Error: rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft
File:                     282W95Lg6D5i6CDFStMGU1QFduM.mft (raw, json)
Hash identifier:          xS4LU/tzlQzFyJxt5fgSKbApPYNoFnSZ7D9ZksPDW+M=
Subject key identifier:   7D:93:E8:8F:42:DC:FD:0F:C8:88:9E:94:2B:15:AA:11:69:B1:0A:07
Authority key identifier: DB:CD:96:F7:92:E0:E8:3E:62:E8:20:C5:4A:D3:06:53:54:05:76:E3
Certificate issuer:       /CN=F36F8F06AF/serialNumber=DBCD96F792E0E83E62E820C54AD30653540576E3
Certificate serial:       8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft
Manifest number:          8C
Signing time:             Sun 15 Nov 2026 05:41:31 +0000
Manifest this update:     Sun 15 Nov 2026 05:41:30 +0000
Manifest next update:     Tue 17 Nov 2026 05:41:30 +0000
Files and hashes:         1: 282W95Lg6D5i6CDFStMGU1QFduM.crl (hash: pqjZKM9OhqQeABGKeG3KjiuoGyAX/UrgY5HbqiXlLTk=)
                          2: 800DBED485E311F1A69754D4CE1D38B0.roa (hash: gIjXIokhBTqr9NfKMjABZHd19gtr0Nhw1HH6PPnE5Jg=)
                          3: 647E02F0753511F18E3974DECE1D38B0.roa (hash: xKBb/SHJ/6UiPb5L7oEAFDNfhF2/kjoVITp1UjEzsf4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F06AF, serialNumber=DBCD96F792E0E83E62E820C54AD30653540576E3
        Validity
            Not Before: Nov 15 05:41:30 2026 GMT
            Not After : Nov 17 05:41:30 2026 GMT
        Subject: CN=6af9460b-6a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:a9:2a:f9:09:43:b2:2a:43:65:31:5d:31:
                    2c:be:ba:fa:b0:84:a8:e9:79:53:be:eb:96:01:42:
                    1f:2e:de:9a:2e:6d:f0:33:e3:00:59:80:dd:69:0c:
                    12:17:ec:d5:35:fa:90:d1:67:38:4f:00:d5:53:b8:
                    8d:e5:c0:53:12:b6:b2:b1:d6:ad:a9:13:3d:5d:21:
                    f0:42:33:33:df:1c:b8:9d:41:9c:8a:63:b6:0b:58:
                    ce:37:60:69:71:70:23:eb:5d:6c:2c:07:f4:32:c4:
                    59:cf:bc:6e:17:62:4f:66:9b:c1:a1:af:27:47:9b:
                    5c:2c:a9:4f:93:65:c3:ec:fb:c4:fd:3f:41:0a:96:
                    7c:8a:41:78:68:13:f9:61:b7:45:a0:7e:19:49:00:
                    a3:30:ff:c0:f1:74:23:24:3f:08:bd:d5:7a:34:7f:
                    51:8c:ab:5b:da:a6:95:d1:d0:5d:3f:66:93:65:cd:
                    f8:de:b4:ef:b3:8c:ed:7f:b4:18:7c:91:84:9b:f9:
                    c7:e3:a0:99:05:71:ce:ca:e8:a1:de:65:47:dd:d6:
                    a4:a0:5b:7e:68:22:34:32:48:06:d2:76:74:1f:e4:
                    2c:ad:70:40:cf:83:9f:02:a7:ba:8c:4b:0c:ff:f5:
                    12:d6:21:ad:76:b2:4e:1f:dc:24:08:9c:4c:3f:99:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:93:E8:8F:42:DC:FD:0F:C8:88:9E:94:2B:15:AA:11:69:B1:0A:07
            X509v3 Authority Key Identifier:
                keyid:DB:CD:96:F7:92:E0:E8:3E:62:E8:20:C5:4A:D3:06:53:54:05:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:08:7a:86:da:4b:34:85:20:34:d7:7f:86:f8:fa:47:9c:
         9b:61:07:d3:45:e4:f0:13:3d:ae:57:14:2e:1c:ec:56:42:f2:
         57:36:e8:62:d3:64:c4:70:65:a8:a3:ec:5d:b5:86:97:80:ec:
         a9:18:ab:c4:af:38:69:d3:a7:93:dd:4d:33:2b:2b:14:fb:fc:
         ae:75:5b:46:90:71:bc:32:17:a7:4c:48:eb:45:4f:01:45:9c:
         d6:e0:cd:1b:78:43:99:b1:df:fc:ca:13:af:6b:02:6e:87:71:
         c7:eb:53:01:42:31:b5:6b:a6:e7:d6:58:24:00:fd:8f:90:f1:
         1d:4e:cd:8c:d1:71:b3:a0:e4:a4:82:95:0d:46:6e:b6:a7:9f:
         fc:59:a8:ae:25:a4:67:33:7d:6a:d1:b4:a8:d2:06:56:28:09:
         1e:49:8f:d2:ed:7c:c3:be:2b:b4:ea:ee:e8:83:4d:a1:36:76:
         0d:e1:21:f0:aa:0f:2a:a7:fd:78:9c:09:f6:db:1b:22:b2:23:
         48:98:28:97:ff:c2:e4:e8:c7:c3:53:06:e3:b6:30:2f:b5:b2:
         23:21:6e:5f:ea:de:52:6c:29:92:84:82:0f:a3:99:e1:95:98:
         1c:1b:fc:c6:f8:39:90:d2:55:92:22:68:a0:7b:2a:f4:79:b3:
         fe:ca:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:56:35 2026 by rpki-client