Error: rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File:                     9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier:          FIJiw9YIU1uE4iXX138qw+oP+igUa+8vc+ZbYUCZMwk=
Subject key identifier:   38:6C:6D:16:9D:E1:20:4A:7A:35:00:DB:99:F0:2A:86:34:22:9D:AD
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       0360
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number:          035B
Signing time:             Tue 27 Oct 2026 04:18:14 +0000
Manifest this update:     Tue 27 Oct 2026 04:18:14 +0000
Manifest next update:     Thu 29 Oct 2026 04:18:14 +0000
Files and hashes:         1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: iN2l2Mfe1+ipP+Xc8MfCB9Uw0COLq7yD1zYQbt0+DVs=)
                          2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
                          3: 8AE0C950CC5211F08901D0F0DAE4EC9C.roa (hash: p6vdnsJDN6upI5W/Ww4HUUN2q0hJo9P4coEtR26YSjc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 04:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: Oct 27 04:18:14 2026 GMT
            Not After : Oct 29 04:18:14 2026 GMT
        Subject: CN=6ae02606-a50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:93:c3:a1:f9:2b:0e:60:8c:67:b1:69:01:ed:
                    b7:ad:0c:a9:35:7c:41:be:9d:cc:39:e4:59:b7:e3:
                    7b:e9:45:a3:7a:36:e1:6a:89:7e:a6:9c:6d:05:d5:
                    65:2e:87:4e:8d:aa:d0:4b:7e:e2:59:78:9d:d8:45:
                    56:39:01:37:aa:a4:66:20:a9:61:7a:9b:3d:b8:24:
                    ef:5c:b5:4e:b9:a2:f2:2f:80:98:21:51:1f:53:81:
                    c4:80:cd:37:de:4b:86:58:d1:a4:6d:fc:41:41:5a:
                    b7:e0:40:32:63:dd:4c:2f:a0:44:b9:61:ea:24:17:
                    3d:b6:8a:58:a6:94:a7:d8:92:d0:da:ea:93:33:f9:
                    af:4c:ed:64:fc:f5:48:25:d9:c0:28:20:68:0c:b6:
                    fd:91:42:4d:6a:7e:51:bd:03:39:88:33:4e:2d:53:
                    0a:4c:df:1a:f1:88:f4:99:8b:06:af:1a:09:8a:10:
                    78:06:40:76:be:81:49:40:5a:3a:37:7d:1e:43:7f:
                    a4:c9:cd:b2:b4:29:e8:62:f8:cd:ca:3c:bb:89:4d:
                    0d:70:63:7d:03:93:b0:c1:3d:ad:ad:6a:7a:90:c5:
                    92:8d:ed:aa:be:68:b1:fd:a6:84:77:cb:d2:6b:fa:
                    8c:e1:3b:e9:7d:56:6b:80:58:b4:99:0a:b2:3e:20:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6C:6D:16:9D:E1:20:4A:7A:35:00:DB:99:F0:2A:86:34:22:9D:AD
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:09:84:e1:12:56:91:6f:5d:46:11:75:df:0c:d5:67:5b:
         2e:86:f3:f6:2b:17:69:19:cf:57:eb:83:12:f4:88:08:39:ac:
         fd:64:45:05:08:a8:d3:a4:da:ac:e1:91:61:34:72:78:e0:56:
         b9:ff:3c:38:d7:e8:f7:0d:55:f8:04:2a:42:8a:c2:86:5b:8b:
         73:c2:75:31:59:ae:a3:22:7a:05:fd:8f:8f:75:a5:2e:84:4a:
         57:7d:e8:d3:28:88:8d:10:65:46:d5:26:14:26:d2:0a:75:34:
         87:c9:77:93:e9:3c:b1:b4:0e:05:cf:33:c1:32:c5:66:db:d8:
         d2:7e:f1:9f:04:ea:f2:ef:eb:5a:e0:a6:47:30:9f:83:ea:9b:
         ca:d0:30:41:34:74:e7:e6:10:79:e7:81:42:dd:01:a6:e0:47:
         b8:6e:52:c6:36:41:51:71:8d:2f:1b:24:f1:a5:da:bf:9e:d8:
         01:2e:88:ac:cb:92:3e:ae:76:3e:c6:18:1d:a7:e8:ee:f5:06:
         f0:c6:ec:00:d8:35:a3:75:83:62:52:0e:31:c4:4d:21:1b:58:
         aa:4a:a4:90:43:c2:c7:37:9a:cc:ef:e9:85:cd:63:1c:e6:0a:
         78:90:99:c0:8a:cc:e3:4f:9d:2a:31:07:03:37:d7:69:a7:0a:
         de:8c:d4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:17:20 2026 by rpki-client