30:2c:fb:04:94:6b:f6:ad:09:f6:
         34:17:e2:de:b6:b3:61:27:63:5f:e4:b8:b0:e1:fd:29:eb:bb:
         aa:c1:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:46:40 2026 by rpki-client