Error: rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
File:                     7363z88lTJmL2c4HwPSOB9YbfD8.mft (raw, json)
Hash identifier:          EzKFULaOEEOqF0HWsReF4msel/hP1WZexf2C6q0ZBjk=
Subject key identifier:   33:93:59:93:DD:04:EC:C0:4A:A3:F5:27:BF:B7:D8:F3:E7:42:FD:80
Authority key identifier: EF:7E:B7:CF:CF:25:4C:99:8B:D9:CE:07:C0:F4:8E:07:D6:1B:7C:3F
Certificate issuer:       /CN=F36BA80DAR/serialNumber=EF7EB7CFCF254C998BD9CE07C0F48E07D61B7C3F
Certificate serial:       09CB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
Manifest number:          09C7
Signing time:             Wed 04 Nov 2026 01:43:54 +0000
Manifest this update:     Wed 04 Nov 2026 01:43:54 +0000
Manifest next update:     Fri 06 Nov 2026 01:43:54 +0000
Files and hashes:         1: 7363z88lTJmL2c4HwPSOB9YbfD8.crl (hash: /qewihZBkec9fypgM96JeYP+JYDlAQTUzpFL3FO0CHg=)
                          2: 37F5CA1C8DA711F188D9EDC3CE1D38B0.roa (hash: IbzZRWq+YoJAGJ1pBYTPRd+rnICSSevxY6WfqJWQ2hg=)
                          3: 1F90EA80C23A11EB8001DA1FF8AEA228.roa (hash: mcxexODswgAAU9SdPTRFqjA9BdfIB4DaMGkNObAgToU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
                          rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2507 (0x9cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA80DAR, serialNumber=EF7EB7CFCF254C998BD9CE07C0F48E07D61B7C3F
        Validity
            Not Before: Nov  4 01:43:54 2026 GMT
            Not After : Nov  6 01:43:54 2026 GMT
        Subject: CN=6aea8dda-3d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:c7:a8:dc:a9:4b:32:cf:a4:6c:56:6a:80:
                    b1:87:65:a6:3b:c3:d9:f9:33:7b:9f:0a:c1:92:25:
                    cf:ff:9c:a7:1f:0c:35:a5:18:ec:41:fe:c9:aa:d0:
                    31:db:13:1a:a2:9c:14:48:7e:5b:a0:b3:03:eb:d2:
                    e1:ed:fb:95:ac:f0:ce:ed:e9:90:91:ac:96:4b:75:
                    2d:cb:a6:e9:8c:ba:69:fa:f1:1b:cd:9d:f3:00:eb:
                    70:5f:9a:3f:fe:14:24:d0:b6:2e:bc:16:fa:d4:e5:
                    c4:0a:a3:c3:ae:fc:dc:c1:a9:64:eb:c5:e6:93:d2:
                    93:e7:46:11:43:56:81:52:b8:0c:6e:22:71:05:96:
                    90:6c:b6:cf:2c:30:3b:16:82:e1:fc:f6:06:0d:4e:
                    7f:af:4e:e1:54:e7:ea:6b:16:f3:65:be:f1:7e:df:
                    60:a3:9d:27:aa:56:21:92:e7:28:71:f3:c4:a6:a6:
                    d3:93:c5:d7:29:5d:97:65:8d:b2:e0:b5:91:2f:4e:
                    61:9a:c2:3e:0a:11:98:e4:2b:5c:df:26:c6:48:aa:
                    65:a8:e8:bc:1b:92:20:f7:ef:d2:f3:94:2d:79:71:
                    fc:75:1a:9b:8c:00:5e:f4:98:ea:0f:4c:08:2e:3e:
                    ce:70:b5:3f:7d:be:eb:af:f9:3f:e9:76:5b:75:c7:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:59:93:DD:04:EC:C0:4A:A3:F5:27:BF:B7:D8:F3:E7:42:FD:80
            X509v3 Authority Key Identifier:
                keyid:EF:7E:B7:CF:CF:25:4C:99:8B:D9:CE:07:C0:F4:8E:07:D6:1B:7C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e7:86:b2:41:6c:48:82:2c:db:3f:b8:eb:bc:55:9d:fd:f7:
         72:1f:94:b0:17:8e:72:18:09:84:14:34:10:e6:62:31:c9:65:
         0d:af:d7:15:39:1e:65:ef:2f:5e:91:85:bd:b6:b6:23:81:ca:
         11:ee:80:65:ae:fc:05:bc:3a:1b:c1:a9:c8:95:51:0e:6c:d5:
         4b:9f:66:32:07:a1:d2:bb:a9:e9:dc:8a:e0:42:8f:d0:b8:3d:
         0f:26:ff:af:7b:ab:f0:ac:e9:06:72:39:34:72:30:63:6b:91:
         da:d5:55:52:4c:7f:a0:ec:89:ca:ee:d0:6a:5c:99:1e:0f:41:
         33:c8:f9:7b:5d:db:da:cd:95:d1:4a:be:86:bc:d8:d3:8e:db:
         b4:97:f5:c9:ad:a5:f5:20:09:74:e6:9c:d2:b0:7f:22:56:b9:
         ea:7e:eb:d2:55:5c:8c:6e:de:1f:10:07:66:c3:18:6a:ca:7a:
         3e:fe:c1:47:7c:3e:49:a2:ef:93:47:17:11:de:a7:a7:05:e5:
         45:40:38:f1:e7:bf:7b:8e:6b:49:15:4a:92:f0:16:54:c9:06:
         86:26:10:9e:77:f1:c3:64:23:55:0d:9a:3a:66:be:3d:49:59:
         50:e4:27:8a:fe:53:69:1f:ff:0e:5f:6b:3b:da:c5:89:b9:a3:
         0d:e0:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:19:05 2026 by rpki-client