Error: rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft
File:                     MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft (raw, json)
Hash identifier:          uTsKer4LkdlE3Btih4iATe2y2MJztdUHBrad+0kt7WQ=
Subject key identifier:   EF:6D:A4:4D:15:DE:2C:F6:89:88:89:56:36:49:58:10:2F:F6:9A:0C
Authority key identifier: 31:87:83:D6:BB:F2:6A:28:D9:48:4F:59:20:CA:FA:B4:EB:36:4C:9A
Certificate issuer:       /CN=F36E1839AR/serialNumber=318783D6BBF26A28D9484F5920CAFAB4EB364C9A
Certificate serial:       0D02
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MYeD1rvyaijZSE9ZIMr6tOs2TJo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft
Manifest number:          0D01
Signing time:             Wed 28 Oct 2026 01:10:17 +0000
Manifest this update:     Wed 28 Oct 2026 01:10:17 +0000
Manifest next update:     Fri 30 Oct 2026 01:10:17 +0000
Files and hashes:         1: MYeD1rvyaijZSE9ZIMr6tOs2TJo.crl (hash: YDqudmKd2ctWAqQaUYbpAHbvcULsVx9nJ5TwHhjhxvk=)
                          2: 02637176DDC211E88D286E4DF8AEA228.roa (hash: r18K2LBKR3Ve2lxrI/U2/pWyaLJWaOZ135cghXKJBpc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft
                          rsync://rpki.afrinic.net/repository/arin/MYeD1rvyaijZSE9ZIMr6tOs2TJo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3330 (0xd02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1839AR, serialNumber=318783D6BBF26A28D9484F5920CAFAB4EB364C9A
        Validity
            Not Before: Oct 28 01:10:17 2026 GMT
            Not After : Oct 30 01:10:17 2026 GMT
        Subject: CN=6ae14b79-3e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:85:aa:38:04:79:a8:be:e6:1b:f2:cc:27:
                    f7:82:32:bb:6b:b8:43:8d:f9:72:b8:a9:02:91:f3:
                    f2:37:44:03:11:53:db:22:6a:78:6a:f1:2c:25:6b:
                    81:c4:59:f7:47:67:f7:0a:4e:81:f0:0d:7f:c6:bc:
                    d6:bf:c5:1c:b8:eb:ca:b6:4e:cf:5d:3e:6f:8a:4e:
                    15:88:d5:21:08:0d:5f:38:95:d6:9c:1c:2e:b9:42:
                    4b:ee:56:fc:b5:35:99:28:4a:74:29:b0:7e:2e:27:
                    f9:2c:bd:fb:90:e9:31:d1:52:c0:a3:c1:26:0e:8d:
                    de:22:59:78:33:ab:c2:78:f4:c1:ea:b8:29:47:e9:
                    9a:5c:dd:6c:26:c3:40:91:1a:a1:e4:07:9b:b3:6e:
                    13:b7:2e:50:a9:4a:28:b6:c5:0a:be:d5:12:7a:ec:
                    6b:ea:35:e8:2e:3c:58:e5:92:7d:d3:17:cc:16:54:
                    b0:ce:e6:73:ef:86:44:67:0c:dd:38:10:a7:0c:06:
                    7b:a9:f5:6d:f3:48:3b:1e:a5:0d:7d:03:1c:0d:0e:
                    ce:e3:00:2f:01:47:18:53:82:72:44:94:45:b8:4a:
                    01:c7:eb:df:9d:f8:3e:f7:66:c8:6a:f5:98:35:34:
                    48:5d:36:e6:52:0c:99:21:17:82:f7:e1:01:b3:db:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6D:A4:4D:15:DE:2C:F6:89:88:89:56:36:49:58:10:2F:F6:9A:0C
            X509v3 Authority Key Identifier:
                keyid:31:87:83:D6:BB:F2:6A:28:D9:48:4F:59:20:CA:FA:B4:EB:36:4C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MYeD1rvyaijZSE9ZIMr6tOs2TJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:99:33:1f:97:57:c3:67:8c:37:e3:58:8a:f9:ac:78:6b:e4:
         4f:4c:e5:b6:55:91:e5:2d:c5:33:a3:43:44:fc:ef:82:a6:1d:
         60:a9:bb:96:41:a7:f3:cd:ee:78:6c:6d:27:a0:33:98:33:9d:
         d6:42:8f:24:84:68:e3:57:cb:ce:e4:7b:28:88:01:e7:ee:87:
         41:99:82:d4:ff:b3:88:3f:fa:b7:40:a7:be:24:3c:05:48:ed:
         18:72:b1:b8:f2:66:be:6c:e8:10:6a:a2:ad:e3:59:24:a6:91:
         1c:a8:04:ed:36:94:9b:39:8f:96:77:cd:4c:e5:b4:49:df:69:
         9b:dc:c4:a6:30:ee:2f:34:02:8f:b6:9a:f2:fa:be:c0:1d:7e:
         13:1f:00:d8:7b:3b:5b:7a:3f:61:18:a0:41:97:bb:04:d5:da:
         a7:73:63:4b:89:4e:0b:31:3b:29:76:e9:29:1e:d4:c6:73:ee:
         ef:80:6f:8a:bb:a5:b1:70:d0:09:70:f8:2e:26:03:df:3a:fc:
         10:4f:75:55:08:7b:f5:87:3f:8e:76:f3:5c:d3:6e:37:84:4a:
         e6:ba:e3:60:f6:9a:4f:04:07:ad:41:ed:5b:e9:a2:d4:3e:a1:
         7d:75:f1:c6:a2:c9:21:75:42:bb:54:36:dc:8f:22:7b:44:69:
         88:98:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:49:17 2026 by rpki-client