Error: rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
File:                     jLiroOzpR3OblerbiB6h0NL_09A.mft (raw, json)
Hash identifier:          7HKMNcFOQ6s9s1U5hPYgkamquHZ3wGxuOsODaQcphi0=
Subject key identifier:   D6:8E:CE:1E:F6:03:4A:85:F5:37:F2:36:54:07:50:25:53:06:42:01
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Certificate issuer:       /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial:       080E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
Manifest number:          0803
Signing time:             Thu 08 Oct 2026 02:06:01 +0000
Manifest this update:     Thu 08 Oct 2026 02:06:00 +0000
Manifest next update:     Sat 10 Oct 2026 02:06:00 +0000
Files and hashes:         1: jLiroOzpR3OblerbiB6h0NL_09A.crl (hash: KJyLp+Pc+FwwESwOMIe12NJL/yJoovRVepnvMgwbV8o=)
                          2: 71142C9A8B7611F1A2B07FDCCE1D38B0.roa (hash: jj6i2cFNtJgRGycLM0+3dO7l6ZMOrTQl/bO8H21hqqg=)
                          3: D15CCB708B7611F1A50479E0CE1D38B0.roa (hash: Z4wzLp47lpqvZEucgRFW0suqYo37K1YhClbsK+FRe0Y=)
                          4: C90FF62AA8CA11EBBB067F7DF8AEA228.roa (hash: 7gE3ZmR31Vf8XT8pHiCTn2tBLPm5HPmYasDasMsyy0g=)
                          5: 9C1B6DEE8B7711F19E4AADE4CE1D38B0.roa (hash: 1gpwNtx3nATQzXtsSdAw4yTkKHrTSe6/3fLEYZKLfsU=)
                          6: 576F5F5C8B7711F1B18D8AE4CE1D38B0.roa (hash: eHta1dqN3bXK7AG5uXpQ493rOpZbrU6ILYybwlMqUSg=)
                          7: B74802AEB6EC11EBA8259758F8AEA228.roa (hash: APjLaXV6AoRKGJ3Woce92XxXLC4ufsyIkSG6DvxDn0M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 02:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062 (0x80e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36997F0AF, serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
        Validity
            Not Before: Oct  8 02:06:00 2026 GMT
            Not After : Oct 10 02:06:00 2026 GMT
        Subject: CN=6ac6fa88-c9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:4e:ae:b0:9a:d6:82:05:f7:b2:76:6a:3b:
                    9f:59:aa:c7:24:cd:94:af:34:b5:bf:e6:9c:8c:05:
                    70:20:0a:6c:3a:dd:75:eb:37:05:f2:23:c6:27:7d:
                    0a:32:14:c8:bb:fd:91:99:5d:ee:31:44:b6:39:2b:
                    a2:20:8b:c9:08:05:c7:38:49:ef:c8:1b:29:8f:e3:
                    05:cc:ac:92:58:f4:bd:11:b9:ba:14:b0:3f:6a:dd:
                    8a:9b:7c:7f:3c:a9:0b:81:ef:f4:b1:8b:01:53:23:
                    bc:3b:af:eb:e7:ac:f3:08:26:6c:ca:ed:63:87:56:
                    20:c1:cf:19:b8:27:b9:00:41:f0:31:d3:d2:68:9e:
                    11:7d:e8:a3:02:04:49:3a:9d:89:24:5f:32:98:1e:
                    c5:94:d6:7d:2a:6f:51:ce:06:03:ec:3a:e5:0a:79:
                    a3:a0:be:0b:d1:44:f1:a2:48:e8:2d:a1:3a:0c:36:
                    04:5d:95:8f:cc:ee:77:43:a1:7f:0c:ec:be:74:87:
                    57:cb:09:12:b6:ae:fc:fe:48:47:c5:dd:d8:a6:ef:
                    43:43:fa:6a:3c:3b:90:b9:28:8e:78:b3:bd:e1:8c:
                    a0:6a:69:11:db:0f:80:81:da:57:86:bb:81:7d:90:
                    bb:15:18:b4:83:bc:ce:ad:c8:a6:a4:3f:33:60:51:
                    7c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8E:CE:1E:F6:03:4A:85:F5:37:F2:36:54:07:50:25:53:06:42:01
            X509v3 Authority Key Identifier:
                keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:97:44:53:a0:5c:c3:75:49:26:5f:85:9e:3b:fc:31:57:
         49:eb:19:b0:55:86:94:7a:93:fe:65:0d:e6:83:bb:12:65:ae:
         54:f3:cb:e3:81:68:b1:ea:b9:b9:25:65:da:a6:3f:ca:db:e5:
         d0:d2:6d:1a:8b:fa:25:8a:45:26:78:92:92:0b:05:d0:a4:c6:
         24:60:be:2f:30:34:e5:7d:8d:e1:f4:22:12:52:2f:45:0b:83:
         95:14:92:97:04:e2:df:7e:c3:be:82:c6:6d:c0:9d:21:bd:c6:
         7f:50:59:b7:9d:88:ae:59:f4:9f:04:bc:7e:1f:f1:50:fe:d7:
         7c:70:1e:f4:5a:65:73:df:e7:88:6b:a3:e0:a4:73:a9:25:9b:
         f9:a0:0b:9e:41:e1:41:87:00:ca:ea:3e:2f:fe:ec:3c:8f:ca:
         86:f6:cd:25:c9:c3:11:57:4d:19:d0:af:d2:45:e8:3d:8b:ee:
         d9:6a:37:f9:ff:bf:87:33:e4:f1:e1:c5:0f:11:6f:d8:14:4a:
         80:e5:8d:6b:f4:9b:bf:62:7b:cd:c7:b4:ba:c7:24:d2:e5:06:
         1e:f5:bd:a8:c5:97:94:31:e2:65:52:fc:ba:d5:9b:c4:6f:9e:
         06:d4:ac:36:9f:b7:3e:80:89:e7:a1:3c:92:c2:e7:8e:a9:c3:
         d1:22:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:46:37 2026 by rpki-client