Error: rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
File:                     ytp6EgVTRDeaE65t57onjrxRalg.mft (raw, json)
Hash identifier:          /rbQWfdweAdwY9xh0mK0BA42zEQircXIDb/OsAV1MXU=
Subject key identifier:   D8:CB:50:E5:B2:3C:B7:3A:41:3B:4E:F1:72:20:9A:96:ED:B5:9D:1A
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       0756
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
Manifest number:          0754
Signing time:             Sat 10 Oct 2026 02:27:04 +0000
Manifest this update:     Sat 10 Oct 2026 02:27:03 +0000
Manifest next update:     Mon 12 Oct 2026 02:27:03 +0000
Files and hashes:         1: ytp6EgVTRDeaE65t57onjrxRalg.crl (hash: S7smeiK4T9RKJSZUNzj4FSi9n6BxRVu6XGqUfjC0o28=)
                          2: BCAD96AE8FD211F19CA8B3F7CE1D38B0.roa (hash: VUHxWTqV5r7qTTGw3Wky8WcpizcFJEE4TswtzibFPmA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR, serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: Oct 10 02:27:03 2026 GMT
            Not After : Oct 12 02:27:03 2026 GMT
        Subject: CN=6ac9a278-7201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:fc:e7:55:0c:24:64:99:68:3b:1b:39:42:
                    cd:04:48:a2:fb:58:2a:82:d5:9c:4f:a0:21:26:e5:
                    27:d3:c6:e6:60:26:50:16:12:45:c3:bd:dd:de:85:
                    4f:66:d2:b2:4d:63:55:e8:7a:f9:54:74:7d:3e:ca:
                    45:4c:b0:f3:a3:a7:dd:b3:96:05:60:85:cd:ac:f4:
                    f3:99:aa:eb:31:7c:2c:15:79:77:69:46:e3:0e:6c:
                    a3:c0:05:65:da:12:d2:e8:ae:8d:83:49:d5:56:3c:
                    25:5b:3a:f8:f2:bd:43:b8:2c:35:94:27:2d:bd:08:
                    8a:86:7c:93:8c:7d:b0:e1:64:f8:6d:80:c8:cf:a8:
                    c1:e9:fb:a8:80:ea:55:44:cf:e2:00:97:53:94:5a:
                    63:99:05:db:4b:0e:1c:e4:19:bf:3f:ff:79:bd:10:
                    05:38:20:06:a8:7a:da:10:7b:35:d3:61:0c:bc:1d:
                    55:5a:80:ea:8f:e0:84:72:5b:61:82:15:f3:b5:2d:
                    0a:e5:35:a5:ae:52:fd:a3:db:9a:b5:73:4e:2d:e5:
                    76:c1:d4:53:b7:c0:ee:4c:0f:24:bf:2a:22:78:89:
                    c9:e2:66:9c:33:e3:4f:65:c2:d6:ea:2a:3b:06:50:
                    03:4f:57:4c:be:ed:71:76:37:37:40:2e:fb:64:9b:
                    5e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CB:50:E5:B2:3C:B7:3A:41:3B:4E:F1:72:20:9A:96:ED:B5:9D:1A
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:49:81:5f:36:29:5b:50:b7:b8:b5:7c:1b:49:23:75:7c:43:
         8b:c6:99:79:28:e0:39:32:2e:35:8c:f2:39:aa:a4:c8:2b:19:
         4f:ec:5a:01:8a:15:91:02:1a:04:51:29:42:ee:f8:61:52:2b:
         b9:78:1f:49:5b:3e:9e:27:ca:8e:fa:fd:2c:53:0b:6a:ca:0d:
         3f:c7:58:b3:e2:d4:4a:f9:49:f7:16:cb:bf:24:23:32:3d:9d:
         84:e1:10:ba:23:bc:70:c8:5a:9d:3c:6d:32:e6:9b:53:c7:ef:
         c2:4d:62:db:bc:b6:de:2f:70:fe:88:4c:1d:7f:54:91:71:84:
         a6:b0:e3:1c:35:fb:ce:d8:63:f6:26:8f:05:2e:75:6a:1a:ed:
         a3:bd:5f:61:bc:82:f0:d5:4a:52:16:ad:73:e1:c8:c5:7c:df:
         70:2e:55:f5:de:5a:fe:09:de:46:9b:e9:fb:20:49:a6:b9:b6:
         e6:a8:bc:5d:66:8d:b9:11:9d:0e:d5:f0:ec:c3:4d:0c:ae:ab:
         ee:b5:74:ba:79:0a:f4:33:52:9d:9a:3f:c2:1d:19:9d:c9:99:
         d8:ff:0b:2f:52:78:9a:81:aa:fa:b7:9e:9a:92:21:ed:a7:17:
         3f:e8:17:99:8c:ee:c4:d6:31:40:2a:bf:e5:0c:18:5f:c9:3e:
         d1:e5:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:38:53 2026 by rpki-client