Error: rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
File:                     m4nQTrnUft-_pgddFSb5yb_koPU.mft (raw, json)
Hash identifier:          hJGwpJjjugvsGILR4PUHS6A82QLY96JgopXO1H0MgTc=
Subject key identifier:   D9:4A:F1:8C:24:EF:39:73:01:BF:C0:EA:88:01:38:8C:BB:1B:07:B5
Authority key identifier: 9B:89:D0:4E:B9:D4:7E:DF:BF:A6:07:5D:15:26:F9:C9:BF:E4:A0:F5
Certificate issuer:       /CN=F36C94E7AF/serialNumber=9B89D04EB9D47EDFBFA6075D1526F9C9BFE4A0F5
Certificate serial:       0358
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
Manifest number:          0356
Signing time:             Thu 24 Sep 2026 04:14:37 +0000
Manifest this update:     Thu 24 Sep 2026 04:14:37 +0000
Manifest next update:     Sat 26 Sep 2026 04:14:37 +0000
Files and hashes:         1: m4nQTrnUft-_pgddFSb5yb_koPU.crl (hash: 2kyfU84tb7FkbwZo8ti758vPn+s5W2b8xf1pOzA0dBU=)
                          2: 704926D8280111EF84F6804E7DDC24C2.roa (hash: 3vt49i2b05v3GXaZFK4O6BAWjRmYDlAAsj6Uqb28tW0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 04:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C94E7AF, serialNumber=9B89D04EB9D47EDFBFA6075D1526F9C9BFE4A0F5
        Validity
            Not Before: Sep 24 04:14:37 2026 GMT
            Not After : Sep 26 04:14:37 2026 GMT
        Subject: CN=6ab4a3ad-6530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:8f:e8:84:76:0e:f8:1d:6d:0c:7b:94:6d:
                    48:23:fe:80:0e:90:84:9a:3e:25:7c:3e:7a:23:f8:
                    a8:ff:26:b7:cd:3b:61:ff:c9:a7:c2:7f:01:c1:ec:
                    2d:57:e6:17:4a:91:a4:9c:5a:3a:d4:3f:1e:42:83:
                    8e:2c:a8:98:87:a6:f7:da:86:99:21:4f:ec:cd:06:
                    b5:f7:6a:99:94:5c:da:fe:50:33:df:8b:71:24:5f:
                    fa:f9:c7:36:a7:f2:f2:78:53:26:7c:ff:b5:06:0e:
                    8f:0f:16:55:2c:93:71:5c:a2:14:64:3e:f5:8c:b8:
                    8e:6f:62:91:ca:dd:08:a4:2f:59:55:2d:1d:ce:0c:
                    10:69:e1:5e:64:83:05:b3:0f:e3:ec:d3:0e:7b:14:
                    ad:14:2b:6c:5b:a2:0a:d7:e0:fc:04:e2:a5:ec:23:
                    a2:64:59:a7:58:b1:99:79:4a:81:01:e0:a2:a0:dc:
                    a2:f0:48:f3:94:82:3d:f9:82:e9:73:71:3f:05:3b:
                    c6:e1:7e:f6:50:54:cb:8b:f0:3b:88:6e:2c:21:6e:
                    2c:c8:5b:e2:1a:65:a0:83:c6:3b:2e:bf:2b:f3:4d:
                    dd:d6:62:df:cc:30:0a:47:9f:93:53:a0:1e:41:7d:
                    14:0d:55:7b:cb:63:55:3b:1c:0f:7f:eb:11:c5:28:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4A:F1:8C:24:EF:39:73:01:BF:C0:EA:88:01:38:8C:BB:1B:07:B5
            X509v3 Authority Key Identifier:
                keyid:9B:89:D0:4E:B9:D4:7E:DF:BF:A6:07:5D:15:26:F9:C9:BF:E4:A0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cc:88:e3:9d:70:09:bf:22:7e:b6:c4:ea:05:04:2c:a3:db:
         61:f6:02:c1:43:57:20:43:f7:54:bb:71:e8:f2:dd:8d:12:fd:
         fa:3b:f6:c9:b3:32:08:19:8b:a1:01:42:79:9e:82:e0:6b:6a:
         f2:b1:d9:24:1d:7b:f7:19:93:f1:0f:08:50:82:5a:61:76:76:
         a0:65:27:37:e1:e6:64:db:c0:6e:fa:32:8b:21:d0:f8:a5:a4:
         83:b0:1a:ec:e8:37:50:9b:2a:12:b8:64:19:4c:b1:c2:29:39:
         b7:32:50:68:18:33:20:80:53:6a:25:d8:70:7b:23:45:5b:64:
         ca:bf:83:c6:dc:69:cc:44:da:70:a4:c3:2a:28:fb:43:cd:01:
         c7:33:aa:89:1f:87:b6:61:3d:da:bf:35:14:91:06:59:79:c5:
         ba:d0:86:bd:ad:a6:6f:75:68:b5:18:85:db:1f:8e:03:2a:4e:
         82:a9:2f:22:ee:fa:84:d6:d6:da:68:70:e3:dd:50:1f:6a:c0:
         eb:0b:b6:d2:4d:1f:28:17:90:37:1a:69:2f:e0:2a:dc:e9:a7:
         9b:7a:65:f3:dd:a6:7f:7d:66:d9:32:5f:fd:c0:02:57:26:fd:
         5e:54:3d:ce:40:78:d8:e7:44:0c:14:f7:c7:0f:bf:96:84:4d:
         ec:98:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:24:56 2026 by rpki-client