Error: rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
File:                     HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft (raw, json)
Hash identifier:          88XGI6oD+LKU+BmHYAVTnxxg+UQxZ50JiWnDFrckmis=
Subject key identifier:   B2:0F:08:15:89:AA:EE:99:C5:4E:82:C5:AD:2E:F5:A8:C5:A6:A9:A7
Authority key identifier: 1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9
Certificate issuer:       /CN=F36B13C7AF/serialNumber=1DC02BDC1B2F287E0E348277BDF6BEDF9C3C1BF9
Certificate serial:       09D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
Manifest number:          09CC
Signing time:             Tue 27 Oct 2026 01:41:15 +0000
Manifest this update:     Tue 27 Oct 2026 01:41:14 +0000
Manifest next update:     Thu 29 Oct 2026 01:41:14 +0000
Files and hashes:         1: HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl (hash: 37c20sTi3iuHVJvh1u+huXF0bwjhSMF2lX8roI/8gFk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2513 (0x9d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B13C7AF, serialNumber=1DC02BDC1B2F287E0E348277BDF6BEDF9C3C1BF9
        Validity
            Not Before: Oct 27 01:41:14 2026 GMT
            Not After : Oct 29 01:41:14 2026 GMT
        Subject: CN=6ae0013b-d7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:e7:b3:b2:26:eb:92:9f:a6:49:72:b6:47:
                    6b:18:34:5b:8c:db:b4:9d:d8:0f:43:02:70:ba:37:
                    00:5b:5f:be:61:7d:e3:af:d4:43:2b:3e:12:cb:88:
                    7e:a9:26:04:6b:8a:09:f9:b9:ea:6a:16:26:6d:dd:
                    7e:3f:b2:27:06:ae:bf:61:a9:ce:c2:83:42:c6:ea:
                    4c:4f:8b:7e:8d:3b:e2:d3:03:7c:10:d2:53:25:cb:
                    0c:bf:e1:38:e7:a8:1f:4a:04:f1:62:1f:d4:4c:d2:
                    9a:f6:fd:31:3b:ed:d4:9b:c5:94:da:1b:76:6f:d5:
                    b9:54:a7:31:41:cc:86:1b:d3:d9:f8:5e:d6:a8:70:
                    e8:76:9f:f1:52:5e:ef:df:83:83:e3:7e:d7:8b:24:
                    da:86:f9:e8:21:c3:1d:d0:b7:03:87:ae:53:ff:63:
                    90:0e:e6:f3:8a:99:a9:89:88:fa:3f:0c:af:b6:4c:
                    0a:1b:79:71:b7:43:6e:89:ed:b7:a1:45:66:af:80:
                    bd:33:04:08:6c:3d:59:c2:66:aa:5e:e3:7c:23:2f:
                    b5:ae:69:40:ac:7b:42:9a:08:c0:c6:5d:f3:74:67:
                    dd:70:0b:59:01:2e:e9:ce:3d:d9:4e:3e:e6:5c:1a:
                    56:58:ff:d6:e4:2f:43:ae:ba:e7:58:15:91:80:83:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0F:08:15:89:AA:EE:99:C5:4E:82:C5:AD:2E:F5:A8:C5:A6:A9:A7
            X509v3 Authority Key Identifier:
                keyid:1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:2a:66:13:61:b3:36:82:47:2d:c1:e4:86:11:1e:fa:88:
         e8:af:c0:78:4f:04:aa:dc:15:68:88:57:11:08:a3:f3:44:e3:
         ac:27:f8:da:2b:aa:68:17:fc:2c:9c:ea:54:78:4e:b6:04:f2:
         a1:25:c5:56:f3:a0:b5:e0:35:bd:6d:8b:57:c9:46:4b:be:8f:
         b0:92:74:54:4a:4e:4d:c3:41:2f:76:d4:2b:ad:2d:2f:d9:59:
         9b:18:79:28:1f:4a:c7:c7:ad:63:27:d5:a5:c4:37:e5:25:9a:
         54:cf:5b:4e:6b:c8:80:5f:10:69:99:55:20:e7:27:85:04:94:
         17:f7:3a:6b:54:b4:31:0c:c4:3d:fb:55:45:d3:c1:9d:fd:fe:
         45:c1:ac:db:2b:3f:ee:b4:5f:d6:bd:2f:a6:22:a0:30:15:60:
         52:ad:97:68:91:d8:3c:1d:60:bc:e6:da:e5:83:9c:a1:e0:18:
         b3:c7:ad:e7:3a:f0:3d:1e:77:ba:61:00:37:de:7e:26:59:46:
         81:3f:62:b0:58:e5:e8:c1:69:62:91:21:a4:81:3a:4f:bc:d1:
         ce:5f:13:16:08:59:1a:18:a7:40:e0:90:88:5b:05:59:b3:81:
         0f:fd:37:d9:7a:e5:2c:5a:c5:fd:2e:91:1f:5a:a8:af:b1:b3:
         4a:63:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:41:13 2026 by rpki-client