Error: rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
File:                     CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft (raw, json)
Hash identifier:          voU2tumefwzigGkbHc5OtICAPd4YX8Kx+D0GR4VRt8k=
Subject key identifier:   36:42:2B:43:2E:23:1E:3E:CB:89:3A:42:A3:CB:42:99:EB:65:8B:D2
Authority key identifier: 08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E
Certificate issuer:       /CN=F36DA693AF/serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
Certificate serial:       0AD1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
Manifest number:          0AC8
Signing time:             Fri 25 Sep 2026 01:22:26 +0000
Manifest this update:     Fri 25 Sep 2026 01:22:26 +0000
Manifest next update:     Sun 27 Sep 2026 01:22:26 +0000
Files and hashes:         1: CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl (hash: Jp4/xl+tUIMFL87MAw70Aijl2ZC7sk0oiZhWgMjVAsQ=)
                          2: 21075C28EBA211F090879AF5DAE4EC9C.roa (hash: WPf6r6xv8RDuCnmN43kGiKsbWfPXIE1Zfdqe/xPn7SU=)
                          3: 386712568A5D11F0908D56D6DAE4EC9C.roa (hash: ZAUnUwDGlRXUyoezMHi06KLtxdDzkMt5Fh4LGS14wbI=)
                          4: 2A3ED73014EE11EA8694372AF8AEA228.roa (hash: FBxa8Lun9k2Hzq6Q2hfcEGXCZPwxZGKNJqxPvNPWs2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA693AF, serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
        Validity
            Not Before: Sep 25 01:22:26 2026 GMT
            Not After : Sep 27 01:22:26 2026 GMT
        Subject: CN=6ab5ccd2-cd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:f4:22:0e:47:81:7c:00:84:9f:f4:5f:99:
                    ac:f7:59:c8:1c:4d:39:c5:80:c7:cf:b5:6e:d2:05:
                    9a:31:d5:69:c3:bf:73:6c:c9:97:5f:69:e1:c9:74:
                    cd:97:10:6e:e9:14:5c:ea:65:23:58:83:4e:b7:f3:
                    c1:b5:2e:06:85:86:e5:48:f3:ca:a5:64:5f:d6:7a:
                    b8:a0:53:ab:89:6f:67:1c:ae:03:2a:58:bb:1e:8c:
                    69:7a:5d:20:ad:34:ef:c5:4b:70:09:3b:54:91:4f:
                    48:8e:50:a7:e4:67:c8:1c:3e:83:bf:2a:e4:38:5f:
                    eb:55:8c:7e:44:40:e1:ef:a9:50:a1:a7:45:2d:9c:
                    59:2d:b7:e6:97:b8:66:ee:3d:9f:fa:a8:78:a3:78:
                    44:30:05:24:2e:1e:05:ba:aa:17:06:f3:c3:44:26:
                    7e:a1:f1:64:7d:de:4d:a8:38:39:e7:98:9d:a7:9e:
                    ce:d9:05:7a:9c:4a:07:6a:b5:76:58:ef:a5:74:2a:
                    54:85:9d:33:72:1c:74:09:4e:cf:51:06:2d:df:40:
                    bc:c1:25:ed:f4:21:28:49:8e:dc:2c:f6:ca:80:71:
                    00:08:f7:25:b1:2a:40:26:25:c4:71:66:28:2f:6a:
                    7f:3c:fd:f6:9b:d1:16:30:3c:42:01:59:2a:c2:44:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:42:2B:43:2E:23:1E:3E:CB:89:3A:42:A3:CB:42:99:EB:65:8B:D2
            X509v3 Authority Key Identifier:
                keyid:08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:67:58:19:32:ad:43:52:e4:4d:fa:05:59:b9:14:0a:36:
         18:f3:f2:4e:74:17:d6:a1:75:d8:28:b6:e3:0d:02:f3:2f:56:
         0e:db:4b:34:c7:c4:64:4b:c9:ad:8e:3b:ad:67:ae:11:1b:4b:
         d4:26:0a:01:cf:dd:c1:c5:20:21:95:5c:9c:cf:49:b7:7c:8e:
         e8:90:fe:cd:04:f3:cd:63:41:ca:be:8e:05:67:55:8d:d7:03:
         80:db:84:a8:0d:92:47:e6:72:7f:f3:17:b6:d3:e6:14:6c:34:
         9c:2b:d7:d4:83:a6:93:93:d1:9d:43:c7:22:dd:c1:97:d7:9f:
         e8:b7:9f:9d:1a:0c:b2:09:8e:a9:73:ca:68:aa:16:10:0c:6d:
         f6:2e:d3:26:49:cd:e9:23:69:e3:e6:93:41:cb:bb:7c:2c:73:
         e0:59:a0:bc:b9:56:2c:b1:03:b2:9f:f6:85:99:58:29:a8:bc:
         21:d6:62:d2:0c:54:d2:ef:69:69:93:6e:57:3b:d5:98:a0:d4:
         7b:01:7d:d7:ce:30:a4:2c:7b:12:8b:bf:33:e0:21:82:16:b9:
         0f:06:46:34:3c:7c:4c:a9:59:22:53:7d:7f:a3:90:5c:e1:ed:
         04:9f:e6:c8:58:92:aa:32:58:a7:87:92:71:6d:43:d7:79:d9:
         67:81:e5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:28:16 2026 by rpki-client