Error: rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
File:                     0JparVoXc9hrHSbdXRxET8ys9uQ.mft (raw, json)
Hash identifier:          hzqed3EPRBgUGcsh8UWYgDdTltZxk3fdRGrglwqYi8g=
Subject key identifier:   1A:B5:6F:83:80:F1:07:3C:F4:63:66:DE:6E:47:98:3A:0F:B7:76:2A
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Certificate issuer:       /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial:       036C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
Manifest number:          0360
Signing time:             Tue 27 Oct 2026 04:17:14 +0000
Manifest this update:     Tue 27 Oct 2026 04:17:13 +0000
Manifest next update:     Thu 29 Oct 2026 04:17:13 +0000
Files and hashes:         1: 0JparVoXc9hrHSbdXRxET8ys9uQ.crl (hash: IiSi4+K/fYZ/+fKY+00T3TcV/zS+5OkH/hQoXqurFIs=)
                          2: 5D97EC882D1611F19AC068E9DAE4EC9C.roa (hash: Nd824+zIPH9JTtjxmpkoGfMedFkSr7B3dV2aK/j/RZE=)
                          3: F5DFDF7A2D1411F183B08EE0DAE4EC9C.roa (hash: bDSLtErnrdZFcDBbgffxh/78ctsTZ8XFV1WdiU3csZI=)
                          4: E5E1D8322D1211F18330CFD4DAE4EC9C.roa (hash: pDD/K1s5jIYNoQOdvaFU2JduYhwGAyTs1meNSV1fFgk=)
                          5: A6AEED562D1411F182180DDDDAE4EC9C.roa (hash: X98HrtvjqtIk7250C17DJqnpkquwvjxOdANpHQT1YOE=)
                          6: 005277CA2D1411F19F47E3DADAE4EC9C.roa (hash: hfLkKQB462eRt13ViRiwse3oNTJII/TyMAwJoMbhFu0=)
                          7: 398848402D1311F1BAA22FD5DAE4EC9C.roa (hash: yP7+AAFHj7Sjoi+sbE5FIStkJLQJ5hzb+Bv5zDj3YPY=)
                          8: 4E367F362D1411F193F6A2DCDAE4EC9C.roa (hash: Hva6WC1MR0w9fxXELLwTc8wp0/s+of2OUmb/NZl5gnY=)
                          9: AECB1C142D1711F1B01831F1DAE4EC9C.roa (hash: JQBqoZnnwg76xS1Fp0vIiTMe2ujGiBdmDQrJPFV/kXI=)
                          10: B6D306CA2D1111F1AF5753CDDAE4EC9C.roa (hash: i7QZyG/nMeWTcoiMA1ETxMPD9HBiOdVz3lcsX0wQVo0=)
                          11: 27C816362D1711F19E094EEDDAE4EC9C.roa (hash: UVfs81n2SMgjtWjD2FisacME40GhAjNWkbUeCXyweSw=)
                          12: 658345642D1111F18F99FACCDAE4EC9C.roa (hash: 3IDzrwpzMmpVJX4D/2AwsQinkoMvGk+PnE3f0W1tG9w=)
                          13: 41C6D1002D1511F1BC8AEBE0DAE4EC9C.roa (hash: xtq/+9B10Xvwdvmepm+gxrmkIEDZCZ6b5ji5Ft9YF0w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 04:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
        Validity
            Not Before: Oct 27 04:17:13 2026 GMT
            Not After : Oct 29 04:17:13 2026 GMT
        Subject: CN=6ae025ca-57e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:ff:c9:74:60:c3:af:e3:b1:c4:c2:1d:2b:
                    63:a3:8d:b5:4f:ab:4c:a0:f9:09:b1:60:b2:7e:51:
                    c3:11:18:07:2b:59:33:de:c2:da:98:67:0a:a7:1c:
                    b9:62:66:c5:ca:48:f8:01:30:3f:be:40:3f:ee:a0:
                    6d:d0:33:a1:6b:3e:cd:2d:7b:b0:05:1d:8e:e4:c7:
                    17:9c:b8:a6:db:e1:29:e7:33:b5:f2:4e:36:81:36:
                    b0:87:9c:70:52:5c:fb:00:c4:15:7d:88:d3:5c:24:
                    25:37:38:b3:0c:99:e3:7c:c6:a3:40:3e:4a:a6:23:
                    a0:fb:96:8d:bb:22:0d:03:f7:13:64:3d:f5:99:26:
                    e1:14:3f:bf:db:c2:f2:7f:f3:ea:c3:31:fc:30:b3:
                    49:25:1a:9a:5a:e9:e4:7a:7f:07:18:0e:7a:27:3d:
                    20:a3:3b:d4:5a:da:de:03:d3:46:de:b1:eb:69:43:
                    42:2a:2b:d2:52:1c:d0:6b:b7:f3:32:c5:f6:e1:c8:
                    14:b9:64:ab:72:e4:84:4c:9e:5f:67:bf:39:7d:26:
                    44:6a:db:d0:7f:23:0a:cd:e4:3c:18:15:e2:11:f0:
                    6e:10:cf:69:a4:a9:fa:6d:6a:9d:db:f3:61:d0:2a:
                    6a:6e:44:87:d4:75:27:85:6c:37:a8:e5:0d:af:b3:
                    45:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B5:6F:83:80:F1:07:3C:F4:63:66:DE:6E:47:98:3A:0F:B7:76:2A
            X509v3 Authority Key Identifier:
                keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:40:20:26:54:dc:40:85:a3:d7:31:eb:21:65:cb:e2:b7:ea:
         63:27:88:64:ef:7c:6e:48:ed:74:ea:ec:fa:b7:2d:e3:9a:0e:
         1b:aa:e4:66:66:2b:1d:9c:f6:1f:d9:21:16:91:1c:03:20:02:
         4a:08:6d:f8:64:d8:21:15:af:8d:71:70:97:cd:c1:9e:7d:9e:
         92:e4:f8:86:3a:e6:fa:21:14:cb:92:be:53:0a:9e:74:8a:5a:
         b8:c3:19:c8:f8:30:66:4a:a9:46:ac:d2:8e:b8:2c:14:44:1d:
         10:d6:13:a0:e6:fe:04:fc:33:6e:d5:a8:19:38:70:56:a3:e5:
         73:e7:2e:7f:9e:ff:59:96:0b:d6:3d:c7:dd:80:a8:3f:9c:0d:
         2a:cf:da:54:35:25:d6:a2:2f:20:58:c7:ae:fd:47:f6:01:d2:
         2b:e0:f1:5f:2b:2a:42:86:a7:e2:94:ef:b7:22:cf:d4:f2:b5:
         cf:04:89:b5:19:03:92:45:17:7b:82:cc:d2:3c:a3:ee:3c:7f:
         1b:21:fd:69:4f:c2:97:3a:7d:d3:3a:b4:0d:19:de:cf:a1:ae:
         6f:af:df:93:e8:85:64:ad:3d:92:1a:6a:2a:4b:da:f1:53:41:
         d2:b4:aa:1e:ed:26:b2:57:c9:9d:67:d0:df:66:1c:02:d6:02:
         b7:3f:ed:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:12:12 2026 by rpki-client