Error: rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
File:                     TsI9Q07XmbNybP2OQaiJOGnVA6M.mft (raw, json)
Hash identifier:          hHtMosGV1WhsbLoiks4KGPS2gVwiCrkF3WE6VfyoYAI=
Subject key identifier:   92:64:CB:35:F3:4A:EE:CC:C8:75:80:C9:9C:91:56:3F:0C:B5:2B:75
Authority key identifier: 4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3
Certificate issuer:       /CN=F36B87F4AF/serialNumber=4EC23D434ED799B3726CFD8E41A8893869D503A3
Certificate serial:       034E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
Manifest number:          034D
Signing time:             Sun 25 Oct 2026 04:20:00 +0000
Manifest this update:     Sun 25 Oct 2026 04:19:59 +0000
Manifest next update:     Tue 27 Oct 2026 04:19:59 +0000
Files and hashes:         1: TsI9Q07XmbNybP2OQaiJOGnVA6M.crl (hash: hmCp+P6ECh1jlJ9fzZ2gWqXk9htwzDgjQEQCSXN2m90=)
                          2: 1B1E241E451711EFAD0B499A762E951A.roa (hash: Ep7yM470eEGXeNpv8ARuzKPKLgsxxmudxnGocbswnGw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 04:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846 (0x34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B87F4AF, serialNumber=4EC23D434ED799B3726CFD8E41A8893869D503A3
        Validity
            Not Before: Oct 25 04:19:59 2026 GMT
            Not After : Oct 27 04:19:59 2026 GMT
        Subject: CN=6add8370-b40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:35:01:01:87:0e:dc:d8:27:68:89:1d:70:
                    c0:ab:8d:a7:dc:38:4f:2d:f1:12:8f:bb:d3:57:b3:
                    67:ed:4d:48:3e:78:bb:44:19:c2:eb:cc:dd:64:52:
                    46:a2:29:e2:40:23:af:42:e9:58:68:38:5e:18:f2:
                    cf:1a:1d:4e:b4:06:8f:18:97:c1:b9:05:5a:1d:78:
                    40:72:81:76:93:f3:42:da:f9:40:a6:0a:2a:2a:4d:
                    7d:d1:96:4d:ea:11:db:7c:0e:01:55:28:db:08:74:
                    52:b8:98:bf:0b:f0:04:c1:e2:e7:4a:2e:da:d1:b7:
                    f9:67:fc:e3:08:cf:cc:25:b9:c2:2f:a6:ed:f6:44:
                    d5:3c:7a:56:a7:ad:aa:c2:e4:0a:b2:de:92:3c:00:
                    53:0a:3f:fd:f2:7e:06:fd:98:4f:52:9c:0a:89:9c:
                    1f:30:4d:55:88:ba:e4:8e:3b:38:18:dc:71:2c:79:
                    99:eb:3e:e5:25:66:31:cd:8d:c6:8b:ec:c7:de:e2:
                    97:5d:17:57:da:15:74:bf:36:71:cc:49:2f:b4:98:
                    11:c6:3c:9c:fe:ad:49:ec:9b:dc:7c:6b:ab:ff:c6:
                    8b:54:8e:86:76:61:da:fa:b0:be:77:7d:26:c6:d4:
                    b2:06:63:65:ef:51:49:02:a2:a8:dc:61:12:e3:88:
                    d5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:CB:35:F3:4A:EE:CC:C8:75:80:C9:9C:91:56:3F:0C:B5:2B:75
            X509v3 Authority Key Identifier:
                keyid:4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2e:84:f3:69:58:4c:48:75:44:c9:b2:e1:1a:24:be:35:81:
         4d:ec:f7:98:76:08:75:52:6c:fe:6d:dd:01:af:aa:0d:f5:bf:
         d8:69:d5:d9:31:13:9a:ce:87:c4:60:65:e2:4f:0b:e9:77:66:
         75:9e:d5:79:06:aa:a1:d2:63:95:b5:17:b2:f2:66:5c:21:c8:
         03:d6:69:e7:ec:46:de:26:2d:98:b4:0a:f6:00:9c:38:64:5d:
         86:e1:b7:1c:69:22:47:96:28:5f:61:d8:c0:37:ad:7e:04:c8:
         ac:fe:26:75:f8:7e:63:aa:ad:41:72:2c:0d:04:d2:da:c5:5d:
         7c:7f:56:20:e4:a3:b1:f7:41:7b:4e:b0:16:be:b1:c2:eb:a5:
         b1:1f:f8:66:50:a4:20:c0:bd:64:6f:33:3b:99:aa:0f:ba:14:
         88:e6:88:17:4b:98:97:e1:fb:a7:21:d7:75:08:8a:f3:55:e0:
         03:2e:ff:1e:eb:f4:33:2a:f8:4c:71:c5:da:1a:3b:26:c5:74:
         14:22:5e:b6:bc:98:05:08:3b:23:34:21:a0:60:ec:d2:4b:84:
         48:9a:ca:d2:aa:a1:76:f6:23:3d:40:45:54:ed:ef:84:b8:50:
         6b:ab:a0:ee:10:6d:bb:e7:d6:ba:e7:81:08:cf:b4:c9:45:88:
         78:e0:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:09:15 2026 by rpki-client