Error: rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
File:                     rF31MEgJu3g-uWISaVigB4bo9nw.mft (raw, json)
Hash identifier:          kESQ52vay4vf7dKpJqn7y+VxT2O85HB9GVMZDWQD7wA=
Subject key identifier:   63:C9:84:A0:A1:7C:56:F3:86:4D:7F:5E:75:E2:12:26:10:5D:C6:2A
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Certificate issuer:       /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
Manifest number:          16
Signing time:             Fri 18 Sep 2026 05:53:42 +0000
Manifest this update:     Fri 18 Sep 2026 05:53:41 +0000
Manifest next update:     Sun 20 Sep 2026 05:53:41 +0000
Files and hashes:         1: rF31MEgJu3g-uWISaVigB4bo9nw.crl (hash: 7ZWpHRQTafsZBvho1IYwl/GXjF2ljE/IGPIcZLAcIkA=)
                          2: ABD8841AAC0B11F1A45AF6B5CE1D38B0.roa (hash: BdpOc8nXLX9m1U4j6tswz1zCcKWWiptJGewjkWTPIQ0=)
                          3: A54B6980AC2611F1A91C47D8CE1D38B0.roa (hash: YnX1ovFA/H7yWq5H7yWiVocIUHXSg1/RMNpBweFETtE=)
                          4: 5AB25916AC1111F195B323DACE1D38B0.roa (hash: +9/jrIbSnE0/2tZF25LOF3ZMEm0UfdRvKf7Wywlyq2g=)
                          5: E6B34480AC1011F19995DAD5CE1D38B0.roa (hash: llUZzNIWBE4VynEvGF/9Vn7at2bNc1NMrrPXH8KLCoc=)
                          6: 14CBD4A0AC1511F19A089AEFCE1D38B0.roa (hash: GYErmGR106Td4QoxYkQ5xHxtzrmeHMJ9oUXXpYLNIxk=)
                          7: 862EF5E4AC3511F19B4EADB1CE1D38B0.roa (hash: SLwUfV27DOpRvDI8RDcb61xEG0xmsMdYPIuES/cOYaQ=)
                          8: 3185A8CEAC2811F18C8A20E2CE1D38B0.roa (hash: 3tSLh3O+ZBTWpTXs5okXzr+CbPzAXi1uZEmLl9ZmRak=)
                          9: 02BDACE2AC0C11F18CCB55B6CE1D38B0.roa (hash: ZJxQZhAPpyjE5Cpr5EhF2ZIhWdEWEvyDGLHqbKq4xh4=)
                          10: DE0EBBA8AB8D11F1878A51B6CE1D38B0.roa (hash: 6ygjfOj8WF0GYnRtchSy4wsmifdU0dx2ofDUK8Jw/q8=)
                          11: 9F808EA0AC1111F19AD8B1DACE1D38B0.roa (hash: bZGnR4XDOjfzW6mAG8midsORjwq8CK4KJW9R5kCZnwI=)
                          12: DE2EF662ABA011F19AF8B4A5CE1D38B0.roa (hash: AJt7vIDOyMxhIXoi/drQ0C3lLoTcGlgNcHMGniY8aTg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Validity
            Not Before: Sep 18 05:53:41 2026 GMT
            Not After : Sep 20 05:53:41 2026 GMT
        Subject: CN=6aacd1e6-b4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:f1:6d:c1:75:21:81:35:45:83:34:74:65:
                    fd:18:e5:e6:76:33:ea:25:11:8e:dd:54:07:5c:f8:
                    6b:75:ad:1f:b3:e6:1e:1b:ab:90:e9:d1:35:2b:ef:
                    41:da:d3:67:d0:7d:78:33:d1:34:be:f5:61:1b:8d:
                    33:bb:68:26:89:da:9b:ea:8f:51:9c:09:ec:41:67:
                    93:43:95:cc:ea:15:d9:b2:fe:15:c1:51:f7:c6:98:
                    84:2b:fb:88:7d:a5:9d:9a:d9:c6:53:43:8d:7d:4e:
                    cf:28:dd:b0:09:f0:3c:18:12:53:0e:92:05:29:54:
                    e6:0d:4e:f0:93:e9:b7:2c:3c:61:24:73:a2:40:32:
                    4d:2f:f2:5e:e7:d5:63:26:33:8b:93:83:1d:5a:08:
                    d1:a5:7e:88:79:8c:93:5e:c8:8c:cc:90:23:d3:ec:
                    5a:ed:6c:28:6b:d0:ee:9d:90:ca:c0:bf:da:ee:28:
                    79:0c:09:e7:7c:2d:ab:cc:56:bf:46:33:43:02:20:
                    01:f4:12:de:b4:5e:9e:f0:75:b0:a7:d6:73:86:2d:
                    ca:6c:70:10:61:6d:49:36:bc:77:b3:cd:22:77:04:
                    d4:f5:55:49:23:c0:94:0c:e0:0e:a7:b3:79:90:e1:
                    b0:b0:47:9f:a8:5d:7a:a7:c5:84:e9:15:86:5b:47:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C9:84:A0:A1:7C:56:F3:86:4D:7F:5E:75:E2:12:26:10:5D:C6:2A
            X509v3 Authority Key Identifier:
                keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4f:2f:3f:26:4b:57:dd:63:2e:7a:ab:15:99:1f:ea:98:01:
         05:b5:45:7e:86:3a:61:21:04:33:df:a6:7b:64:81:7b:d7:45:
         e9:b5:08:7d:9e:04:86:1c:13:6e:75:e3:35:48:59:ff:c2:f6:
         ed:5d:50:a2:27:40:1f:65:f1:d8:fe:aa:90:a0:3f:96:35:e3:
         02:56:70:20:d0:00:7f:06:89:2a:61:88:48:06:96:0b:46:be:
         8f:22:df:74:0a:a7:07:b8:2a:b5:8d:2b:da:d8:1a:0c:df:2c:
         1a:b7:d3:7d:8d:87:59:8d:0e:9f:89:9f:d4:46:00:06:5e:c5:
         1d:e6:97:00:1b:4c:55:79:d9:95:b1:19:ce:3a:76:a1:bd:8d:
         ab:f4:8b:76:ea:94:19:fb:73:50:e2:76:69:83:9e:87:bb:1a:
         b0:4e:ea:c9:43:69:e5:c6:7e:53:d2:ad:00:99:18:b6:d0:d5:
         91:c4:e6:fe:7c:6c:f8:30:e0:cd:c0:7c:31:db:94:e9:b8:54:
         02:5e:46:23:fa:75:e9:b6:c9:51:c2:4e:03:00:4b:54:10:a3:
         23:16:5e:fb:c0:14:98:03:37:0f:56:ff:2d:25:f6:96:13:26:
         fe:c3:ce:d8:04:25:b2:a7:7f:4d:40:34:8a:99:38:4f:00:39:
         f1:89:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:23:46 2026 by rpki-client