Error: rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
File:                     9zORrduc3mc6pJF07KjUMLSfGcM.mft (raw, json)
Hash identifier:          tm+ewjJ+FJ47ZKs/2ElpC2c1Vrcmp0ilj2CPnOdHMX0=
Subject key identifier:   EF:CE:A8:1A:03:A0:1E:66:71:C9:D3:C6:69:77:1F:AB:39:2B:43:75
Authority key identifier: F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
Certificate issuer:       /CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
Certificate serial:       0A39
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
Manifest number:          0A38
Signing time:             Sat 31 Oct 2026 01:37:19 +0000
Manifest this update:     Sat 31 Oct 2026 01:37:19 +0000
Manifest next update:     Mon 02 Nov 2026 01:37:19 +0000
Files and hashes:         1: 9zORrduc3mc6pJF07KjUMLSfGcM.crl (hash: VP6vCVdVFxDil3idjhnrHZnJAU2B3EYMfYutYzsNRjk=)
                          2: FBB32E86FC8111E9BB7F292CF8AEA228.roa (hash: HuM3BwkpOIpwBJ+xYmwrtHtu6kY28m4Q/SLVfLjrjjs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                          rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 02 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2617 (0xa39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AR, serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
        Validity
            Not Before: Oct 31 01:37:19 2026 GMT
            Not After : Nov  2 01:37:19 2026 GMT
        Subject: CN=6ae5464f-ce85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:47:ed:5e:fb:5c:69:1e:46:97:eb:ce:45:
                    0a:15:05:7c:cf:00:0b:d3:9b:34:bb:b1:ab:f7:09:
                    f9:45:e0:ca:21:95:ec:b5:0f:73:a0:da:e6:ee:f4:
                    3f:fb:57:0b:b4:1a:4c:f5:02:3c:ca:68:eb:6c:19:
                    b5:82:11:c1:b9:7d:9b:d2:d3:1f:37:7f:bc:dd:f2:
                    91:eb:4b:de:d5:c8:5d:3f:d6:43:c1:6b:f6:a9:12:
                    c8:79:fb:20:b8:0f:1e:22:3b:63:f2:fc:a4:2f:db:
                    48:28:eb:2a:b1:8a:3f:2a:c4:d9:f0:97:50:00:fa:
                    5a:da:e4:df:2e:e9:bc:b9:8b:d2:75:8d:c0:11:f7:
                    3f:db:0c:5a:aa:e1:65:d6:e7:6c:f7:8a:2e:c1:8e:
                    65:e6:61:6a:3f:08:63:47:e8:3b:36:46:ae:3a:b3:
                    b2:6a:57:29:64:9f:db:ca:60:02:d4:41:81:fa:c3:
                    5a:c2:c0:f2:a5:71:29:ad:a0:dc:17:a8:59:47:67:
                    27:57:20:ef:58:12:4c:c5:c3:bc:de:f3:63:25:8f:
                    79:86:6a:ae:9e:d4:bd:6e:5f:be:38:d6:e3:01:1e:
                    bb:0a:86:91:e9:ef:02:f3:89:0e:49:4a:03:d5:7f:
                    82:19:8f:6b:de:e0:25:2a:52:be:6e:0d:77:cb:36:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:A8:1A:03:A0:1E:66:71:C9:D3:C6:69:77:1F:AB:39:2B:43:75
            X509v3 Authority Key Identifier:
                keyid:F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:87:91:72:07:5f:3c:ff:41:bf:5f:58:99:6e:82:3a:f8:5d:
         50:68:be:2a:1c:6d:2e:f3:00:77:a3:a0:ad:9d:c8:0c:16:31:
         4b:88:a8:14:2f:bf:0f:be:28:1a:4e:39:8c:3c:15:b3:bd:18:
         88:64:7c:50:d0:1f:86:2f:30:60:c9:11:29:f4:34:57:74:5c:
         c6:7f:b6:47:42:43:ec:e2:0e:23:ba:79:eb:75:36:f8:94:5b:
         a1:de:d5:62:1d:9f:52:73:5a:9a:9d:7e:0b:43:3f:91:84:d2:
         55:54:fe:2d:a0:87:9e:fe:e6:38:6a:73:f6:66:07:73:e8:72:
         15:db:2f:a2:71:25:08:73:ab:25:23:e7:2a:02:3a:c5:6c:ce:
         fd:1a:9f:51:74:97:71:52:33:dc:80:13:cc:63:77:1e:4d:0c:
         17:d3:78:b0:bd:8c:1a:d8:ec:14:8c:73:60:71:a2:53:75:c4:
         83:19:dc:9e:07:f3:c3:5d:68:75:ec:9b:64:93:31:01:8b:b3:
         c6:36:f6:39:0a:2d:e8:da:4b:30:ad:97:90:fe:1d:3b:06:81:
         ae:c0:c8:90:6c:0d:4b:07:ea:69:46:83:26:70:86:e7:5c:0e:
         a5:f2:5c:5f:c2:70:df:f3:a7:0d:6b:aa:a6:ec:4a:9a:ee:1b:
         fc:8c:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:41:20 2026 by rpki-client