Error: rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
File:                     vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft (raw, json)
Hash identifier:          8N0/46eJRX3rlwhpFsmeuQ1+T3+/HpGp4Xkp2dLzoHw=
Subject key identifier:   87:B9:44:03:EA:DD:F4:EB:1F:AE:F0:35:EB:DA:00:FA:66:F5:2B:51
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Certificate issuer:       /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial:       0102
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
Manifest number:          F7
Signing time:             Mon 26 Oct 2026 05:31:48 +0000
Manifest this update:     Mon 26 Oct 2026 05:31:47 +0000
Manifest next update:     Wed 28 Oct 2026 05:31:47 +0000
Files and hashes:         1: vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl (hash: CjwzYorasAgh4+bM7arwhPSFgbPx071wN9kL7tHuokU=)
                          2: 5F3F870C33ED11F180E878B3CE1D38B0.roa (hash: 7xialWnZN8O/jx++FVBr1LOwRlL8Ft6W6YRIeco4BCA=)
                          3: 12854A54342011F1B1B3FEE3CE1D38B0.roa (hash: pT0m2gWKIGIqpxCq5RWYoGgM1OEZ3jmMFyars3Vkhlo=)
                          4: F468593A341F11F19237EFE3CE1D38B0.roa (hash: T7CbuXXhwxyEGnxPwVGgVjsxTM/k3t9lVyPY1e3Aq94=)
                          5: 1FB6B30233EE11F1A6C4A8B7CE1D38B0.roa (hash: sbb9mXyfSj61UJjWbJwXmlAFr/cOrxQfzXZS3BVT1Ro=)
                          6: 35DF2FE833ED11F1B4145AB3CE1D38B0.roa (hash: A48YMHhA/dlybkCnRzYsuhf4oJk2hDb9PCemlafemBw=)
                          7: 861B94CE33ED11F1965390B3CE1D38B0.roa (hash: TggDZn/6+km0NmiNN9k3nE6i0CGJCXgqnNH4Fo/DA8k=)
                          8: 6478E0A0342011F191BE0FE6CE1D38B0.roa (hash: emC7GwLX61xHhM+cBfiU05CVWHA3VSY3bML+vXnttf4=)
                          9: D1FF3C60341F11F19A2BE6E1CE1D38B0.roa (hash: vlPWuJWoU9zTLPDgIJQsQdOrVIdbzbVOA1ve9uoqz1A=)
                          10: 3DF747BE342011F1A6EBDFE5CE1D38B0.roa (hash: 2JX7YfxLCoLtjBk/3MPBmLjpXRWBo37oy7tpgRQ6qiw=)
                          11: AA5B87D633ED11F181BB97B5CE1D38B0.roa (hash: 6Pd+u2gjjm+VgsR8IN1iRrAHY/KiGxo4zHwnk5HLQNY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
        Validity
            Not Before: Oct 26 05:31:47 2026 GMT
            Not After : Oct 28 05:31:47 2026 GMT
        Subject: CN=6adee5c4-4f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:29:50:d5:b1:d2:fa:3e:d5:29:9d:fd:8d:
                    f4:94:78:2d:d8:32:76:5a:ca:07:4d:5b:fd:19:1e:
                    e7:4b:a9:ba:e4:c0:be:43:12:d9:3e:c5:ca:36:65:
                    9c:41:09:0b:4c:e3:f8:b2:1d:1e:c2:4a:5a:e0:43:
                    32:3a:71:0f:5c:4d:2c:f1:fa:75:da:f0:b0:ea:db:
                    4b:1e:b3:2a:9b:34:f8:b5:2a:9a:eb:b9:82:ed:d4:
                    d2:30:57:aa:ce:19:22:20:97:0b:a4:55:86:3d:67:
                    28:7c:6b:82:29:b5:54:e7:b7:ff:ef:cf:20:ab:a4:
                    bf:4e:41:aa:2f:93:2d:51:9e:9d:4d:dc:b0:ef:c9:
                    4c:77:95:5b:5d:c8:d9:78:be:f4:ca:5b:84:10:1e:
                    61:99:41:84:37:fd:81:b6:75:40:89:5d:1c:ef:e2:
                    9c:75:05:e0:88:c4:d7:26:8e:78:e1:ce:87:ee:7c:
                    6a:e1:7f:ea:44:8f:f0:21:00:6a:05:3c:cf:7e:f9:
                    4c:d1:bf:10:a2:75:a9:15:4e:09:d0:2d:5a:b5:ad:
                    72:f5:f5:0e:84:95:76:8c:57:d6:53:8f:8e:4d:b6:
                    20:2c:63:2f:5e:4a:6a:e8:e1:18:76:5c:ff:94:b2:
                    ee:69:ad:e7:92:9b:93:cf:5e:eb:b5:f7:df:38:02:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B9:44:03:EA:DD:F4:EB:1F:AE:F0:35:EB:DA:00:FA:66:F5:2B:51
            X509v3 Authority Key Identifier:
                keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:05:a1:7a:88:40:4e:23:5d:c8:e6:6f:ab:61:7c:15:55:a1:
         a6:99:50:2f:f9:f6:13:79:de:6c:ff:be:46:03:d4:07:16:24:
         66:47:f8:e3:26:8f:60:85:69:29:a2:ef:86:a5:0d:36:2f:db:
         fd:17:28:9a:a5:02:5c:42:be:50:68:4b:02:b0:ad:de:e6:ac:
         67:da:bc:38:cd:ec:a7:26:99:39:d2:a0:f1:3a:6b:19:5b:f5:
         6a:d3:a0:3b:e3:bf:5b:92:6d:db:bc:b3:fc:51:d5:4d:00:32:
         ab:0c:04:4e:7f:04:fd:e6:7f:7c:28:35:db:f4:48:21:f0:b0:
         87:4a:b7:6f:43:28:19:b3:9f:1d:03:df:05:47:6d:10:b2:23:
         54:26:d3:b7:de:56:45:3d:9b:2e:02:b6:ce:1e:dc:59:52:07:
         8a:7b:c5:45:c6:46:0b:ac:2e:ef:3a:ef:c4:ef:be:9f:3e:9e:
         66:62:c1:ce:b4:20:01:38:67:07:6c:77:05:c0:28:f0:b3:fa:
         ff:e5:38:6f:5d:3c:62:75:20:2f:c6:3d:3f:c4:c3:c6:10:3f:
         77:9a:a8:01:c0:43:61:17:12:3a:16:be:cd:f6:35:c6:a3:25:
         b6:50:f7:ef:02:18:dd:33:45:21:20:89:83:4c:2a:30:26:e1:
         db:3a:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:54:43 2026 by rpki-client