Error: rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
File:                     jLiroOzpR3OblerbiB6h0NL_09A.mft (raw, json)
Hash identifier:          fXIl61BXRwgfJS4YTm4zq4zLkWiuGaWcYCg7nCZPgn0=
Subject key identifier:   AF:64:AF:B1:8E:A3:0C:49:40:BC:7B:ED:CD:F0:85:8B:84:23:E6:EC
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Certificate issuer:       /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial:       0812
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
Manifest number:          0807
Signing time:             Mon 12 Oct 2026 02:06:56 +0000
Manifest this update:     Mon 12 Oct 2026 02:06:55 +0000
Manifest next update:     Wed 14 Oct 2026 02:06:55 +0000
Files and hashes:         1: jLiroOzpR3OblerbiB6h0NL_09A.crl (hash: Qe0rx48s8xr7GvYDScwWVzv33q9t25G1Gq3rZNEawsQ=)
                          2: 71142C9A8B7611F1A2B07FDCCE1D38B0.roa (hash: jj6i2cFNtJgRGycLM0+3dO7l6ZMOrTQl/bO8H21hqqg=)
                          3: D15CCB708B7611F1A50479E0CE1D38B0.roa (hash: Z4wzLp47lpqvZEucgRFW0suqYo37K1YhClbsK+FRe0Y=)
                          4: C90FF62AA8CA11EBBB067F7DF8AEA228.roa (hash: 7gE3ZmR31Vf8XT8pHiCTn2tBLPm5HPmYasDasMsyy0g=)
                          5: 9C1B6DEE8B7711F19E4AADE4CE1D38B0.roa (hash: 1gpwNtx3nATQzXtsSdAw4yTkKHrTSe6/3fLEYZKLfsU=)
                          6: 576F5F5C8B7711F1B18D8AE4CE1D38B0.roa (hash: eHta1dqN3bXK7AG5uXpQ493rOpZbrU6ILYybwlMqUSg=)
                          7: B74802AEB6EC11EBA8259758F8AEA228.roa (hash: APjLaXV6AoRKGJ3Woce92XxXLC4ufsyIkSG6DvxDn0M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 02:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066 (0x812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36997F0AF, serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
        Validity
            Not Before: Oct 12 02:06:55 2026 GMT
            Not After : Oct 14 02:06:55 2026 GMT
        Subject: CN=6acc40bf-b2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:51:a0:c1:e5:1b:ec:19:10:57:4b:d3:53:
                    f6:cf:77:35:c7:4b:90:c7:e0:f8:04:e5:c7:09:e9:
                    ee:3b:33:3f:28:f6:59:b2:3d:66:b0:9e:42:21:25:
                    fd:b3:7f:93:5e:a0:43:24:46:c2:03:7b:6c:47:7a:
                    55:ee:d6:70:40:b4:cb:08:58:9e:c7:2b:fa:27:fd:
                    1c:79:a1:a0:1b:0a:9b:f0:17:f9:4c:1d:48:3f:32:
                    7b:af:48:0e:9c:71:98:0d:f0:25:b6:d3:20:3c:45:
                    97:20:dd:22:2d:6f:7a:5a:6a:b2:f1:67:e3:a4:d7:
                    b0:3b:d5:b6:dc:27:2f:51:f6:66:f0:27:df:a9:74:
                    c2:61:bf:f0:e2:e3:c3:bb:07:e5:21:e2:ae:95:b3:
                    d6:82:44:d5:bb:1f:6c:8f:a3:97:12:f8:b0:8f:49:
                    ef:9a:04:10:63:e7:f8:2b:50:54:c6:40:08:9c:5c:
                    01:0d:63:03:98:ff:91:3e:53:18:82:2f:1f:e8:9b:
                    b7:42:84:a8:76:86:df:65:45:5b:69:be:be:9c:f0:
                    39:4d:3b:ff:0d:87:60:bc:e4:3c:a1:c9:65:e7:83:
                    23:1d:d3:5a:53:14:8b:dc:58:5d:a2:cf:88:47:96:
                    0c:a1:9d:5e:e7:18:e5:7a:cf:31:eb:ef:31:3d:25:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:64:AF:B1:8E:A3:0C:49:40:BC:7B:ED:CD:F0:85:8B:84:23:E6:EC
            X509v3 Authority Key Identifier:
                keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:33:06:50:5c:20:7f:d5:4a:94:01:98:ba:ed:10:2a:ce:3f:
         54:09:62:81:9b:83:6c:56:a3:38:d9:97:45:01:ea:94:2f:7b:
         66:40:ca:c2:83:e6:99:80:a4:aa:71:34:86:cf:7d:74:0e:43:
         d1:f4:b2:24:79:90:e6:56:72:02:79:6b:0d:28:92:5c:56:81:
         f0:6d:da:46:cc:6d:07:cf:60:fb:68:62:4d:93:41:ed:2a:94:
         cd:24:3f:0e:bb:78:a8:5f:d1:ba:77:84:12:19:e0:7e:90:3c:
         ec:03:09:34:9f:81:7c:b8:4b:19:f0:cd:ed:b0:49:fd:f5:3f:
         9c:1c:2d:c5:94:9f:62:d3:46:90:1a:73:1a:a9:21:2b:dd:fd:
         be:4e:7e:80:87:44:55:6e:77:6a:ae:56:dc:c1:a2:f6:60:15:
         31:b3:d5:57:6f:7c:43:81:58:d5:b6:b1:9f:3d:c6:bf:80:cc:
         02:8a:fe:8c:1c:c0:6b:dc:8c:a8:f3:3d:ea:c4:44:46:1e:50:
         1f:e3:b5:4a:95:21:19:c2:07:a5:1f:f9:d1:15:78:0b:32:c8:
         32:ae:c8:be:5d:d1:00:a4:b9:18:d8:e8:12:8f:15:05:b4:13:
         d0:8e:87:9e:69:08:4d:95:54:9c:2c:80:75:9c:90:cb:ac:c4:
         a6:fa:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:15:29 2026 by rpki-client