Error: rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
File:                     L9OdkqzapRN7zkgavmyN8dzNDvY.mft (raw, json)
Hash identifier:          JWkixBa06YFuNYj7NaC3NGpI1qN3/mTw9WShxR7p0Ew=
Subject key identifier:   9A:6B:A9:FD:88:E7:DF:6A:B8:7C:AB:2F:60:F2:05:A0:E6:61:E1:CC
Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Certificate issuer:       /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Certificate serial:       04E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
Manifest number:          04DB
Signing time:             Thu 29 Oct 2026 03:33:10 +0000
Manifest this update:     Thu 29 Oct 2026 03:33:09 +0000
Manifest next update:     Sat 31 Oct 2026 03:33:09 +0000
Files and hashes:         1: L9OdkqzapRN7zkgavmyN8dzNDvY.crl (hash: grRCgwzSogoqoTXXDWI6pQneEN29ASsZ4lwodF9d9hs=)
                          2: 2CF3A3EEF23111F08DE709CADAE4EC9C.roa (hash: E/G6AxJRTy6BWkfQETWJC1LpmEof5Nqv6ggmyx/krZg=)
                          3: 82D2D66E261811EE84FCC57F4AD9E6FC.roa (hash: 8DOR79YopZBDIjmiAAaaEool8LnL3u27308SxIQ3uSY=)
                          4: E1F87CC6261711EE9112117E4AD9E6FC.roa (hash: L/3Ed8SgC2Eem41w8cHehrxxaShVOqXifUiGhdxr7zk=)
                          5: DBC4D84EF19F11F0BB0D92C4DAE4EC9C.roa (hash: 0w11dAl0ZHuL4r3C+H0Cy861F6dvJBOgzONU1ELikMM=)
                          6: 3333CFFEF22C11F0B7B687ABDAE4EC9C.roa (hash: n9BHCAIHciXSckg0OkYupto8mNVTVrnQREgeCL2seHc=)
                          7: 7977DC10F13E11F08E43847CDAE4EC9C.roa (hash: S6SqyKuMuszdFgWYXKbiOJ/eUFMOthzgeUjko1wpZeI=)
                          8: 857C6338F13811F08947FFD6DAE4EC9C.roa (hash: EQjufZY+Ld4Nc6rRRR5Pa+LhyHbL3SiAVgHsy5rcUII=)
                          9: 2BBF61F4261711EEBF1F207C4AD9E6FC.roa (hash: uweMPd3tzGkzK5NAwH3tY1Gjy+sA5uAC5mjmqHriOro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
        Validity
            Not Before: Oct 29 03:33:09 2026 GMT
            Not After : Oct 31 03:33:09 2026 GMT
        Subject: CN=6ae2be76-c2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:54:d1:4b:cf:7a:a7:92:ef:06:32:3e:60:
                    73:9f:50:2d:5b:27:27:8a:e7:38:d0:91:e5:59:65:
                    f5:cb:fc:2b:9e:97:f4:d9:cb:f3:b1:13:26:f3:21:
                    93:31:73:9b:7e:c6:1e:45:29:df:a5:cb:a1:ec:dd:
                    6b:35:06:a9:3a:bb:8a:21:53:1b:b9:c6:a0:4a:ce:
                    48:4a:91:d4:30:06:55:25:7d:6b:ec:89:69:22:09:
                    20:1c:05:ed:d6:42:f9:6d:4e:5b:55:c7:1a:d6:20:
                    7c:9f:8d:a5:55:80:73:a6:7e:c8:55:07:00:92:1b:
                    7a:f6:b4:0e:6d:75:6c:13:b7:d9:0c:90:87:1e:ec:
                    d5:53:e0:dd:20:de:b9:a4:88:a2:c8:e3:9e:8a:65:
                    bb:2c:77:3b:3e:1d:cf:cc:a9:5c:04:7d:4c:85:da:
                    b2:f4:cc:57:c2:0c:ef:3f:d6:6d:f9:3e:3b:6b:3e:
                    7e:aa:b4:eb:bf:d1:8e:7a:0c:e9:72:23:a8:7b:6f:
                    83:33:b4:63:f2:a6:37:ca:ae:62:59:7b:92:3a:97:
                    37:94:91:3c:fa:52:90:22:aa:83:cf:c5:74:25:34:
                    1d:06:7c:2d:13:7d:6a:63:69:ee:b9:40:da:ce:25:
                    08:4e:bc:d7:84:8a:35:27:e5:6a:94:04:09:21:25:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6B:A9:FD:88:E7:DF:6A:B8:7C:AB:2F:60:F2:05:A0:E6:61:E1:CC
            X509v3 Authority Key Identifier:
                keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:b3:a3:57:54:24:3e:ec:6c:f1:2f:a8:32:88:58:c1:45:
         69:97:7e:fe:e4:5e:d3:59:fa:98:89:0f:7c:d5:f1:0e:ef:50:
         3d:89:09:2f:e9:a7:fc:c4:96:7e:a2:41:79:e0:31:e3:a1:19:
         72:38:13:dd:50:c0:6d:4a:27:fa:65:4b:63:05:27:e0:4f:1a:
         b2:0c:5e:6c:e4:d7:02:c5:f4:3f:bd:48:e2:e6:54:99:41:aa:
         6c:5d:ca:34:08:43:ee:0f:80:38:60:da:9f:a1:86:f3:87:13:
         36:bc:e2:57:22:1f:48:92:99:0a:fb:8c:9a:bd:e1:17:ad:c8:
         12:36:19:9f:43:f5:a2:47:8e:c9:1e:2d:1c:ab:2d:65:2c:63:
         39:81:8b:e0:06:d6:5c:c0:11:2f:ef:04:af:77:eb:35:a3:54:
         52:45:93:f5:56:4d:61:ff:ad:cb:65:2c:81:5c:28:7a:3c:15:
         49:79:45:de:c4:75:06:39:0f:7a:90:bb:a2:f2:bd:9f:b9:49:
         88:fb:b5:e9:93:bc:a8:96:d2:27:ce:3d:9c:09:06:2c:70:2e:
         9c:52:9c:c4:78:db:49:b4:51:b5:99:e6:d5:a6:f0:cd:4d:e2:
         0f:34:2d:95:ea:a0:53:78:08:5d:26:02:f8:df:1d:61:b3:24:
         9c:a0:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:49 2026 by rpki-client