Error: rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
File:                     e-hZtChr4eoUuIx6MLXOT9hZgOw.mft (raw, json)
Hash identifier:          eLZMm/+GWxFuhzwB4r+EdKr4fAzz5KEfLwsLOiaLqw0=
Subject key identifier:   D1:CD:DD:99:62:39:44:27:26:B9:E8:F7:75:3E:E7:92:2A:11:B6:EF
Authority key identifier: 7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
Certificate issuer:       /CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Certificate serial:       0A26
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
Manifest number:          0A20
Signing time:             Sun 25 Oct 2026 01:39:12 +0000
Manifest this update:     Sun 25 Oct 2026 01:39:11 +0000
Manifest next update:     Tue 27 Oct 2026 01:39:11 +0000
Files and hashes:         1: e-hZtChr4eoUuIx6MLXOT9hZgOw.crl (hash: Hf8xyXpVz2KU++dlF5cHpLbgjEjSS5Ge41nvVr/Xgp4=)
                          2: C9E601BE223B11EA9D6FA919F8AEA228.roa (hash: gL5tRYefTmIo2Y5cTrnfgKjwwCZ0FkaQbb7/gXP5el0=)
                          3: 0CB777ACF1FD11EAB6AEE70DF8AEA228.roa (hash: 3THAtZZdQjj5mhAwZma0JScZLOcQ+NkBW1pbNzpubLY=)
                          4: CAE2B0CE166211EA91D0A63FF8AEA228.roa (hash: 4uRc72cdg/s8r9hidk66Wt0h4klL9GdvidHhfjvfBlk=)
                          5: 82DAA7820D1111EA8AE40844F8AEA228.roa (hash: ipU6dt+Ql1oHkoWqMCQsu5Sqwuwo5xzALDOZIUeDm+E=)
                          6: A9F22C5C223B11EA90A89819F8AEA228.roa (hash: abkvsxIACMIPWrvjyOHKPEh0DsEGmj6TJS4On7OCWSo=)
                          7: 611FEFD00D1111EA8325E043F8AEA228.roa (hash: GiJz76vVEkVH9DNgj55T6CmgEM7wMPM/6p5lMG2BlFI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 01:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B7955AF, serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
        Validity
            Not Before: Oct 25 01:39:11 2026 GMT
            Not After : Oct 27 01:39:11 2026 GMT
        Subject: CN=6add5dc0-8799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:d6:69:3b:33:3f:51:94:f0:00:b6:60:c6:
                    8d:36:78:4c:15:58:a7:cb:df:59:31:bc:4b:d5:9a:
                    42:ac:82:8e:16:da:59:07:4a:b1:4a:9f:34:72:ac:
                    68:af:80:9b:59:f5:5e:9c:1d:38:6b:ae:1a:ff:78:
                    aa:b5:8f:21:68:a7:de:81:90:22:6c:ac:68:09:06:
                    ba:92:49:33:e1:8c:01:f0:fa:82:8b:65:ea:ec:6e:
                    01:73:26:f0:8d:8a:e9:c5:b6:c9:8e:8c:7d:8e:79:
                    de:b3:c8:14:8d:bb:6c:2e:ab:bd:11:b6:4d:d9:5b:
                    25:81:f8:a9:02:ca:7e:86:07:68:3a:0b:cc:43:e4:
                    f5:67:5f:47:7f:10:e6:b3:9b:8a:34:96:53:95:3a:
                    bd:a9:fe:bc:91:d7:78:85:e8:d6:95:07:fc:2b:8b:
                    2f:48:63:26:da:20:d8:7a:bd:3e:06:fd:15:40:8d:
                    5c:0c:0f:ef:b1:a5:dd:11:89:2a:71:5a:93:c8:1d:
                    77:93:c3:b9:03:a2:80:08:5d:a8:d3:aa:28:17:73:
                    93:d9:c8:9d:d7:2f:88:da:2b:4f:d2:39:7e:01:be:
                    d4:69:40:e4:a8:e8:27:7a:20:29:19:0e:37:e5:94:
                    4e:b0:6c:1f:67:5f:4b:a1:cd:e6:29:20:62:af:50:
                    19:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CD:DD:99:62:39:44:27:26:B9:E8:F7:75:3E:E7:92:2A:11:B6:EF
            X509v3 Authority Key Identifier:
                keyid:7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:96:8e:06:07:a3:3f:09:3a:2e:63:14:08:a7:46:86:02:c5:
         5e:64:f9:50:b2:4b:37:09:26:a5:86:55:e0:f5:53:01:e9:92:
         82:19:58:f2:79:24:0e:16:14:30:81:81:a1:69:8e:98:3c:1e:
         34:a0:c3:a4:fd:84:97:5d:73:ae:01:60:be:c8:58:89:75:c0:
         aa:9a:f4:88:56:a5:8c:11:de:cf:d1:d0:a4:0e:4a:14:6c:8e:
         9b:db:05:5d:68:7f:af:3a:76:09:94:64:22:37:61:38:7d:e8:
         da:cd:57:6a:68:3e:98:8e:61:f8:8e:f5:e3:2a:7f:00:fa:07:
         4c:8c:0e:93:95:32:76:3f:ae:19:f9:2f:fd:9e:27:1b:d2:6e:
         9c:92:ba:9f:b2:7a:fc:0e:da:c2:89:dc:71:dd:2c:a8:67:76:
         1e:e3:3c:fc:b5:0d:9a:54:0e:57:f0:99:b0:21:11:af:bf:5b:
         df:82:73:64:6d:26:89:e3:09:2e:cf:03:24:43:28:0b:68:e8:
         48:0c:6b:c0:f5:ba:4f:35:a2:85:7b:c0:75:e1:36:07:e4:a3:
         96:f2:f2:85:1d:32:6e:09:d1:48:44:2e:3e:5b:83:39:59:65:
         23:e2:09:34:60:9a:84:e7:4d:fb:06:d3:5c:98:5f:a9:03:2c:
         de:c9:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:49:55 2026 by rpki-client