Error: rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
File:                     S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json)
Hash identifier:          PUoxr22ag4ZfLk3aQKNUC7o4dRRiTdWFUQBtqMxDjsY=
Subject key identifier:   72:A3:61:29:EE:0F:EA:EC:C9:A0:7E:87:A2:38:BD:03:8E:5E:A3:D2
Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
Certificate issuer:       /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Certificate serial:       03BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
Manifest number:          03B1
Signing time:             Tue 27 Oct 2026 04:09:02 +0000
Manifest this update:     Tue 27 Oct 2026 04:09:01 +0000
Manifest next update:     Thu 29 Oct 2026 04:09:01 +0000
Files and hashes:         1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: b1UvM9L+dAMQAlAyr8hV6WhgdYmy6yHjp1SsjS/FLi0=)
                          2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=)
                          3: 8A38C304166411EFB6DD9865017001B1.roa (hash: BNl8LzAAIi2V4u4Uq6J4OERouFI7xdVKsG2qa+DYXuM=)
                          4: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=)
                          5: 67A273EE166411EFBD7C3965017001B1.roa (hash: XYlnou7kQfD138NpOpxfEa0ALGHIsAR97sWZnC83Ikk=)
                          6: 2342ECF6166411EF86A28464017001B1.roa (hash: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=)
                          7: 10F75FE0166511EF9BA89F6A017001B1.roa (hash: tQ6IcNtYg4Q1dSfQDi4FIUeQKLa90qMyIm8jTAnmXuE=)
                          8: C37E4A0E166311EFB9A5E45F017001B1.roa (hash: Qp36Juuigfj3IghvTSmzrtpde3+TFB8XRGmUObCG6Jw=)
                          9: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=)
                          10: ED324F4E166311EF80A74E60017001B1.roa (hash: yLMrRx31o9f3857chkGq2HGPGPmxnmeZmw24iYDHkdE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 04:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7021AF, serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
        Validity
            Not Before: Oct 27 04:09:01 2026 GMT
            Not After : Oct 29 04:09:01 2026 GMT
        Subject: CN=6ae023de-548b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:1a:1e:75:ec:48:06:8a:b3:f4:2d:93:12:
                    6b:c2:c2:1b:e8:42:7f:1b:d4:48:8f:db:4d:ed:6e:
                    c5:46:35:c1:49:d4:bb:db:77:e4:de:ec:7c:06:73:
                    fb:93:4c:5c:61:11:83:18:5c:d9:5e:8b:6d:37:06:
                    d6:f5:2d:08:e8:a1:40:ab:36:9f:a9:69:58:cb:2c:
                    1d:12:45:66:8d:d8:74:45:56:fb:4d:f0:31:09:73:
                    1a:29:00:38:8a:8e:87:14:b1:67:df:04:01:ae:e5:
                    c8:63:89:b7:ee:c1:bc:bb:f5:56:e0:22:18:49:ed:
                    ea:3a:f2:ee:da:01:f3:af:96:81:e0:fd:8b:44:12:
                    04:a5:1b:55:70:c9:1e:e0:f5:d3:63:ce:23:66:bf:
                    25:a5:bc:77:a6:36:c4:19:67:69:c5:d7:ca:b6:46:
                    8c:71:72:40:c0:46:59:49:38:28:eb:67:eb:2f:a9:
                    4d:fa:11:fb:56:49:c9:0a:f1:d3:b2:89:3e:5c:ab:
                    5d:61:ca:7b:0b:ef:0c:ae:7d:6c:16:c0:3b:5d:51:
                    25:09:2f:ad:71:1a:cf:d6:62:39:1c:ec:ee:39:46:
                    db:fe:d1:2e:a2:62:e4:d9:0a:21:9d:a3:5d:00:42:
                    ed:20:6b:da:ba:63:f4:cf:a2:e8:60:bf:e6:dd:7a:
                    7d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A3:61:29:EE:0F:EA:EC:C9:A0:7E:87:A2:38:BD:03:8E:5E:A3:D2
            X509v3 Authority Key Identifier:
                keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0c:28:15:61:b2:1e:ab:5e:39:1b:91:99:5b:ca:45:72:b1:
         64:57:32:e5:bd:3d:89:bc:f1:97:cf:33:ab:fe:39:73:e9:95:
         89:40:92:e4:d6:b1:a7:1e:be:97:74:f8:57:f4:92:5b:b0:36:
         77:e4:15:1b:7a:a2:3f:e1:48:9a:0b:6a:de:5a:1b:77:0b:15:
         ab:f5:f9:69:eb:ef:ae:fb:94:0e:5f:bd:68:d1:44:39:39:ac:
         f6:e3:6d:e8:c1:a3:c3:53:c6:5f:99:12:d7:51:ca:a1:0c:6c:
         8b:39:07:d0:df:07:41:5f:12:b7:cf:99:2f:4a:01:ca:b0:95:
         25:5c:80:f0:27:c9:ad:72:4b:d4:7d:20:48:e9:5f:c0:2c:1a:
         1a:7e:f8:3d:b9:81:93:19:94:db:a1:8b:b3:ce:6e:3a:bc:2e:
         6f:07:57:65:fe:26:29:ca:1e:c1:69:84:d6:5a:1e:1d:bd:f1:
         d0:69:68:76:fb:19:fe:19:4e:47:c9:c5:c7:bc:26:b0:09:58:
         da:b4:d2:f0:b3:ca:76:c7:8e:b4:cf:72:7a:d9:3e:a9:6e:8f:
         8d:42:e1:d7:a2:98:85:0c:91:8c:ca:a6:45:46:93:bd:1c:3b:
         cc:09:da:a8:64:e6:94:97:81:dd:0c:6c:ae:a6:ff:82:ab:36:
         3f:b1:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:08:44 2026 by rpki-client