Error: rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
File:                     BzRbRCXqohbQO3DogD88w6vhdRw.mft (raw, json)
Hash identifier:          08f1ysJH5JIhRZxeLYTWUUqXSKW0W6OfJ4rMd10VqZ8=
Subject key identifier:   DE:33:14:A2:15:4B:0B:E5:D2:27:B2:01:85:20:E6:08:FE:CA:29:F9
Authority key identifier: 07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Certificate issuer:       /CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Certificate serial:       052B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
Manifest number:          0528
Signing time:             Mon 28 Sep 2026 03:22:30 +0000
Manifest this update:     Mon 28 Sep 2026 03:22:29 +0000
Manifest next update:     Wed 30 Sep 2026 03:22:29 +0000
Files and hashes:         1: BzRbRCXqohbQO3DogD88w6vhdRw.crl (hash: Vg5VGm2Z1dg1AEcvkQbYuLjeP0CMVKZkojFYsWuv2d0=)
                          2: E2E0E31406A011F1B28491C7DAE4EC9C.roa (hash: zfZ7SQHe7ntDVmEKHJbxTZVYNg5h50utum1HjMBco0w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36145DBAF, serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
        Validity
            Not Before: Sep 28 03:22:29 2026 GMT
            Not After : Sep 30 03:22:29 2026 GMT
        Subject: CN=6ab9dd76-bea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2f:7e:ff:bf:19:14:29:05:b3:7d:d4:3e:2e:
                    ee:f5:fb:31:e1:60:b3:a5:25:59:70:6e:69:02:96:
                    6e:d6:71:5e:23:fd:52:4e:6b:c1:41:6b:3c:1c:02:
                    f5:75:97:4b:ea:67:e1:4c:6c:07:08:da:97:8b:5c:
                    c9:a0:45:93:d2:dd:8c:0c:76:aa:fa:e9:dc:40:ee:
                    ba:ef:8f:1a:ed:18:9e:8c:8b:6f:f1:0a:be:05:9f:
                    fb:7f:20:7c:1c:1e:8d:a7:bb:85:c8:19:f5:07:fb:
                    1d:0d:92:b7:82:d3:6f:68:56:16:3c:5e:37:c1:57:
                    1b:d4:96:63:68:5c:1d:2c:2d:e3:50:e3:d0:50:73:
                    ad:06:9f:64:9d:75:69:d7:a0:b6:25:0a:61:d8:e8:
                    5c:df:b3:70:4a:86:d5:ba:02:38:a5:6b:91:c0:48:
                    ff:84:d3:f1:3d:11:a9:c5:a6:74:fa:9a:13:d2:76:
                    8c:11:50:31:82:41:b1:3c:fa:57:f7:4f:3a:48:02:
                    22:05:72:f9:fa:ec:b4:c3:69:54:96:57:03:fc:65:
                    53:9d:a8:71:11:3f:ff:92:c1:eb:6b:a1:69:6d:34:
                    7f:15:9b:8d:9b:e7:a9:cb:2e:27:56:5c:02:95:b0:
                    f2:52:18:13:4f:25:2e:60:e1:70:c3:7b:39:bd:f2:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:33:14:A2:15:4B:0B:E5:D2:27:B2:01:85:20:E6:08:FE:CA:29:F9
            X509v3 Authority Key Identifier:
                keyid:07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a7:0f:4e:ec:59:b0:60:bf:5a:ec:13:26:b4:35:26:95:3a:
         76:db:6c:c5:03:4b:8b:94:fc:0a:06:4b:38:41:43:45:98:5b:
         39:02:e1:13:4f:7b:a7:1c:03:7c:05:73:ad:0c:7c:02:16:ac:
         5b:f0:9f:de:66:65:fb:0f:26:94:90:8f:a2:f8:47:74:f3:68:
         4e:27:e3:db:a7:bc:f8:81:0c:4e:a8:48:77:e7:fe:e1:b5:16:
         d9:f0:e9:8e:80:13:59:c7:21:4d:96:8c:30:1d:98:2f:57:33:
         c6:56:d7:88:b1:65:9e:01:e6:7d:2d:e5:99:70:c2:68:5e:8c:
         14:83:4a:00:73:f7:ad:20:8e:7d:3d:f6:09:be:6c:4a:88:e3:
         18:c9:5f:68:6f:f7:80:b7:aa:02:35:73:23:6b:08:6b:77:a3:
         1a:a2:ae:1f:58:cf:0a:db:b7:2b:4e:60:b6:54:3d:b1:8e:e1:
         54:c1:ca:2b:c8:d9:f6:62:1f:32:c7:94:34:91:e9:1f:bb:d6:
         e5:de:3d:5c:88:86:c9:9d:57:3b:73:19:ec:19:60:af:e4:f1:
         1b:b5:a0:46:e7:80:aa:09:ae:fb:b1:16:47:42:95:88:57:35:
         f6:16:67:9b:b4:37:7f:41:36:78:9d:8f:e5:f2:fa:19:8f:03:
         6c:92:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:28 2026 by rpki-client