Error: rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File:                     sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier:          bkq3gR4msEtY2U3xK+b6bfZdRvSJ50qjcSHwmHNDFfQ=
Subject key identifier:   74:B8:A5:48:8F:05:5C:6D:7E:BB:A0:C7:DA:9A:60:DF:16:A9:7E:85
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       0377
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number:          0371
Signing time:             Sat 26 Sep 2026 04:11:31 +0000
Manifest this update:     Sat 26 Sep 2026 04:11:30 +0000
Manifest next update:     Mon 28 Sep 2026 04:11:30 +0000
Files and hashes:         1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: kO6TMp4LjyObzqYQuRZy8YfnC13yNLz92wX21gOoSGM=)
                          2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
                          3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
                          4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Sep 26 04:11:30 2026 GMT
            Not After : Sep 28 04:11:30 2026 GMT
        Subject: CN=6ab745f3-f81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:01:1f:57:ca:e9:6f:b3:fa:03:45:f2:86:
                    46:d9:9b:31:b0:1a:60:9a:16:b3:41:f8:fb:34:bf:
                    4b:fc:e5:ed:48:8c:59:28:3b:a8:e6:dd:f5:b5:49:
                    fc:3c:fd:e0:94:7d:16:3c:83:9e:ee:d8:1d:ef:c6:
                    ea:71:bf:c2:16:42:90:47:b0:81:40:80:e4:b6:6f:
                    95:57:55:c4:d6:8c:be:1f:b9:bc:e6:aa:9b:13:3f:
                    43:4e:d7:2d:b8:f2:b6:de:a8:2b:ee:c6:35:65:96:
                    30:cf:9e:8b:b7:28:d2:b7:d9:16:3f:f2:bc:14:9a:
                    8a:fa:ef:89:ee:8a:67:95:a5:07:6f:b6:12:f5:06:
                    46:99:b6:2a:86:62:4c:29:67:03:1e:38:e0:55:1a:
                    ca:b1:f3:61:14:89:54:e1:5d:55:1f:2c:fd:6a:8f:
                    2c:c1:fc:7f:df:0a:e3:22:21:99:cb:d7:cb:e3:42:
                    44:df:1a:fe:13:35:49:f3:e8:12:09:6e:1a:68:e0:
                    7f:a5:65:64:2c:c6:ba:7f:a5:16:dc:f8:c7:eb:7d:
                    3c:aa:6a:98:d5:4c:e5:b8:3f:48:53:cc:19:f6:18:
                    f7:8c:90:99:0b:90:29:05:b9:47:d1:a3:ce:0f:2b:
                    b4:a2:10:8b:4c:b2:35:7a:6a:8f:5d:0b:56:16:07:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B8:A5:48:8F:05:5C:6D:7E:BB:A0:C7:DA:9A:60:DF:16:A9:7E:85
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:27:61:02:b9:fa:a4:7e:cc:41:3d:dc:b4:2a:55:bd:1c:09:
         a9:16:7f:57:64:2a:02:74:15:d2:68:d1:49:82:76:eb:80:37:
         1c:ff:97:c8:af:5f:0b:f2:70:79:9c:c1:62:e3:89:2b:04:b6:
         08:13:db:b6:7a:db:56:bd:7f:b2:30:87:c2:bf:f2:1b:74:d3:
         29:60:ad:c5:fe:3b:08:bc:13:ab:10:70:f7:87:f1:6f:4a:a5:
         c5:25:39:68:5f:4d:17:93:b8:3b:b4:4b:89:b5:af:ef:dd:4e:
         92:5d:e0:88:9f:66:ad:fa:04:a6:66:37:fd:2b:a9:b3:0e:c9:
         aa:63:f0:38:3c:fd:89:42:3c:0a:be:12:0e:0f:9c:b5:50:58:
         9f:b1:fc:ee:9a:b1:1c:7a:76:63:9e:8f:af:43:16:05:1d:6e:
         28:67:59:bc:17:24:63:de:5c:e2:b2:2b:9d:a7:82:bb:87:db:
         75:c3:d6:bd:54:8a:f3:72:42:0d:29:1f:a7:3e:3a:d6:97:13:
         5a:c7:58:63:1a:2d:10:9b:e1:e2:01:50:7d:00:a5:7f:6d:e7:
         09:ed:bb:03:e4:d0:37:5f:ce:09:16:f0:1e:f4:9d:2d:c6:33:
         50:14:fa:83:c2:32:52:35:9c:ba:b3:e9:26:dc:3b:32:b3:b9:
         75:c4:ea:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:42:26 2026 by rpki-client