Error: rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
File:                     xSvyehTUxJuqAvCZWQ287LDgS5c.mft (raw, json)
Hash identifier:          T/4S8Sg0PLgIvjoLelfSmC5RU18fwOs343HnlNP4Xoc=
Subject key identifier:   A5:B4:6D:33:A2:F1:72:F9:BE:59:08:DA:B5:78:2E:47:D0:F0:AD:AD
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Certificate issuer:       /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial:       0596
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
Manifest number:          0594
Signing time:             Wed 28 Oct 2026 03:08:05 +0000
Manifest this update:     Wed 28 Oct 2026 03:08:05 +0000
Manifest next update:     Fri 30 Oct 2026 03:08:05 +0000
Files and hashes:         1: xSvyehTUxJuqAvCZWQ287LDgS5c.crl (hash: 4kYD8QIcKgMiJnP3Gt3pKasgKnZWQ3d95ynOzve5w6Q=)
                          2: B307C7908CF411F1A260CE00CF1D38B0.roa (hash: 7+7iCNVIWT6E40tpferJJaH5xHzZfV/GotmSnRGdanQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                          rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AR, serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
        Validity
            Not Before: Oct 28 03:08:05 2026 GMT
            Not After : Oct 30 03:08:05 2026 GMT
        Subject: CN=6ae16715-6270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:ea:e1:99:eb:0c:7a:60:d7:bf:14:78:37:
                    88:db:34:46:a5:bb:04:13:71:45:a3:d5:c0:ad:b9:
                    4f:af:df:93:9a:dd:bf:da:a6:ad:1c:5a:1c:cd:9e:
                    f4:28:63:80:c5:af:f2:b1:92:90:a4:46:7e:43:95:
                    8d:19:08:5c:bf:7c:95:06:db:ba:f0:89:30:df:8c:
                    f1:df:f3:da:7f:af:29:fd:38:e5:33:67:7f:8f:b9:
                    0d:15:24:31:f7:e7:0b:90:87:cf:32:ee:83:0d:a3:
                    db:64:6e:7d:b1:0c:1f:5d:cd:f6:2e:0d:25:f5:d9:
                    12:ca:e2:6c:ef:aa:00:35:87:b9:81:ff:01:cf:87:
                    0a:1a:67:77:a5:34:4e:99:e8:b7:f3:89:87:f0:ba:
                    e5:41:78:a5:78:8d:01:62:93:b5:16:e1:c6:85:e9:
                    a3:6f:54:8a:20:73:d8:f5:3c:3b:8d:89:89:56:dd:
                    01:14:2c:6e:5b:01:5a:6a:c4:2f:1d:94:49:44:c1:
                    41:8b:6f:db:c2:f1:c3:74:c1:06:e9:82:e7:ea:cb:
                    59:5b:f2:5b:5d:7a:4c:ee:79:05:a5:cb:90:f0:5b:
                    ef:27:4c:16:65:17:4b:1c:03:5d:78:25:6d:f0:e0:
                    41:c6:74:dd:8c:02:e0:57:c3:26:68:81:03:b1:eb:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B4:6D:33:A2:F1:72:F9:BE:59:08:DA:B5:78:2E:47:D0:F0:AD:AD
            X509v3 Authority Key Identifier:
                keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ca:53:19:42:5b:e8:28:89:b9:7b:ab:57:9f:3d:8b:f8:82:
         af:05:9d:09:a6:d4:ee:cd:b5:4e:c3:48:74:38:03:08:e3:28:
         99:8d:f9:49:14:43:e0:23:6f:79:bd:bc:be:c6:65:0f:ac:e9:
         91:9f:99:8b:f4:25:b7:0c:40:97:ec:2e:de:ac:5d:89:e1:4c:
         6c:9c:f9:4f:b2:57:de:28:92:d1:40:cc:12:3f:0d:d0:a2:32:
         9c:73:75:78:36:71:09:52:f3:3b:78:a9:19:54:9e:e2:4d:5c:
         cc:73:c0:8d:e4:5f:ae:88:cc:ce:53:56:23:61:91:13:90:4e:
         e6:fc:ee:02:8b:6b:95:6b:8c:f0:fb:01:e5:87:ea:c7:70:ee:
         17:f7:71:fa:2d:43:10:e8:99:49:90:12:4f:1e:3b:bb:92:24:
         cc:eb:de:46:29:35:d0:fe:c3:ef:31:8e:17:08:b4:57:cc:90:
         9c:7d:2d:0a:d6:c2:c2:b6:ea:83:48:64:7d:30:bc:26:f3:1c:
         13:e3:ad:ce:1f:87:53:bc:08:8f:e7:2d:d0:4e:6f:57:e8:b4:
         01:1f:ef:3f:ca:a9:9f:47:8d:b8:09:76:f6:2f:29:24:08:2d:
         2c:90:24:dc:7b:db:9b:5c:29:9f:14:98:44:43:97:38:5c:24:
         19:38:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:20:41 2026 by rpki-client