Error: rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File:                     9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier:          BQWm+Yu1cxVq8qSIQG8kX2CGC8HkpRPPsPTHApiY7LA=
Subject key identifier:   EA:24:9B:58:FC:29:45:E3:99:29:25:90:6B:0F:B1:64:11:21:1A:DD
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       0678
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number:          064B
Signing time:             Sun 15 Nov 2026 03:00:37 +0000
Manifest this update:     Sun 15 Nov 2026 03:00:36 +0000
Manifest next update:     Tue 17 Nov 2026 03:00:36 +0000
Files and hashes:         1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: DjeFBmKXUfzY4hnPBpb4VMmICAmahWCj8yJXax6IBdw=)
                          2: 9237A3C0290B11F185700E9BDAE4EC9C.roa (hash: esdrg0wVaagLaogxvCmxp6g0gUWYVNrVTZdy+oZHiLc=)
                          3: 25E5F58C290B11F190538F9ADAE4EC9C.roa (hash: dRozXwC2j+o8bXMp60CHkYN8CNbyGNQ6PkkQe4Du9yY=)
                          4: 2267A76E290811F191384489DAE4EC9C.roa (hash: DT6uFqW2qvDckUL7nh0pd1MjMPmthTc+htGKY8GZGUk=)
                          5: 63CCC8A2290711F1B5019583DAE4EC9C.roa (hash: pxzY6cCzsbz4Ramac+Qbgp41taoadIFqGrSg90joZLg=)
                          6: 300F5DEC290A11F1843E2C93DAE4EC9C.roa (hash: /mAZ3s7LrwZwUNCrBfvr7rgarWN7k5pNBPQkDQNI1+A=)
                          7: 8D03DBB6290C11F1876B84A3DAE4EC9C.roa (hash: EHy91oHVnGWJWbwbozIIqxoDhB9NW8XBLn+dOhWue7g=)
                          8: D6504E68290B11F184129C9FDAE4EC9C.roa (hash: qckDSZpiADz4C0oSDtx3Icnh2HGIkg3DMc6q7pmD1Lg=)
                          9: 4A379DD0858D11F1A5CF10D3CE1D38B0.roa (hash: 13vlLCIZHxFQ4U3H+nUJ5SuHw58UZObT5Iu6GUXyyUg=)
                          10: 4B63F362290C11F1B83406A0DAE4EC9C.roa (hash: 1jh7xkNlhH/8ExsM8xdAWCd+AgpQp6yDXhwdw6n3+S4=)
                          11: A6A7C3E8290711F18B6A1487DAE4EC9C.roa (hash: 1X46Q9LRuoAUZoH96K47k8ULVdllJ4vTY+aoEFl5Yc8=)
                          12: CBC1F700290911F194A1BB92DAE4EC9C.roa (hash: 4tF6J5vLMi2wRM5FkfLpM8C33Azvdba51pMX+8dpwlQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: Nov 15 03:00:36 2026 GMT
            Not After : Nov 17 03:00:36 2026 GMT
        Subject: CN=6af92055-1f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0a:63:f5:1a:ce:44:6f:d7:f6:11:76:e0:69:
                    12:fc:a7:07:5b:42:8e:4c:84:70:fd:5e:62:22:03:
                    9e:b1:55:1d:57:fb:c2:bc:7a:1a:11:3d:6a:34:c8:
                    d4:d6:44:8a:e0:01:20:66:fc:2f:39:51:78:16:cf:
                    6d:43:27:22:da:40:fe:7b:ae:57:47:c4:6d:11:8f:
                    ce:93:68:15:14:eb:f8:99:cd:c8:dc:24:47:b1:79:
                    c2:26:ad:32:23:25:b3:09:b1:2c:0e:3d:d2:51:55:
                    77:c9:d8:b3:23:22:ca:7a:65:be:b2:51:4e:3f:03:
                    c3:08:c3:f6:6e:c0:40:ce:b4:5e:98:bc:f7:71:c2:
                    03:f2:71:8e:4e:04:49:84:e5:d0:6f:17:40:06:a1:
                    d2:e6:ac:f4:35:35:aa:dd:86:0f:40:95:ed:9a:eb:
                    a2:f5:f6:d2:65:4d:76:31:c4:b9:cc:fc:4f:67:b1:
                    0b:b6:93:9b:37:00:68:f4:da:81:68:24:a8:93:91:
                    71:61:41:d6:55:c7:5a:b2:23:46:14:d0:aa:fd:52:
                    58:b2:56:51:56:8c:2a:4e:fc:81:a4:43:11:45:6a:
                    a2:01:c4:ee:21:84:52:0b:7e:85:dd:6a:e7:4d:13:
                    6f:1f:98:bf:99:86:67:e4:da:13:c1:cb:7e:7c:db:
                    be:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:24:9B:58:FC:29:45:E3:99:29:25:90:6B:0F:B1:64:11:21:1A:DD
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5c:86:89:d0:0e:b2:bf:da:f1:0d:d2:b1:36:a1:86:73:59:
         65:ad:09:6b:da:22:b5:e6:36:5e:73:14:19:5c:67:60:e6:3d:
         db:4c:3d:d2:82:d5:2d:c5:56:93:42:28:5d:3a:d3:92:1f:1a:
         2e:af:7b:92:d0:f7:83:96:55:b1:9b:5e:06:d4:06:61:39:31:
         a2:52:88:74:62:a5:77:b1:5d:f4:75:7d:77:31:db:d9:b5:4c:
         61:6d:59:30:c1:cb:d2:78:e0:10:83:4a:69:63:60:65:26:89:
         c8:4f:0a:c6:86:85:e9:5a:83:fc:1a:1d:c6:cd:ac:dd:55:f2:
         b3:cc:1c:4c:74:b0:09:5d:ea:00:a2:24:e6:48:85:9c:d9:8e:
         7c:86:9c:fe:4b:eb:86:e9:3c:f6:87:9d:e0:11:18:f9:b9:61:
         de:36:6c:25:20:8e:53:ff:a4:74:c5:45:ec:d0:56:e6:da:8b:
         5e:07:99:7a:a1:40:97:a3:b4:4a:00:e1:a3:b9:e0:bf:13:21:
         89:b6:ac:1f:c6:85:61:6d:ea:ec:6f:bb:e7:42:fc:e0:34:80:
         8f:3b:57:8e:c6:6e:89:3e:7a:a8:01:3b:5e:96:f0:03:af:97:
         59:5c:17:ff:a3:cb:cd:70:94:ac:67:a7:6c:ad:fd:db:be:2c:
         77:e8:b6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:33:13 2026 by rpki-client