Error: rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
File:                     a80vareT2tF2SQgQRK-wMtX7SVc.mft (raw, json)
Hash identifier:          3CnFjw5AMjX8v6krBL7Eq7Nmn0v1uGeC3a7cQ6iA5xU=
Subject key identifier:   BA:95:D7:27:63:66:9D:50:50:02:EB:D5:79:03:76:C8:70:21:85:9F
Authority key identifier: 6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57
Certificate issuer:       /CN=F36429BBAF/serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
Certificate serial:       1009
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
Manifest number:          1006
Signing time:             Sun 25 Oct 2026 00:59:05 +0000
Manifest this update:     Sun 25 Oct 2026 00:59:04 +0000
Manifest next update:     Tue 27 Oct 2026 00:59:04 +0000
Files and hashes:         1: a80vareT2tF2SQgQRK-wMtX7SVc.crl (hash: LMK199+JuRPX1QVS2YGodeH4qZjmguVn3yMD8q/3rRo=)
                          2: 187EDD9C7AED11E984C8C332F8AEA228.roa (hash: nhY0hDClfKko61UqhvpEoCzSPfAm4A5VUTRq1mCbE5Q=)
                          3: 50D9415490BC11F1BB1D0FFBCE1D38B0.roa (hash: nrdvWy8odcTXpZqrFuH9SU7t8/+TedfUj1Tv/Or32Ss=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4105 (0x1009)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36429BBAF, serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
        Validity
            Not Before: Oct 25 00:59:04 2026 GMT
            Not After : Oct 27 00:59:04 2026 GMT
        Subject: CN=6add5459-002e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:af:85:fb:a7:7f:ce:28:91:f4:0a:1c:ca:
                    72:e7:26:da:ef:2a:d2:26:e0:c9:13:f9:82:0b:6c:
                    15:bd:41:d5:0f:a4:45:c1:62:b7:5e:0b:8c:30:7f:
                    b9:fe:c1:b3:d3:68:5b:a7:8a:f2:4d:c8:91:49:c7:
                    79:e8:95:9e:c2:92:b4:62:44:6c:6d:72:03:1d:a9:
                    ee:ed:18:41:01:37:e4:40:80:62:e6:e9:0f:fd:c8:
                    70:9f:dd:ff:e2:95:39:c1:31:c5:93:41:58:5f:0e:
                    78:e7:52:61:92:b1:b4:18:7b:e7:c7:9d:d8:10:cc:
                    bf:b3:f0:f4:be:6d:60:40:92:ed:b7:86:9f:36:31:
                    51:cf:4f:81:c0:2e:70:70:a5:88:aa:f0:8a:a2:83:
                    7f:3f:85:e2:da:d2:1b:68:59:0c:9b:64:20:57:1f:
                    64:4b:8d:5b:c6:0b:10:1a:5f:e1:4e:99:e6:c0:44:
                    83:b4:cd:7c:fa:e6:bd:e7:57:05:e0:9f:a0:0d:e9:
                    05:2f:8e:8b:bf:86:52:32:4c:b4:f0:86:68:fe:52:
                    ae:eb:d0:36:f7:da:fa:a5:a8:85:b0:20:d6:8e:80:
                    0f:c8:4a:32:88:b1:d2:96:11:96:79:c5:4d:52:16:
                    93:3f:55:8b:fe:87:b4:67:a4:59:fb:d1:bf:15:e7:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:95:D7:27:63:66:9D:50:50:02:EB:D5:79:03:76:C8:70:21:85:9F
            X509v3 Authority Key Identifier:
                keyid:6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f1:57:e2:fc:1b:a5:30:85:d7:c0:be:bf:b9:08:a6:c3:9e:
         ef:fc:e0:47:af:cf:c4:56:45:fe:30:76:b7:ab:47:14:2d:89:
         38:6a:4c:a0:fc:9a:52:d7:78:9c:7c:42:0f:d4:34:77:f5:56:
         2e:6e:f3:ac:0a:46:98:58:72:a4:ca:53:1f:58:5b:49:21:50:
         e4:3a:86:d5:17:96:1c:46:78:2f:67:7d:5a:33:7e:87:a7:93:
         21:d9:32:e9:55:d1:e8:2f:46:61:65:42:30:1e:ab:8d:2a:38:
         5b:3a:79:2f:c6:07:ce:c3:06:4c:c9:5f:2d:d2:3a:95:4d:5b:
         24:59:94:72:9c:aa:67:0c:d7:39:b6:14:f1:c6:fc:dd:12:f4:
         bc:36:6b:6a:10:a5:40:58:d8:e7:14:28:a2:42:db:74:05:26:
         2f:ab:a6:5b:e1:8a:9e:a0:ae:d4:b7:e8:a1:d3:5d:58:6c:2a:
         f2:af:ff:31:00:9c:0d:c2:e2:fc:b1:d2:a0:94:10:9b:4a:34:
         b0:f1:62:2d:64:57:cc:6d:2b:7c:01:79:88:07:cc:a7:0a:99:
         39:57:11:b4:da:80:55:0b:ca:ca:4c:8c:a6:8e:99:4d:f1:ba:
         ee:a6:f0:af:21:b8:1f:e1:0b:1e:9b:39:b6:d4:e3:d9:ba:ab:
         3a:ad:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:43:12 2026 by rpki-client