Error: rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          IM+/4bTa+8xJ7VmIUfm0FdVK+8Y9gDZw3EXiwtMPkUU=
Subject key identifier:   64:F6:1A:E2:AC:3B:07:98:C5:C1:86:54:97:08:C9:7A:67:02:89:1C
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       08CE
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          08C8
Signing time:             Tue 27 Oct 2026 01:54:51 +0000
Manifest this update:     Tue 27 Oct 2026 01:54:50 +0000
Manifest next update:     Thu 29 Oct 2026 01:54:50 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: maf5wzxY+tM9vIaBBi80J9V6ba2ZqhnMyhlRMYoutTc=)
                          2: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (hash: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2254 (0x8ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Oct 27 01:54:50 2026 GMT
            Not After : Oct 29 01:54:50 2026 GMT
        Subject: CN=6ae0046b-6dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:26:99:fa:03:33:df:fc:85:69:f3:02:47:
                    a1:58:40:36:07:95:32:75:6a:a1:17:38:00:63:0b:
                    ab:ea:b6:4d:ca:92:1b:23:fc:f9:c2:ca:e1:71:12:
                    ba:aa:4f:28:94:4d:72:01:f6:05:86:9b:7f:66:c1:
                    a7:62:a9:58:9a:89:c8:48:5e:82:fc:f8:44:6a:22:
                    ea:cc:1b:59:46:14:dc:f1:6a:b1:31:e7:e2:d8:de:
                    f5:b2:fc:e6:59:a6:bd:f9:ed:a1:4e:c1:1e:28:14:
                    d5:42:74:f2:aa:3c:6c:4a:d0:43:f8:5c:70:29:e4:
                    d0:0e:ab:7c:ec:37:32:c3:d1:39:a8:a3:96:59:d3:
                    c0:7e:e7:25:65:b9:0f:85:52:29:d8:b7:15:cc:5c:
                    6f:5b:03:7d:21:ad:3e:05:ee:96:88:04:6b:69:9d:
                    e7:33:4b:64:0e:c1:12:45:4f:5d:0b:8e:b2:f8:92:
                    b9:5a:db:3a:2c:7c:bc:9a:87:30:ea:38:20:ce:20:
                    da:40:66:a8:cc:b7:26:88:3a:da:f2:91:44:b5:b3:
                    52:05:74:6e:a8:51:60:62:7f:93:80:12:6d:88:37:
                    5d:90:ae:cc:a1:4b:af:70:1e:ca:3a:3f:00:58:22:
                    c4:75:c6:50:af:65:3a:fb:3d:f3:64:80:91:95:11:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F6:1A:E2:AC:3B:07:98:C5:C1:86:54:97:08:C9:7A:67:02:89:1C
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:62:13:74:bc:0a:b9:09:db:f2:22:9d:9a:ae:f6:e5:93:2b:
         7d:9a:73:0f:38:cf:bb:30:cb:46:c0:97:c9:4a:83:0e:b5:67:
         ce:35:93:a6:c0:f1:e2:6e:c2:40:88:de:e8:6e:81:b6:77:98:
         6c:ab:15:e6:1d:41:d2:ec:06:69:00:74:31:46:41:c6:64:16:
         b7:d5:ba:6c:da:cf:eb:93:10:81:8e:c6:fd:e0:7c:41:49:c0:
         ff:43:dd:db:95:86:c6:bc:c3:74:8f:77:70:c7:60:9b:c5:0e:
         09:e0:0e:c7:61:0e:57:b2:d1:d3:df:b6:fc:cd:3b:4d:36:bf:
         f4:8d:f2:49:6a:b4:0c:3d:d9:2a:7f:22:79:81:6c:ba:12:60:
         9a:b4:c1:a4:99:27:39:83:42:4f:b6:d7:7c:cd:2c:5c:c8:48:
         1b:97:bd:0e:54:78:19:15:54:26:f5:fe:61:1b:df:ee:31:ca:
         28:59:8b:47:4a:eb:41:cc:6e:b4:4b:9f:74:71:b6:b9:82:a2:
         ba:d3:51:54:6d:8d:5c:4c:12:be:b2:e5:b9:be:ef:fa:62:67:
         cf:e3:b5:2c:dd:43:17:58:ce:5a:6d:9d:e2:2a:40:94:99:36:
         91:1c:fe:b0:7b:be:11:e9:f7:cd:80:66:77:a0:9a:19:a9:1f:
         68:9e:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 21:48:05 2026 by rpki-client