Error: rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
File:                     NokmebLgyF9VbZR98hkWGboqv-Y.mft (raw, json)
Hash identifier:          aPEqUis6X0Ts7z/ozSo3kagooGt9PB/kzdUtVVM61Us=
Subject key identifier:   2F:35:15:13:B5:7D:E9:AA:61:EF:89:EA:85:E3:07:FD:BA:1F:F4:76
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Certificate issuer:       /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial:       064B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
Manifest number:          0641
Signing time:             Sat 26 Sep 2026 02:52:20 +0000
Manifest this update:     Sat 26 Sep 2026 02:52:19 +0000
Manifest next update:     Mon 28 Sep 2026 02:52:19 +0000
Files and hashes:         1: NokmebLgyF9VbZR98hkWGboqv-Y.crl (hash: +1jRS3rzrvMPBvXf3dq9ISpyd347G4ryUDW3I99Yt00=)
                          2: F245933689D611F18F3B7BEECE1D38B0.roa (hash: Qc7x7IRzSjOGOYnYrylu0eYZUXVTdtXRFT3T/mxU+I0=)
                          3: 5964E8CE195611F1B7C5A3C4DAE4EC9C.roa (hash: Ic14Kwha21E6zRgAD/TUmunM95/yi/EoU7G/TV5bRGM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F854AAF, serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
        Validity
            Not Before: Sep 26 02:52:19 2026 GMT
            Not After : Sep 28 02:52:19 2026 GMT
        Subject: CN=6ab73364-2bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:c4:d3:db:db:a3:32:f2:89:28:02:7e:5f:
                    ab:85:a5:74:53:f4:aa:b3:5b:a1:bd:8e:6b:b4:66:
                    e3:d8:bd:3c:0e:8e:cb:cf:cb:ec:33:6c:a7:9e:07:
                    29:55:47:37:88:19:5b:4b:1d:6c:d4:94:b6:b7:69:
                    95:f4:81:f8:5b:40:a7:bc:4c:f1:b2:db:b6:a4:2e:
                    bb:f2:dc:45:a7:19:8a:9c:87:f1:80:cb:d0:a7:c9:
                    45:f0:74:5d:92:33:29:3f:42:1e:28:64:0a:f1:86:
                    6d:00:ce:12:32:fe:37:bb:53:d9:bb:d1:39:70:b1:
                    20:d9:63:ab:fe:aa:ae:27:2c:6f:f0:52:f3:51:c2:
                    1f:ed:07:c6:83:c6:6e:34:db:0b:d6:1f:ac:75:9a:
                    36:ce:97:b6:88:57:6d:23:75:01:09:13:89:50:ee:
                    ef:d3:2e:b5:68:11:fc:d6:fb:47:6e:fb:07:43:7d:
                    7d:f8:ab:25:e9:a9:63:cf:df:8c:79:a4:0a:6e:e0:
                    d8:99:dc:b7:e1:bb:12:6e:15:7f:d7:f9:df:94:4b:
                    38:a4:5f:05:91:a2:b1:3e:f2:4b:1b:2c:e4:86:dd:
                    dd:ca:f2:30:cc:20:25:0e:2d:47:b7:d4:30:3c:4f:
                    d6:71:f9:dd:ac:d8:50:1e:4f:72:76:8e:99:cb:15:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:35:15:13:B5:7D:E9:AA:61:EF:89:EA:85:E3:07:FD:BA:1F:F4:76
            X509v3 Authority Key Identifier:
                keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7f:d9:8c:85:e7:ca:b1:ec:68:e7:16:5c:33:f8:05:3a:eb:
         9c:04:5e:65:19:88:d1:c6:45:46:da:b4:fb:09:2a:15:21:da:
         ea:2f:a9:ad:2b:da:2b:dc:68:99:9d:fc:6d:d4:37:c6:d1:a2:
         86:9a:f8:47:9d:ab:15:90:e9:8a:ef:31:1e:14:aa:d8:91:a4:
         a3:e2:51:e4:2c:1c:44:9e:9d:45:a0:68:66:ba:e8:fa:69:31:
         e4:e2:89:86:60:25:62:7e:48:cb:39:8a:5c:37:a3:c3:63:45:
         94:49:d7:ce:5a:2f:64:6f:3e:10:f0:26:ee:c0:49:a9:5b:de:
         66:dc:0b:ac:d8:23:e8:57:17:ff:67:37:64:ec:3d:8e:b2:36:
         ab:61:82:f5:34:a5:c4:40:64:7f:24:ee:96:e7:ef:34:28:f3:
         81:e2:a9:aa:50:7e:35:46:a3:fb:a7:01:fb:be:81:77:6e:df:
         94:29:6e:bf:b5:41:ad:37:d6:fc:48:3c:76:1b:93:5b:43:e3:
         36:eb:91:92:af:a6:9d:36:d6:ae:e3:23:51:dc:e2:41:b4:6d:
         2f:b8:03:be:10:95:0a:d3:61:46:06:0f:35:57:f6:c7:53:58:
         e3:90:f5:48:ea:1b:d7:c8:ad:ec:12:ba:e6:af:5b:14:3b:95:
         90:40:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:50:14 2026 by rpki-client