Error: rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
File:                     9e2RvGqsS_b5N0e41TmTDZwMAis.mft (raw, json)
Hash identifier:          YJV3LxAJZPyoBzkuJwoadla2eqKJdkaWMXCq2KKrvio=
Subject key identifier:   B1:17:23:F8:6A:F3:42:12:EB:74:A7:89:5E:6F:E5:CB:C5:F9:D8:B7
Authority key identifier: F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
Certificate issuer:       /CN=F36E558EAF/serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
Certificate serial:       0182
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
Manifest number:          0182
Signing time:             Thu 24 Sep 2026 05:08:41 +0000
Manifest this update:     Thu 24 Sep 2026 05:08:40 +0000
Manifest next update:     Sat 26 Sep 2026 05:08:40 +0000
Files and hashes:         1: 9e2RvGqsS_b5N0e41TmTDZwMAis.crl (hash: j1r650RQlbn1xgLa5AZSEEab+id1CRuaQYzfQv0lf4U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E558EAF, serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
        Validity
            Not Before: Sep 24 05:08:40 2026 GMT
            Not After : Sep 26 05:08:40 2026 GMT
        Subject: CN=6ab4b059-d9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:5b:8a:e7:b3:43:b6:53:9b:0d:09:6f:21:
                    5b:d7:92:88:a0:54:51:75:05:6d:22:8a:b9:e4:b1:
                    ff:68:42:75:d9:b8:52:f5:e0:71:18:46:bd:e8:ae:
                    48:8c:95:bb:24:9e:8f:1d:b9:f4:e1:80:9f:bb:24:
                    28:d6:15:ab:ff:ad:e2:12:46:56:3a:6a:06:3f:62:
                    f5:ef:bb:30:de:89:37:08:e3:5e:12:c6:67:1e:47:
                    b8:ae:62:44:ba:04:49:03:60:52:66:78:89:a0:13:
                    51:3b:95:0c:18:ea:75:ad:07:4c:eb:01:01:7f:f5:
                    0a:bb:c6:58:c8:8b:e0:96:84:a2:3a:3c:ed:6f:d5:
                    72:49:be:50:ac:6d:ca:47:04:54:8f:18:68:59:16:
                    b1:a0:c7:2f:27:fe:33:f8:54:61:85:3b:14:ce:bf:
                    74:a6:7c:4f:5e:2d:a7:67:f8:ce:fa:0a:19:c9:91:
                    75:c1:99:cd:01:ae:4e:cb:aa:fd:49:ce:92:10:f3:
                    61:92:1f:b8:86:e8:62:a3:54:c2:d8:50:5d:d2:81:
                    a5:34:fd:bb:38:96:e1:7b:60:a0:49:7f:25:28:88:
                    df:f1:22:13:1b:ba:55:c7:2f:04:6f:bc:db:ee:45:
                    08:70:06:98:88:b2:e6:72:4d:27:0c:aa:a9:e3:19:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:17:23:F8:6A:F3:42:12:EB:74:A7:89:5E:6F:E5:CB:C5:F9:D8:B7
            X509v3 Authority Key Identifier:
                keyid:F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:78:4a:cd:46:74:c3:21:d3:c1:7c:c7:25:33:25:69:99:a9:
         97:ef:7f:f4:4a:59:d4:61:d2:c4:e9:02:77:ca:70:af:e4:3c:
         30:9d:d4:e2:80:53:44:81:f0:50:ee:a1:0b:c9:1f:5d:01:f7:
         9b:d9:14:c3:29:1c:c6:f8:8e:da:84:21:4e:fc:8a:21:a1:49:
         ed:6e:a8:76:17:c4:24:60:7b:d5:4d:f0:c7:b3:88:da:11:2e:
         7b:3c:12:6e:eb:58:5f:b5:f6:c4:ef:fa:62:34:42:a2:51:49:
         44:7a:bb:ee:a9:45:13:5f:b1:93:18:da:62:34:8e:66:e8:76:
         d6:f0:bd:f5:e1:61:71:ae:17:f3:f2:66:fe:eb:13:21:b4:19:
         4e:0f:9c:1f:ea:85:92:52:b5:6c:b0:65:c5:97:8a:37:bc:3f:
         42:35:19:0d:80:3d:8c:41:a8:79:d1:48:8d:33:4a:c7:04:43:
         e9:a3:ca:96:31:ec:3a:47:54:e2:a7:00:9d:fd:fc:2d:b5:58:
         ab:9a:a1:ba:4e:32:51:dc:96:93:8a:70:fa:64:7d:08:41:9a:
         24:e8:9b:3c:ba:74:a9:0a:ac:ae:3d:a6:ae:43:a7:0c:c0:08:
         35:38:55:75:72:7f:c1:9c:37:38:25:28:39:6f:f1:34:87:43:
         dc:4f:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:16:56 2026 by rpki-client