Error: rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
File:                     wI8-3FkViULC3znxQl5uuCFovj4.mft (raw, json)
Hash identifier:          N7yzR0KhLogL9JzIfS7O6AoXvO+zgnt/3y7DWD+BPXU=
Subject key identifier:   D0:51:19:EA:53:FF:64:77:08:FC:9F:71:ED:76:10:29:5D:C7:F4:0B
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Certificate issuer:       /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial:       0806
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
Manifest number:          07E8
Signing time:             Sat 19 Sep 2026 06:30:51 +0000
Manifest this update:     Sat 19 Sep 2026 06:30:50 +0000
Manifest next update:     Mon 21 Sep 2026 06:30:50 +0000
Files and hashes:         1: wI8-3FkViULC3znxQl5uuCFovj4.crl (hash: GbdYQO6W+UfYnaeS0kTwEui2TpjQhwNNHuA4A97ltX0=)
                          2: C25C0D2A1BC811F1B18E4BBCDAE4EC9C.roa (hash: hhR0xPXrEMKwJdPRYu4lOTroB0RsLqhZXni+oqKK3dE=)
                          3: 758D6F7ADBF911F097A14B96DAE4EC9C.roa (hash: 1eCLw9NFPw198mKLTKMnAMjjGuv2YiLTQ1BBX+GD5mo=)
                          4: 56B5035C1BC711F1A35E3FB4DAE4EC9C.roa (hash: aXUTElSJyN5cSYnyAIiKlRyZTDYDil4DI7ezC6RNcas=)
                          5: 71CB76C01BC811F1B4BB27BADAE4EC9C.roa (hash: /Ve0RNx5Jc+k/t/SEN9lIJCeKWJyIR7/KUHPuJ/2upc=)
                          6: 2E8EE0041BC811F19A4361B8DAE4EC9C.roa (hash: 2E5plXNAAEewjlnsnzHq/4cM5qkp3EtovdNQ8R5EFBs=)
                          7: DDBA7F2C1BC611F19C09EFB1DAE4EC9C.roa (hash: bNRaSWgOzlSa4jhwe0JSxzZ03T3mND2JhbULWjzOEOY=)
                          8: B7AE4F561BC711F190BF25B6DAE4EC9C.roa (hash: hc6YfOQ0mvK+PcKMXNxpU+IX4NFTaXJSaCnWU8MKTH4=)
                          9: 886DFE761BC711F1B5905FB4DAE4EC9C.roa (hash: wo5lir3SPXlykEy+v0a16oO7+HgzN0guf6Y22e8cK+8=)
                          10: 08FE94EE1BC611F18BFB45ABDAE4EC9C.roa (hash: aw8mhciUc9JjZSntEyMggNvxrLq0CK4dHcDnmilyzK8=)
                          11: E4EC7E3E1BC711F184492DB6DAE4EC9C.roa (hash: dJlPMXVObEwo3AvwV2RtE/DkyyhLg0pXaDBv/53yQcI=)
                          12: 0D517C901BC711F1BF231FB2DAE4EC9C.roa (hash: i8YfmYkG2E4+BH+T/cPbjtE7eeYYd5GMcdC2q/a37FI=)
                          13: 33AD592A1BC911F19E383ABEDAE4EC9C.roa (hash: vdTigpEvRSmZws/TPKnqcmEKXFoG1ddg7/1/HExLgDg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Validity
            Not Before: Sep 19 06:30:50 2026 GMT
            Not After : Sep 21 06:30:50 2026 GMT
        Subject: CN=6aae2c1b-5e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:87:f0:d0:41:28:12:52:03:ed:32:29:82:cc:
                    fd:7f:f0:bb:5a:9b:8f:46:82:20:5e:22:c0:cc:d0:
                    25:88:13:21:06:64:6e:16:30:77:8e:e0:cf:80:38:
                    86:21:a7:29:2e:30:53:99:7d:d7:3f:cb:4c:af:c6:
                    1e:40:3b:00:8c:6a:b7:7c:96:dc:f0:63:9e:05:56:
                    01:02:7f:3d:9f:8d:cd:9e:10:51:9a:23:60:37:09:
                    33:60:7d:c1:de:bf:46:cd:b0:3c:98:87:09:69:3c:
                    88:62:6b:25:fe:b1:d0:02:ac:b7:78:4c:90:95:3f:
                    f0:6e:ce:ec:c5:e3:6b:df:31:35:37:87:3c:91:3d:
                    86:3f:f9:ac:27:c9:67:04:e8:65:6f:a3:3f:6b:ac:
                    8a:71:1b:fd:13:80:6a:23:bf:b4:bd:64:a5:f8:35:
                    da:d5:99:ac:3a:15:06:0e:6f:be:17:3a:fe:42:28:
                    09:a0:60:32:d0:2f:62:99:98:90:1c:8e:fd:5b:5c:
                    82:64:d4:e9:b9:86:f3:d1:52:fa:5c:ac:2e:06:85:
                    c5:d4:60:47:42:22:20:ef:4f:04:34:4b:97:50:25:
                    9d:b9:a1:60:04:77:39:91:6b:91:ce:e0:aa:69:f7:
                    c1:b7:15:bd:36:72:3a:27:61:66:73:b2:8e:b5:92:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:51:19:EA:53:FF:64:77:08:FC:9F:71:ED:76:10:29:5D:C7:F4:0B
            X509v3 Authority Key Identifier:
                keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c3:f5:d7:a0:f2:1b:36:5d:aa:bf:74:37:5c:f8:03:1b:2f:
         96:4b:7f:0d:52:ef:cc:32:08:ff:69:99:f7:91:56:23:1b:ba:
         78:b4:bc:b3:88:20:db:e6:0a:ac:87:7d:69:98:6a:8c:b7:8b:
         83:42:f1:fe:35:3b:b9:5f:26:e7:09:ae:51:f6:3a:f5:15:d3:
         19:08:ed:40:0b:42:b4:92:39:c7:d5:d5:14:6d:9a:93:a0:8e:
         25:95:23:98:2f:ba:d8:88:36:69:b9:31:d2:40:3a:59:61:ef:
         2f:55:e6:0b:4f:a3:bc:92:b4:e0:8f:1c:18:a7:7a:d7:45:0b:
         01:7b:48:76:48:b7:99:b5:68:0b:b0:7a:4c:d1:3e:d7:a9:48:
         7c:46:ba:8e:cc:0b:c0:cb:e2:05:c1:45:ee:b1:ce:d0:09:2b:
         47:9f:ce:de:32:53:5a:97:79:80:d7:32:2f:32:53:6b:4a:a8:
         26:c8:52:1f:fa:c4:2a:95:bf:ee:5b:a1:ad:c1:04:97:60:55:
         c8:a4:e5:62:a2:2a:fd:2f:a5:82:f1:ae:1f:c3:f6:7b:ce:03:
         c0:ea:54:26:08:51:d7:0a:85:ab:66:11:2e:8a:c0:38:60:3b:
         a6:e2:b3:7f:76:9d:2d:1f:3d:9e:9f:e8:90:85:28:ef:f1:d6:
         20:91:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:49:56 2026 by rpki-client