Error: rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
File:                     PuGjQpUbwSAiYnHzC4UKh356oZs.mft (raw, json)
Hash identifier:          6u/oNvoxODXlrbFp+mSE2i5yugQLrlIYNbxhPa0bd8s=
Subject key identifier:   E2:90:B4:42:3A:21:C2:AF:BF:94:59:03:FC:EA:95:2D:51:91:5B:AC
Authority key identifier: 3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B
Certificate issuer:       /CN=F36B95DEAR/serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
Certificate serial:       0930
Authority info access:    rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
Manifest number:          092D
Signing time:             Thu 29 Oct 2026 01:52:15 +0000
Manifest this update:     Thu 29 Oct 2026 01:52:14 +0000
Manifest next update:     Sat 31 Oct 2026 01:52:14 +0000
Files and hashes:         1: PuGjQpUbwSAiYnHzC4UKh356oZs.crl (hash: pJ/M2DU9OZAA0dEovxpFsRegUiVR9UVXDiMH8Y77KnM=)
                          2: 2AAAA51ACA5F11EAB07F4086F8AEA228.roa (hash: 9lpPgbRATZcc3ZHLRlyfVXyO2KMqQ5Z59ZWuFR9owTA=)
                          3: D0C0ABF8CA5E11EAB567CE85F8AEA228.roa (hash: ynXcFOQd3R7EbSd50GZihRiiSJvK2sTmwunIuzMYoks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
                          rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2352 (0x930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B95DEAR, serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
        Validity
            Not Before: Oct 29 01:52:14 2026 GMT
            Not After : Oct 31 01:52:14 2026 GMT
        Subject: CN=6ae2a6cf-9dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:f3:08:e7:74:53:b4:7d:68:70:cf:5b:84:
                    26:da:e0:b3:f1:72:3e:ed:7c:9b:0c:b5:3b:e3:71:
                    7b:c8:77:69:d3:7a:ce:f1:b3:d1:0d:5f:a2:95:75:
                    83:83:80:5c:fb:27:25:63:57:1b:d9:e5:5f:88:9f:
                    2c:b2:58:a1:0a:49:5f:1f:08:dc:32:93:77:db:bd:
                    2a:42:76:9e:61:6f:81:9f:38:f2:63:45:ec:1a:49:
                    c3:60:ef:3f:3a:17:03:0e:02:0d:5c:75:e3:c1:12:
                    67:f8:3f:56:40:be:1a:b7:64:33:2b:da:56:a2:ec:
                    ee:9a:9a:83:7c:ac:7e:24:10:c3:9c:77:12:68:51:
                    e8:09:70:0e:0e:50:7b:e8:0c:6c:9c:ff:29:e6:a0:
                    50:68:b8:9e:f6:74:d2:1d:9d:01:ab:cd:44:64:07:
                    f5:e6:84:b1:aa:06:cf:84:59:ba:0c:a1:77:f7:83:
                    a3:6e:51:e8:68:dd:ed:a2:23:a0:4d:e4:f4:32:ff:
                    eb:28:e4:1c:ab:ca:86:5e:25:ef:81:f7:c5:a5:5b:
                    96:51:77:54:4a:ea:d0:f2:5c:07:41:93:5b:6f:cb:
                    3b:fe:f3:44:ae:1c:b3:43:53:d4:96:fc:0f:d7:c2:
                    1e:36:54:5a:65:51:5a:d9:54:f9:24:88:e1:41:8c:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:90:B4:42:3A:21:C2:AF:BF:94:59:03:FC:EA:95:2D:51:91:5B:AC
            X509v3 Authority Key Identifier:
                keyid:3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:4c:38:87:ea:5f:6a:e5:a6:d0:3e:0a:17:85:b1:1d:f5:
         4c:43:7d:e7:e1:69:c5:ca:5d:97:55:8e:25:16:a3:dd:0c:94:
         a4:9b:bc:98:9d:f0:4e:8b:d2:be:88:f6:2e:92:f2:06:69:ff:
         9d:1e:a7:71:a0:2c:31:0c:3a:18:31:45:a5:f6:3b:f2:2f:15:
         04:e4:be:d8:a1:12:82:6c:32:25:7a:b2:92:43:e5:47:8e:91:
         68:f2:3d:99:27:71:5b:b7:bc:dc:1c:fa:0d:2d:41:5d:e1:3d:
         56:61:2b:32:0e:1f:58:8b:d4:df:65:6d:1e:cb:f5:35:0c:81:
         70:53:dd:43:d0:ba:4c:e2:9a:55:86:02:b6:d4:cf:ce:d9:c6:
         30:f1:95:9d:3f:85:63:4f:47:fb:44:42:33:18:2b:a6:a1:e0:
         c6:51:68:bf:11:08:d5:05:58:54:31:ea:87:f5:9c:ba:b1:ab:
         31:ef:cc:df:6a:b0:58:71:a4:0b:08:e4:e9:b6:b4:56:6c:17:
         39:e1:99:3e:ba:ca:ba:2d:9a:8f:44:21:7e:cd:34:32:bc:26:
         ac:12:b8:86:4b:9a:26:c1:ba:dd:55:9c:27:e8:b6:49:a8:04:
         4a:f5:54:e5:cd:6a:a7:0f:1a:d3:8d:95:47:3a:aa:e6:4c:56:
         c9:53:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:57:24 2026 by rpki-client