Error: rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          s7+FHDPBBG5Eyzf4bj1iRuCusfo3FLqfLZhuOCGUaEM=
Subject key identifier:   45:1F:5E:BF:56:14:5B:1F:B7:0F:68:C9:FA:BF:69:F9:9A:EF:3A:B8
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       0636
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          062B
Signing time:             Tue 03 Nov 2026 02:56:56 +0000
Manifest this update:     Tue 03 Nov 2026 02:56:55 +0000
Manifest next update:     Thu 05 Nov 2026 02:56:55 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: GRUHPg0iuhaeirUFpgsoOH9PK9mfw0CYyhM6fShxG20=)
                          2: 9F55A6088FCA11F1B30815C9CE1D38B0.roa (hash: +CWFxBF1PZN6OniJBdhYOvm7KqNNXKgvRCDZ4zqYgWk=)
                          3: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
                          4: DD559FC68FCF11F18B5977E7CE1D38B0.roa (hash: 88ReSMVzJ4BF1wDmtrF0G+NRMvDEU2WgJwfRanfSMO4=)
                          5: 50BE21588FCC11F1B4CB3AD1CE1D38B0.roa (hash: jehT4w4l4yjlEklCE/woHJl77Wd5+kKmPfYLjQCak+U=)
                          6: EB0E6C0E8FCC11F1AFB13AD5CE1D38B0.roa (hash: OR4CeWr7z50WI0avP9UMn/SEpC0E+MmNgu0hAqXKawg=)
                          7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
                          8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1590 (0x636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Validity
            Not Before: Nov  3 02:56:55 2026 GMT
            Not After : Nov  5 02:56:55 2026 GMT
        Subject: CN=6ae94d78-e2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:ef:d5:51:ab:c0:63:dd:8d:39:cd:bd:9f:
                    64:75:af:92:a9:aa:8c:f6:2f:3b:58:8b:9d:83:b8:
                    3d:83:8f:f6:7e:18:51:0f:c2:8c:39:8a:95:c8:45:
                    66:d5:04:14:e5:ac:73:3c:ee:f7:07:b2:05:69:c6:
                    e9:17:76:a7:0f:a0:d3:06:13:44:3f:63:76:b0:ca:
                    03:9c:55:48:87:bd:63:35:a4:05:29:a7:50:18:98:
                    a3:5f:a7:1b:46:37:ea:72:4d:e3:f9:32:a6:2a:69:
                    43:4a:6e:ae:6a:88:a0:41:a6:77:4d:4f:aa:ea:4a:
                    0f:ce:61:24:92:de:dd:a2:ba:12:97:10:64:fd:a1:
                    0b:0c:7c:f3:09:03:53:22:7e:48:8f:68:ab:25:d6:
                    89:62:8c:bd:ab:c4:6d:4c:1c:1e:51:63:1f:f5:e3:
                    2e:95:2a:d0:e3:21:ee:72:13:f8:66:64:4e:9d:3d:
                    40:46:aa:bf:9c:b1:71:89:c5:c8:a1:84:01:b5:9a:
                    64:84:0e:1a:0d:c8:d3:2f:b5:9a:0d:05:d5:e5:b7:
                    c3:0e:c7:a9:cd:5c:c7:4c:d9:63:dd:a6:58:9c:1a:
                    19:cb:ef:c8:14:f3:f5:6f:51:fc:9d:35:67:77:c3:
                    c3:f4:89:b8:55:18:7d:a7:2a:d2:6d:00:6e:a8:c4:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1F:5E:BF:56:14:5B:1F:B7:0F:68:C9:FA:BF:69:F9:9A:EF:3A:B8
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d9:0a:3e:5e:26:5f:89:b4:b4:a1:f6:8f:4a:93:32:b4:b8:
         a3:3b:7b:cf:ec:e3:2e:b7:84:ba:d4:28:fa:a2:bd:64:36:2d:
         f7:ad:f2:05:4e:8d:30:e4:3b:1c:02:31:03:bc:30:fe:ec:77:
         86:f5:94:3d:6d:41:02:99:92:46:91:8f:89:fc:be:a7:a4:02:
         68:f7:dc:78:14:8b:5c:86:03:8b:26:18:6a:07:cc:ac:48:bb:
         83:ef:f1:db:3a:20:8a:ac:9f:46:c4:73:ee:32:c7:b8:47:37:
         2c:48:0d:e5:e5:53:6d:d0:d0:ef:ba:fd:ae:b5:e8:db:7a:e1:
         9d:56:59:48:31:ad:14:c1:88:73:28:f3:75:d0:24:e3:c4:59:
         dc:22:4a:3b:40:d9:4c:6a:18:90:0a:98:38:9c:5f:39:b3:30:
         c8:db:23:b5:5c:13:31:67:82:9d:66:a0:6f:54:a7:88:d2:b9:
         41:b0:be:d4:44:ff:0c:84:29:56:8a:1e:0f:96:33:1f:2b:35:
         54:60:3c:f5:73:cc:b0:bc:5b:c6:62:5c:9c:4c:2d:1d:f3:3c:
         58:1e:86:3f:25:56:38:18:e7:d3:c9:63:19:c3:09:3d:61:bd:
         c4:e6:07:15:e5:2d:e6:74:37:a7:31:22:7c:4f:4d:d2:06:5d:
         ab:cc:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 18:40:09 2026 by rpki-client