Error: rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
File:                     Filoib_wMb9_3nNn4t7pPLAIAoM.mft (raw, json)
Hash identifier:          eeGdcjdb/eFE98AQ6pZ67i8lf2IO9qEmqJkRxEohwqw=
Subject key identifier:   1F:36:9C:9F:20:49:6D:DA:6F:23:62:6E:3F:C3:D4:B8:8B:7E:3B:20
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Certificate issuer:       /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial:       038F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
Manifest number:          0380
Signing time:             Wed 04 Nov 2026 04:14:47 +0000
Manifest this update:     Wed 04 Nov 2026 04:14:47 +0000
Manifest next update:     Fri 06 Nov 2026 04:14:47 +0000
Files and hashes:         1: Filoib_wMb9_3nNn4t7pPLAIAoM.crl (hash: BGRXEugUPAAiGsFHHIm+YhNIG4gVNh964QHTpGy4uN4=)
                          2: BDEC29CA919B11F1AD7E43C3CE1D38B0.roa (hash: orjJ8rJ6sip9ETuYXH/EqMDUWi0EVMZEH1jhy65ixEA=)
                          3: 5AC4BF74032511F1929BD2EDDAE4EC9C.roa (hash: Mr+VNN9Z11W7VCtSCEh7NwS5SxBn5tdF3qqSe50Nvo0=)
                          4: C7D794A2833111F0BA372F98DAE4EC9C.roa (hash: 10t3J3G0W//+SuAl6SEkRsS4xMprNtVls3DmnWSADos=)
                          5: 8FC2BDBE057A11F18F7783C4DAE4EC9C.roa (hash: AQrOFPjFaqguMhUl4BS2Zhq/YyRQNkfhZPPG0wTy2FY=)
                          6: 328118D26ED211F1A7E0B60BCF1D38B0.roa (hash: mpYwvFPIIwGBad6LgXffGJB90JE3h4W8XaZN6Yka/Yc=)
                          7: B4706624834911F0B13243B3DAE4EC9C.roa (hash: bO4CRsQGJ9Fo2uTsOo+M4VqSaZfI6VGKrX/RQl3alaE=)
                          8: 3554EEB2347311EFA6FFD08D762E951A.roa (hash: STwhEyl7QlJqy2GwaPGbVHQtRVU/mUCXwrdIoazOpVI=)
                          9: E4AD7D32057A11F1AA15C6C4DAE4EC9C.roa (hash: 2aR11taDJSSgD4ZfkhbtNmSyzLyHvlisHe10lCn519E=)
                          10: A7FC5510032811F1B2192182DAE4EC9C.roa (hash: wGkWjE/BfFbXziwaAAoO4iCbMSLXd6CDbuL/jS67JKY=)
                          11: 6B2C5254032611F1872E2AF2DAE4EC9C.roa (hash: gSEOHsrvDJwVLm0ZAjOxsE19xm6ZGQzPUV5PhKX5T5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 04:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
        Validity
            Not Before: Nov  4 04:14:47 2026 GMT
            Not After : Nov  6 04:14:47 2026 GMT
        Subject: CN=6aeab137-27bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:1b:63:0d:67:f4:aa:c1:44:36:05:35:1a:
                    55:65:f4:fb:99:63:86:3b:15:b8:ce:14:0c:04:30:
                    62:78:13:36:df:f7:16:9b:94:e1:0b:fc:9a:3e:15:
                    3c:0a:45:06:f4:18:40:14:a1:47:0f:2c:08:ca:37:
                    b3:4d:c0:3a:1a:56:67:25:0f:af:80:64:87:d5:af:
                    d9:b9:18:31:11:99:c0:4f:bd:52:d9:04:9d:f2:89:
                    5f:5c:95:a1:0c:32:8a:a6:16:4d:f1:88:51:31:13:
                    70:0e:e4:3e:b6:05:4d:c8:d0:bb:2a:16:82:21:49:
                    9f:e2:59:20:15:07:b8:d7:10:f3:46:df:4d:ec:19:
                    eb:55:86:cc:fd:ed:03:14:05:6f:39:00:e2:6f:dd:
                    20:6b:9a:d5:da:ab:83:1f:e1:9d:44:ca:d5:44:14:
                    46:fb:a3:ee:6d:3c:ed:f2:16:7a:e7:dd:0e:9b:bc:
                    07:3f:75:d5:bf:86:f3:4f:a3:91:d9:ce:5a:2c:91:
                    7b:46:7b:49:40:de:2c:e7:d8:c9:0e:28:16:31:97:
                    b1:5f:5a:da:47:30:81:ca:04:fa:7a:83:da:e8:f8:
                    4d:68:d6:a4:e3:18:c4:e8:f2:b5:6d:ed:2a:78:9c:
                    91:1d:25:f0:88:0b:b7:1d:1f:b0:1e:59:1a:99:2d:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:36:9C:9F:20:49:6D:DA:6F:23:62:6E:3F:C3:D4:B8:8B:7E:3B:20
            X509v3 Authority Key Identifier:
                keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ef:aa:70:ca:0a:6b:ca:52:44:36:33:c6:22:42:a8:b9:3a:
         2e:14:97:18:2a:bb:cb:4a:7c:3a:79:78:a4:e7:09:28:1f:13:
         aa:2f:d3:5b:32:7f:da:9a:bb:14:d7:52:db:87:0f:a1:b9:69:
         96:df:e0:3a:a4:d1:42:3d:68:67:2d:fd:e8:9c:ca:8f:f6:03:
         ce:bb:3a:ad:c7:6e:9c:1d:c9:c9:64:fb:69:02:ac:eb:86:c2:
         a0:ec:13:52:67:d4:af:67:96:a5:14:3f:4f:2d:f9:1e:7e:b8:
         db:66:8e:0f:49:b4:9a:ab:22:d7:aa:94:c1:10:01:1e:d4:44:
         86:3c:6f:ca:22:89:19:d8:84:6b:93:86:84:14:c3:6e:9a:3f:
         61:53:cb:5b:b4:3a:b8:40:f9:9b:9f:f8:6b:1d:a4:98:5a:4f:
         6c:71:fe:01:a6:e0:83:f8:8b:59:10:26:76:7c:5d:a0:8a:83:
         ef:fa:6a:57:dc:e2:72:20:02:96:db:f3:82:a9:f4:f3:ef:78:
         4c:c1:81:2c:dd:d9:db:15:0a:59:20:bc:ad:6c:e4:c4:23:58:
         9d:44:95:a2:9c:c4:b1:a0:44:5e:54:6c:94:83:94:4d:35:95:
         eb:a9:45:64:13:c9:de:6c:56:54:77:99:5c:b1:55:cd:a3:2f:
         e8:e7:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:31:10 2026 by rpki-client