Error: rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft
File:                     gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft (raw, json)
Hash identifier:          s7QbGhCvuyJdiWH/BFsLNREq38WxiQ4FlKRzWAHOCFY=
Subject key identifier:   40:0E:16:54:D6:62:F6:46:63:41:C3:96:FA:7D:5A:0D:74:54:B7:C9
Authority key identifier: 82:33:A7:FC:2F:17:08:BC:60:1F:A6:F7:C5:F7:82:27:7E:B0:4D:35
Certificate issuer:       /CN=F36E373DAR/serialNumber=8233A7FC2F1708BC601FA6F7C5F782277EB04D35
Certificate serial:       0ABF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/gjOn_C8XCLxgH6b3xfeCJ36wTTU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft
Manifest number:          0ABA
Signing time:             Sun 04 Oct 2026 01:28:00 +0000
Manifest this update:     Sun 04 Oct 2026 01:27:59 +0000
Manifest next update:     Tue 06 Oct 2026 01:27:59 +0000
Files and hashes:         1: gjOn_C8XCLxgH6b3xfeCJ36wTTU.crl (hash: 2+HDEPqEjkU3fpZBom2YPPhrvJZgNkFuBWbudwQ/GaQ=)
                          2: 8F7C0326681C11EAA512AD3AF8AEA228.roa (hash: 5w0zjB9zrr7JPUe6E+UZp70x6v9PtVvXJ2pL8t6LK4I=)
                          3: 592FD6C0681D11EA83CCC43BF8AEA228.roa (hash: v2NNekjIm02OWpemTutfgvCxos1GPu94FGQS7tyLC+k=)
                          4: EEE984F0681C11EA9F6A323BF8AEA228.roa (hash: 1YVSNhH0hc5JS4oVbbc6hL2rxWXxAoZtPZWaxS/mjW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft
                          rsync://rpki.afrinic.net/repository/arin/gjOn_C8XCLxgH6b3xfeCJ36wTTU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2751 (0xabf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAR, serialNumber=8233A7FC2F1708BC601FA6F7C5F782277EB04D35
        Validity
            Not Before: Oct  4 01:27:59 2026 GMT
            Not After : Oct  6 01:27:59 2026 GMT
        Subject: CN=6ac1aba0-972c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:2e:2d:0e:fa:0f:df:42:37:9b:e6:88:0b:
                    20:23:40:61:38:13:d1:ef:b4:66:fe:13:aa:c7:b5:
                    af:a6:3f:e4:24:28:40:d0:e0:11:78:25:fd:37:65:
                    19:ae:c7:89:70:42:59:41:e5:5b:10:ac:97:13:e7:
                    71:96:02:56:76:7c:45:10:12:f6:f6:f6:aa:3e:05:
                    0b:c0:56:2b:32:64:b2:7e:80:53:b8:d9:b3:01:31:
                    27:1f:66:ea:d6:1a:b7:b2:48:d7:10:88:92:5d:f9:
                    d1:3a:06:3a:c2:01:4d:8e:10:0c:20:d7:f4:64:d4:
                    50:dc:76:08:e0:f0:2e:56:75:31:f2:ad:dd:2a:18:
                    3b:81:a8:8e:51:d4:6d:02:71:36:b7:32:d9:c6:bd:
                    63:00:47:d1:20:ab:6a:0e:31:cd:25:dc:9c:e5:f9:
                    fd:1a:9d:d5:a2:28:09:35:fa:88:41:a9:be:41:b6:
                    a5:a3:6f:f3:1d:0d:37:23:d9:76:9c:0a:56:2e:8b:
                    fd:c7:89:a3:2f:c3:dd:a3:f6:8b:7a:27:97:64:e6:
                    d5:44:7b:be:f0:8a:c1:7a:ba:a2:ba:27:4d:7d:f4:
                    fe:9c:eb:c3:23:3c:c4:a7:71:18:e1:5c:f2:7f:dc:
                    4b:4e:30:e8:1d:1e:28:8f:13:89:c6:0a:e4:a1:bf:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0E:16:54:D6:62:F6:46:63:41:C3:96:FA:7D:5A:0D:74:54:B7:C9
            X509v3 Authority Key Identifier:
                keyid:82:33:A7:FC:2F:17:08:BC:60:1F:A6:F7:C5:F7:82:27:7E:B0:4D:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gjOn_C8XCLxgH6b3xfeCJ36wTTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/61A328A28B7311E99BC16668F8AEA228/gjOn_C8XCLxgH6b3xfeCJ36wTTU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:95:2b:13:12:d2:28:95:68:ae:3e:db:87:c4:74:ea:5a:
         88:cc:33:6b:0b:a9:b2:7f:0d:57:ed:85:94:0d:ac:61:08:a6:
         26:2f:a2:dc:1d:fe:08:51:a3:71:27:d9:9a:f5:32:c4:6e:86:
         d6:ea:da:e4:fa:b2:ff:10:53:a7:c9:ad:79:ea:ea:df:36:79:
         11:5b:51:9d:61:f8:2c:78:41:69:3f:bb:da:c5:17:ec:a6:d0:
         5b:ba:98:75:8d:5f:4f:e6:4a:f4:62:c1:07:c1:54:c0:6b:2f:
         ac:f7:7a:e7:78:1d:7a:6e:ec:4b:fb:f8:f0:a6:24:b9:3f:ed:
         f9:21:3a:27:56:9e:b0:35:c6:17:d3:84:8c:42:53:10:ed:57:
         09:8d:f7:06:64:72:41:67:ad:11:06:f6:6b:05:5c:dc:fd:6c:
         48:d5:ce:b5:77:1b:52:02:25:de:7e:78:05:a1:cb:5b:31:69:
         c4:fe:9c:8e:f3:48:ba:c7:2a:e4:11:36:63:5e:97:e3:5d:c2:
         a1:b6:cd:58:69:ec:01:d1:00:8a:e2:e3:a3:ae:0b:24:22:7a:
         5a:84:c5:f6:3a:84:c7:d9:90:8b:5b:d5:65:c2:91:0a:55:f5:
         b7:67:b8:43:32:7c:50:5d:c8:f5:d6:38:f7:d5:09:6c:66:4c:
         6c:fb:e1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:51:10 2026 by rpki-client